SCCM Configmgr 2012 SSRS Patch Compliance Report Per Collection Per Update Group

In order to check the Patch compliance/Deployment status,there are some default reports ,one of the widely used report to know the compliance status for specific Update group on specific collection is –>Compliance 1-Overall Compliance.

But the sub report /drill down/Linked report to view the list of non complaint computers do not provide you the required information for troubleshooting clients like its last hardware inventory, os, last logged on user, last loggedon timestamp etc.For this reason,I created custom SSRS Report that will help me to get some nice statistics and extra client information .

Last month I did post about Software update Patch Compliance report Per OU Per Update Group to get the patch compliance status based on OU.

This time ,I would like to share another Software Update Compliance report per Collection Per Update Group with linked report to list non-compliant computers.

Here is the first report to know compliance % per collection.

image

Drill down report to list the non-Compliant computers (Required/UnKnown):

image

 

Download the RDL Files available from TechNet Gallary ,upload to your SSRS Reports,change the Data source .

Happy troubleshooting .

23 Responses to "SCCM Configmgr 2012 SSRS Patch Compliance Report Per Collection Per Update Group"

  1. Hi Eswar,
    why the Compliance 1-Overall Compliance report tell me that i have some servers in Unknown status? The same servers in sccm section "Monitoring\Deployments" are in Compliant state??.

    Can you help me?

    Thanks
    Francesco

    Reply
    1. Hi,
      Are you checking the status for the same deployments (SUG) in both reports and monitoring?
      There shouldn't be any difference, if at all, the reporting section is more accurate than the console monitoring.

      Thanks,
      Eswar

      Reply
  2. Hi Eswar,
    could you assist me to adapt the data source ? Should the SQL server stay as data source (second radio button) that i need to adapt the connection string or can i choose a ConfigMgr folder (first radio button) ?

    Regards,

    Theo

    Reply
    1. Hi,
      when you upload the reports to SSRS folder ,you can change the datasource to the default configmgr one that is created for you when you setup SSRS reports.

      Thanks,
      Eswar

      Reply
  3. Hello, These reports look great. I was wondering how to change the Data source as far as finding what the datasource should be. I found a shared data source that matches another app report and if I use that I get results until I drill down into the computers non compliant. Any help would be greatly appreciated.

    Reply
    1. Hi Joe,
      If you have multiple data sources ,you must choose the one that is configured correctly with SQL info init. you can go to properties of any default report and make note of what data source it uses ,follow the same.

      Regards,
      Eswar

      Reply
  4. After drilling down that far, is it possible to see what update failed, or is making the machine non-compliant? We are a small shop, so I can easily see what machines are not 100% compliant, but I can't find a way to see what update caused it. Thanks

    Reply
  5. Is there a report that shows the failed update for a specific computer? We have a small shop, and can easily enough show what machines are not compliant, but none of the reports show a specific computer with a failed update from an update group

    Reply
    1. Hi Justin,
      sorry for delay. You can check the enforcement status of report for specific software update group or you can drill down through the default software update reports available.

      Regards,
      Eswar

      Reply
  6. Hi Eswar,

    I don't see any report for installed machines. If you click on 2nd report you were trying to get only required and unknown machines and i tried to modify the report but unable to list the installed machines.

    select stateID, "statename"=
    case when stateID='0' then 'Unknown'
    when stateid='2' then 'Required' end
    From v_StateNames
    where stateid in (0,2) and TopicType=300
    group by stateID,statename

    Reply
    1. Hi Syed,
      The main purpose of the report is to focus on non-compliant and unknown status that is the reason i didnt look at compliant machines as there is no action required on installed or compliant machines.
      if you need to know the list of installed machines ,edit the existing RDL file (2) ,modify the SQL /reporting properties.

      Regards,
      Eswar

      Reply
  7. Hi Eswar,

    These reports are great. I have multiple software update groups which automatically create every month for say office, win 10, win 7 etc. Do you know a way to subscribe to the reports but always select downloaded software update group. Mine changes every month you see and I'm struggling to automate the report.

    Reply
    1. Hi James,
      IF you have standard format for these multiple software update group ,then YES ,i THINK you can some sort of variable's in the report to subscribe and send report for that or use the modified or creation date for these multiple software updates to send report .I have not tried it though but just giving you some hints to take it further.

      Regards,
      Eswar

      Reply
  8. hi Eswar,

    We are having altogether 3000 servers among these 2000 get automatically patched .
    can you please suggest me how to run a report to get the correct status of all these servers because it is not possible to check the individual servers all the time.

    so can you plz guide me on this

    Reply
    1. Hi,
      whats wrong with this report ? put all the servers into 1 collection and run this report for specific SUG and collection ?

      Regards,
      Eswar

      Reply

Leave a Reply to Eswar Koneti Cancel reply