Machines check in to see if there's anything new for them. New deployments, AV definitions if you're using SCEP, all the little maintenance items. Take a look at your logs directory after bootup. There's lots of logs that are updated, meaning your client has been doing lots of little tasks.
From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Gary Ossewaarde Sent: Tuesday, July 29, 2014 6:28 AM To: mssms@lists.myitforum.com Subject: [mssms] ccmexec at login Does anyone know what ccmexec is doing at (first) login? I'm working with a deep-frozen lab, so each login is a "first" login. We don't use roaming profiles/profile redirection at all, either. I ran a boot trace with the Windows Performance Toolkit and noticed ccmexec doing a decent amount of disk IO. Is this software inventory? That doesn't seem to make sense to run that at login. Any ideas?