Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To configure file associations with SCCM, create the desired defaults on a reference Windows computer, export them with elevated DISM, package the XML with a script that imports it, and deploy that package to a pilot collection before broad rollout. The core import command is Dism.exe /Online /Import-DefaultAppAssociations:"%~dp0AppAssociations.xml". This procedure is documented in a Microsoft Q&A answer for Windows 10, so validate it on the Windows 10 or Windows 11 builds, user states and deployment timing used in your environment.

What SCCM is configuring

A Windows file association connects a file-name extension or protocol with a registered application. For example, an organization might want a particular archive utility to open .zip files, a PDF reader to open .pdf files, or a browser to handle a web protocol. Windows does not reliably accept arbitrary machine-level registry edits for changing these choices. Since Windows 10, applications must register their supported associations, and Windows protects users’ default selections from applications that try to replace them after installation. Microsoft describes the supported configuration model in its Application Registration documentation.

SCCM (Configuration Manager) is useful because it can deliver a prepared association file and run DISM on managed computers. The package approach changes the online operating-system installation when the program runs. It is different from a policy that is evaluated at sign-in and different again from servicing a Windows image before deployment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose the deployment model before building anything

Approach Best fit When associations are applied Authority and important caveat
SCCM package with online DISM import Already deployed clients managed by Configuration Manager When the package program executes The practical Microsoft Q&A recipe is scoped to Windows 10; pilot it on every Windows build you manage.
Group Policy or MDM policy Organizations that want a centrally assigned configuration file At user sign-in For this setting, MDM takes precedence over Group Policy even when MDMWinsOverGP is not configured.
Offline image servicing Task sequences, reference images and newly provisioned devices When the WIM or VHD is serviced before deployment Multiple imports are not cumulative; combine the desired entries into one XML first.

Use one authority for a given deployment ring where possible. If a device receives an SCCM import and an association policy, determine which one should own the result and test the interaction rather than assuming that the last process to run will win.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

Prerequisites and a safe pilot plan

  • A reference computer running the Windows edition and build that your clients use.
  • Every application that should appear as a default handler installed and fully registered on that reference computer.
  • Local administrative access for the export command and for any online import performed by the SCCM program.
  • An SCCM package source containing the XML and an import script.
  • A small pilot device collection representing the production hardware, Windows releases, user profiles and security context.

Do not create the XML immediately after imaging or application installation. Microsoft warns that delayed-install applications can leave a new machine’s export incomplete. Allow application installation and registration to finish, then verify the defaults interactively in Windows Settings.

Build the association XML on a reference computer

1. Install and select the intended applications

On the reference computer, install the applications that should handle the file types and protocols. Open Windows Settings and explicitly choose each required default. Selecting an association matters: an application that is the only registered handler can be treated as an implicit choice and may not appear in an export until you select or reselect it.

Check representative files from each extension and protocol. If the application offers its own “make default” button, use Windows Settings as the final authority so the selection is recorded in the Windows association system rather than only inside the application.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Export with elevated DISM

Open Command Prompt as an administrator and export the online image. This example writes the file to C:SourceAppAssociations.xml:

Dism.exe /Online /Export-DefaultAppAssociations:"C:SourceAppAssociations.xml"

The export captures the associations Windows considers defaults on that reference installation. Microsoft’s Export or Import Default Application Associations guide covers this workflow and the corresponding image-servicing operations.

Rank #2
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

3. Check that the export is complete

Open the XML as text and review the extensions and protocols you expect. Then compare it with DISM’s list of default associations:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Dism.exe /Online /Get-DefaultAppAssociations

  • Look for every business-critical extension and protocol.
  • Confirm that the application identifiers in the XML belong to applications installed on the target clients.
  • If an expected entry is absent, reselect that association in Windows Settings, wait for delayed-install applications to finish, export again and compare the two outputs.
  • Keep separate baseline files for materially different Windows releases when registrations or supported extensions differ.

Do not hand-edit an application identifier unless you have verified that the target application registers that exact identifier on the target build. An XML file can be syntactically valid while referring to an application that is not registered, in which case Windows cannot use the association.

Create the SCCM package source

Use a simple source layout

Create a source folder such as C:SCCMSourceFileAssociations and place these two files in it:

  • AppAssociations.xml, the export from the reference computer.
  • ApplyAssociations.cmd, a batch file that imports the XML from its own directory.

Using %~dp0 makes the script locate the XML beside the script, regardless of the temporary directory from which SCCM runs it. The batch file can contain:

@echo off
Dism.exe /Online /Import-DefaultAppAssociations:"%~dp0AppAssociations.xml"
exit /b %errorlevel%

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep the XML and script together when you update the package source. The import command must run elevated; configure the SCCM program to use the administrative execution context appropriate for your environment and test that context on a pilot device.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Create and distribute the package

  1. In the Configuration Manager console, create a package whose source is the folder containing the XML and batch file.
  2. Create a program for that package with ApplyAssociations.cmd as the command line.
  3. Distribute the package content to the distribution points that serve the pilot collection.
  4. Deploy the program to a small test device collection before selecting production collections.

The Microsoft Q&A example uses this same pattern: package the XML with a batch file that invokes online DISM, then deploy to a test client first. Read the accepted answer, dated February 15, 2023, at Microsoft Q&A: Configure WinZip as the default program on Windows 10. The example demonstrates a practical Windows 10 procedure; it is not a guarantee that every Windows 11 configuration, execution context or application behaves identically.

Pilot validation: prove the association, not just package success

A successful SCCM status only shows that the program ran. Validate the resulting Windows behavior on each pilot device.

  1. Confirm that the client received the current XML and script version.
  2. Check the program’s exit status and review the client-side execution log for permission, content-location or DISM errors.
  3. Sign in with the user state that matters in production and open files for every managed extension.
  4. Use Windows Settings to inspect the current defaults and verify the expected application is shown.
  5. Test both an existing user profile and a newly created test profile when your rollout includes both situations.
  6. Repeat the checks on each supported Windows build and on devices that receive applications at different times.

Record the Windows build, application versions, user profile state and package execution time for each pilot result. Association behavior can depend on those conditions, so a result from one reference machine is not evidence for every client combination.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Policy-based configuration with Group Policy or MDM

If associations should be controlled centrally at sign-in instead of by a one-time SCCM package, use the Windows policy named Set a default associations configuration file. In Group Policy, the setting is under Computer Configuration > Administrative Templates > Windows Components > File Explorer. Microsoft’s Policy CSP documentation describes the same setting and states that it “allows an administrator to set default file type and protocol associations.” See Policy CSP – ApplicationDefaults.

Point the policy to an association XML that is available through the management mechanism you use. The policy is device scoped and the configured associations apply when users sign in. This timing is materially different from an SCCM package that runs whenever its program is executed.

Windows 11 versioning behavior

Starting with Windows 11, version 22H2, the policy supports a Version attribute on DefaultAssociations and a Suggested attribute on an Association. Incrementing Version causes suggested associations to be applied once. Associations that are not marked suggested apply at each sign-in. Use this distinction deliberately: mark only the defaults you want to offer or reapply once, and raise the version when you intentionally publish a new suggested baseline.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

MDM takes precedence over Group Policy for this setting even when MDMWinsOverGP is not configured. If results differ from expectations, check whether the device is enrolled in MDM before changing the XML or SCCM package.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Import associations into an offline WIM or VHD

For task-sequence and image-building workflows, DISM can import the XML into an offline Windows image. Microsoft describes this as a way to update the default programs associated with file-name extensions or protocols while building an image.

  1. Mount the WIM or VHD to an empty folder, for example C:Mount, using the DISM image-mount operation appropriate to your image.
  2. Import the prepared XML into the mounted image with the offline form of /Import-DefaultAppAssociations, targeting the mounted Windows directory.
  3. Review the imported values with the offline form of /Get-DefaultAppAssociations.
  4. Unmount the image and commit the changes before deploying it.

Offline imports are replacement operations rather than an append-only list. If you need associations from two files, merge the desired entries into one XML and import that combined file. Importing file A and then file B does not create a cumulative set containing both files.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Common failure modes and fixes

The XML does not contain an expected extension

The export may have occurred before delayed-install applications finished registering, or Windows may have treated the association as implicit because only one application handled it. Finish installation, explicitly select the default again, run Dism.exe /Online /Get-DefaultAppAssociations, and export a new file.

The package reports success but the default did not change

Check that the SCCM program ran with the required administrative rights and that the XML was present beside the script. Confirm the command line uses %~dp0AppAssociations.xml and inspect the client log for DISM’s return code. Then test the same command in an elevated prompt on the affected build to separate a package-delivery problem from an operating-system or registration problem.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The application is missing from Windows’ default-app choices

An association file cannot make an unregistered application eligible. Verify that the application is installed and has registered the extension or protocol on that Windows build. Reinstalling or repairing the application may be necessary, but validate registration before rebuilding the XML.

Best Value
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

User choices keep changing at sign-in

Look for the default-associations policy. Non-suggested policy entries apply at every sign-in, while suggested entries in Windows 11 version 22H2 and later are reapplied once when the policy version changes. Also check for MDM, which takes precedence over Group Policy for this setting.

Two XML imports produce an unexpected result

Do not treat imports as cumulative. Build one XML containing the complete desired set, import it once, and use that file as the versioned baseline for the deployment ring.

Windows 10 and Windows 11 produce different results

The SCCM procedure cited by Microsoft is a Windows 10 example. Application registrations, policy features and default-protection behavior can vary by Windows release. Maintain a baseline for each major release where necessary and run a pilot on every supported build before broad deployment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Maintaining associations over time

  • Refresh the baseline XML whenever a major Windows version changes application registrations or supported extensions.
  • Re-export after adding or removing a handler and review the resulting file rather than assuming the old XML remains valid.
  • Version the XML and batch file together in your package source so a client never receives mismatched content.
  • Keep a pilot collection permanently available for testing new application versions and Windows updates.
  • Document which system owns the setting—SCCM, Group Policy, MDM or the offline image—to avoid competing configuration sources.

Do not attempt to force defaults with direct registry edits or by assuming an installer can overwrite a user’s selection. Windows’ supported association mechanisms, application registration and controlled policy or image workflows are more reliable and easier to validate.

Operational checklist

  1. Install and fully register the target applications on a reference computer.
  2. Select every required default explicitly in Windows Settings.
  3. Export with elevated DISM and compare the XML with /Get-DefaultAppAssociations.
  4. Correct omissions caused by delayed installation or implicit associations.
  5. Package the XML with an import script using the exact /Online /Import-DefaultAppAssociations command.
  6. Distribute to a pilot collection and validate real file opening under the intended user and device states.
  7. Expand deployment only after each supported Windows build passes, or use the policy or offline-image method when its timing and authority better match your rollout.

Frequently Asked Questions

Can I use one association XML for every Windows release?

Only if testing confirms that the applications register the same identifiers and supported extensions on every release. Microsoft’s guidance recommends refreshing the baseline for each major Windows version because registrations and supported extensions can change.

When should I increase the policy Version value?

Increase it when you intentionally publish a new suggested-association baseline and want Windows 11 version 22H2 or later to apply those suggested entries once. Raising it on every sign-in is not the intended behavior.

Does importing a second XML add only its new entries?

No. Association imports are not cumulative. Merge the complete desired set into one XML before importing it into an online installation or offline image.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why should a package be piloted even when DISM returns success?

DISM execution confirms that the command ran, but the visible result also depends on application registration, Windows build, user profile, deployment timing and competing policy. Opening representative files and checking Windows Settings on pilot devices verifies the actual outcome.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.