SCCM Configmgr Software update Compliance Report for multiple Software Update groups per collection

 

Long ago ,did blog post on How to get software update compliance for specific update group per collection with drill down report to list the Required/missing ,unknown clients with some additional information like recent hardware inventory, last update scan results ,OS etc .

This report will only work for single software update group per collection ,but in Configuration Manager ,there could Multiple Software update group created as part of Patching process and it would be difficult to know the compliance status for the same collection for multiple update groups and this task become tedious if you run the same report multiple times and write down the results into file.

with the help of Configuration Manager console ,it is possible to see the Compliance % (Required, installed ,Unknown  and %) for the software update group for the deployed collection but if you want to see the same for multiple update groups and get the list of Required Clients etc ,not possible ,Thus you need SSRS Report.

Wouldn’t it be nice to have SSRS Report that list the Software update compliance for multiple update groups per collection ?

This report is lying in my bucket for longer time and finally going out to public.

I have made little changes to the report (nothing major ) with respect to prompts (select multiple update groups) and drill down report changes as well.

This report allow you to select multiple Update groups and single collection as shown below . you need to action on Required (a.k.a Missing) and Unknown status (Client having issues with software update scan ).

It has 3 RDL files 1) Update compliance Status for multiple Groups per collection and 2) Linked report to know what are the client with specific Software update Status (Required ,Unknown) 3) List all missing updates for specific client.

First report looks like below:

image

Installed—>Specifies that the software update is applicable on the client computer and that the client computer already has the software update installed.

Not Required—>Specifies that the software update is not applicable on the client computer, and therefore, the software update is not required.

Required –>Specifies that the software update is applicable and required on the client computer

Unknown—> Specifies that the site server has not received a state message from the client computer,could be various reasons like scan did not run successfully,scan completed but state message did not sent successfully etc.

Click on the dark blue colour to see the Required ,Unknown clients for the selected software update group for specific collection.

image

As you see above snippet, click on the arrow pointed towards computer name to see the list of missing updates for specific client.

image

 

Download the Reports from TechNet Gallery ,Upload to your Configmgr SSRS reports ,Change the Data source and Run the Report .

How to troubleshoot software update issues ,refer http://eskonr.com/2015/04/sccm-2012-troubleshoot-client-software-update-issues/

10 Responses to "SCCM Configmgr Software update Compliance Report for multiple Software Update groups per collection"

  1. Hi Eswar love this report "Software Update Compliance Status Per Collection for Multiple Groups" and then click on those who req the sug "List Computers with Specific Status Per UG Per Collection " But is there any way to go a step and se what patches are missing? not only the Update Group :"ADR Patch Tuesday Security And Critical Updates"
    Best Regards
    Ricky

    Reply
    1. Hi Ricky,
      I have updated the post with your requirement ,hope you will find it useful. Redownload the files and upload to your SSRS reports folder.

      Regards,
      Eswar

      Reply
  2. Thanks for all of the great posts! I am needing a report similar to this that shows the enforcement states for a deployment by collection. Is there a way to modify the report "States 1 - Enforcement states for a deployment" to include a collection filter?

    Thanks!

    Reply
    1. Hi,
      Nope, you can get only get the enforcement state for the collection that are deployed with software update groups. You cannot get enforcement states for non-deployed collections as they dont send any enforcement states like downloaded updates,failed etc.
      IF you have deployed a software update group to multiple collections and you want to use filter in this report ,you can do so by using the following SQL query:
      Replace the parameters like assignment ID and collection ID .

      select
      DeploymentID=a.Assignment_UniqueID,
      DeploymentName=a.AssignmentName, a.CollectionName,a.CollectionID,
      Available=a.StartTime,
      Deadline=a.EnforcementDeadline,
      LastEnforcementState=sn.StateName,
      NumberOfComputers=sc.StateCount,
      --PComputers=convert(float, sc.StateCount*100.0) / isnull(nullif(@COLLCOUNT, 0), 1),
      DeploymentStateID=sc.StateType*10000 + sc.StateID
      from v_CIAssignment a
      cross apply(select StateType, StateID, StateCount=count(*) from v_AssignmentState_Combined where AssignmentID=a.AssignmentID and StateType in (300,301) group by StateType, StateID) sc
      left join v_StateNames sn on sn.TopicType=sc.StateType and sn.StateID=sc.StateID
      where a.AssignmentName='SOFTWARE UPDATE ASSIGNMENT'
      and a.CollectionID='COLLECTION ID'
      order by sc.StateCount desc, sn.StateName

      Regards,
      Eswar

      Reply
  3. Very useful Eswar, exactly what I needed to unify SU compliance reports.

    I added some semaphoric color coding to make it more visual for quick inspections. You can include it if you like it.

    On "Software Update Compliance Status Per Collection for Multiple Groups" report on properties of the data row, I changed Fill > Backgroundcolor Expresion by

    =Switch(Fields!Success__.Value < 50,"Tomato", Fields!Success__.Value = 75, "LightGreen")

    and sorted results by Sucess ratio

    Thanks for such excellent report.

    Reply
    1. Hi Jose,
      Glad it helped you and thanks for your thought. Yes, you can lot more changes depends on the requirement using this basic report.

      Thanks,
      Eswar

      Reply
  4. This report SCCM Configmgr Software update Compliance Report for multiple Software Update groups per collection is really close to what my CIO is looking for, except he wants the 'dwell time' between a patch release and it's deployment on the target systems in a collection. How can I get the 'dwell time' i.e., the time between when a software update patch is released and when it's deployed? A thousand thanks in advance!

    Reply

Leave a Reply