Click on User and Device Affinity and set Allow user to define their primary devices to Yes.

If you will not be using Endpoint Protection, you may want to leave this at 7 days or however frequently you wish to push updates. NOTE: We want software updates to scan every day to deploy Endpoint Protection (antivirus) defitions to all of our clients.Click on Software Updates and schedule software updates to happen every 1 days.Select Yes under Add default Application Catalog website to Internet Explorer trusted site zone.Select the value that matches your intranet FQDN and click OK.Select Computer Agent and then click on the Set Website… button near Default Application Catalog website point.Click Client Settings, right click on Default Client Settings, select Properties.Verify you can access the website from a remote machine (you will need Silverlight in order to browse the page).

Enter your Organization name, select a Website theme, and click Next >.NOTE: If you have a PKI environment, go ahead and check HTTPS and hit Next > to encrypt your network traffic.Check Application Catalog Web Service Point, Application Catalog Website Point, and click Next >.Expand Site Configuration and select Sites and right click on your site and select Add Site System Roles.Click on Administration in the bottom left corner.Launch the System Center 2012 R2 Configuration Manager console.This guide will go over installing the Application Catalog to allow users to choose software they may wish to download and install (that you have already approved), configuring the SCCM client options, deploying the client, and verifying the client has been installed.

This guide is in continuation to my guide on deploying system center 2012 r2 configuration manager, as found here.

Sccm client settings