Referencing the Microsoft TechNet article titled How to Manage User Device Affinity in Configuration Manager @

How to configure the site to automatically create user device affinities

Use the following procedure to enable your Configuration Manager site to automatically create user device affinities from usage data that is reported by client devices.

Configuration Manager reads data about user logons from the Windows Event log. To be able to automatically create user device affinities, you must enable the following two settings from the local security policy on client computers to store logon events in the Windows Event log.

  • Audit account logon events
  • Audit logon events

You can use Windows Group Policy to configure these settings.


Be careful implementing these policies in Windows XP.  By default the Event Log retention policy is 7 days and it is very likely to fill up the Security Event Log.  Standard users will not be able to logon if the event log is full.  To prevent this problem, also implement this policy in the GPO path Computer Configuration \ Policies \ Windows Settings \ Security Settings \ Event Log

  • Retention Method for security log = Overwrite events as needed

I also suggest making the event logs larger so sufficient data will exist for UDA.  I recommend 5-20 MB for the Event Logs.  This can be scripted and deployed via SCCM or just lock the value using this GPO

  • Maximum security log size = 20480 KB
SCCM 2012 User Device Affinity and Windows XP
Tagged on:         

One thought on “SCCM 2012 User Device Affinity and Windows XP

  • May 21, 2013 at 8:30 PM

    The Microsoft TechNet article has been updated with my warning! Thank you, Carol Bailey, for being so gracious!

Comments are closed.