Automatic Client Upgrade greyed out

In ConfigMgr 2012 SP1 you might run into the Automatic Client Upgrade feature being greyed even if you are a full administrator. In this example I have a group called ConfigMgr Administrators that has been assigned Full Administrator rights but are still not able to enable the Automatic Client Upgrade settings.


  1. To fix the issue log in with the account that installed the primary site server. In the Administration workspace, select Security, Administrative Users and open the properties for the ConfigMgr Administrators group.
  2. Click Add, Security Scope and select All Security Scopes.


  3. Click OK and all users in the ConfigMgr Administrator groups are now capable of enabling the Automatic Client Approval feature.


By |2013-02-19T18:00:33+00:00February 19th, 2013|Configuration Manager (SCCM), Security|11 Comments

About the Author:

Kent Agerlund
Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009. Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more. Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.


  1. […] Upgrade greyed out February 19, 2013 robertrieglerwien Leave a comment Go to comments Share this:PrintEmailLike this:Like Loading… Categories: MS: Deployment […]

  2. eswar February 20, 2013 at 5:39 - Reply

    This is not applicable for me as I do have option to enable it though am assigned with full administrator rights.

  3. Mike February 20, 2013 at 19:21 - Reply

    Hi Kent,

    I seem to have shot myself in the foot. The client upgrade option is greyed out, so I went into the security properties and found that the account I used to install everything (server’s local admin) but the “All security scopes” too is greyed out too. Then I noticed something very odd – the account is listed with “status: Deleted”. Sure enough the option to delete is greyed out.
    I’ve just update my lab to SP1 which went fine, but I realised I need to update the clients too and have stalled on this.

    Have you any ideas?

    many thanks,
    PS: am re-reading your book ready to setup a fresh lab, everything has worked a treat expect patches but that’s another story.

  4. Cherif April 24, 2014 at 13:52 - Reply

    I setup cloud distribution point using certificates exported from my main primary site server, cer and pfx.
    I added them into azure portal then into sccm console to setup cloud dp. Then it seems to confuse my primary site server running as distribution point and the cloud one.
    I deleted the cloud distribution and distribution point role disappeared from primary site server, also adding new role option by right clic is grayed out.
    Any help please?

  5. DrunkAgain July 23, 2014 at 17:58 - Reply

    This worked well for me, thanks! It still shows the old, non-updated version in the page…I’ll give it time to update and hopefully it fixes itself.

  6. […] isn’t enabled, and further it’s¬†greyed out. Now what? Fortunately I find this article easily enough, and logging into the Primary Site server with the SCCM service account and starting […]

  7. Rash June 25, 2015 at 12:09 - Reply

    Awesome, thanks! We just updated to SP2, and I decided to sort out the ACU. Fortuantely, the guy who set up the site was available to sort the security scopes. He retires next week. lol ūüėõ

    I referenced your blog from here:

    I hope that’s okay.

  8. Pelle September 6, 2015 at 10:21 - Reply

    Would anyone have any suggestions on what to do if you’re not as fortunate as Rash in the comment above..? I would greatly appreciate it! ūüôĀ

    • Col September 29, 2015 at 18:38 - Reply

      I am in the same position, a thrid party installed SCCM and I cannot change the settings.. did you find an answer?

  9. Diensh January 22, 2018 at 2:46 - Reply

    Awesome post. Works like Champ. Thanks

Leave A Comment