I would like to thank the Configmgr Product group and in particular Bhaskar, as he created the script .

However you should first try this script in a lab and see if it fits your needs .

This guide is in continuation to my guide on deploying system center 2012 r2 configuration manager, as found here.

My scope is domain machines and that portion is working fine. NOTE: SCCM will poll Active Directory only once per day @ 6PM, the collections automatically update at 7PM.If your computer does not appear in the collection immediately this will be why.4) On subsequent reruns the script will check if a collection with the same name exists or not and if it does it will skip.The only 2 things I would still add to the script and I am busy trying to figure it out is : – Check for incremental updates ( in case you would add a user directly into it ) – Check the default collection update (7days) I have not written this script myself .Customers are looking for a more granular way to automatically populate groups to ease operational management.Conditional Access capabilities are both now Generally Available in the Azure portal.