Close Menu
    Friday, November 22

    SCCM Configmgr Software update Compliance Report for multiple Software Update groups per collection

    Eswar KonetiBy 3 Mins Read configmgr 18,399 Views

     

    Long ago ,did blog post on How to get software update compliance for specific update group per collection with drill down report to list the Required/missing ,unknown clients with some additional information like recent hardware inventory, last update scan results ,OS etc .

    This report will only work for single software update group per collection ,but in Configuration Manager ,there could Multiple Software update group created as part of Patching process and it would be difficult to know the compliance status for the same collection for multiple update groups and this task become tedious if you run the same report multiple times and write down the results into file.

    with the help of Configuration Manager console ,it is possible to see the Compliance % (Required, installed ,Unknown  and %) for the software update group for the deployed collection but if you want to see the same for multiple update groups and get the list of Required Clients etc ,not possible ,Thus you need SSRS Report.

    Wouldn’t it be nice to have SSRS Report that list the Software update compliance for multiple update groups per collection ?

    This report is lying in my bucket for longer time and finally going out to public.

    I have made little changes to the report (nothing major ) with respect to prompts (select multiple update groups) and drill down report changes as well.

    This report allow you to select multiple Update groups and single collection as shown below . you need to action on Required (a.k.a Missing) and Unknown status (Client having issues with software update scan ).

    It has 3 RDL files 1) Update compliance Status for multiple Groups per collection and 2) Linked report to know what are the client with specific Software update Status (Required ,Unknown) 3) List all missing updates for specific client.

    First report looks like below:

    image

    Installed—>Specifies that the software update is applicable on the client computer and that the client computer already has the software update installed.

    Not Required—>Specifies that the software update is not applicable on the client computer, and therefore, the software update is not required.

    Required –>Specifies that the software update is applicable and required on the client computer

    Unknown—> Specifies that the site server has not received a state message from the client computer,could be various reasons like scan did not run successfully,scan completed but state message did not sent successfully etc.

    Click on the dark blue colour to see the Required ,Unknown clients for the selected software update group for specific collection.

    image

    As you see above snippet, click on the arrow pointed towards computer name to see the list of missing updates for specific client.

    image

     

    Download the Reports from TechNet Gallery ,Upload to your Configmgr SSRS reports ,Change the Data source and Run the Report .

    How to troubleshoot software update issues ,refer http://eskonr.com/2015/04/sccm-2012-troubleshoot-client-software-update-issues/

    Share.

    Related Posts

    43 Comments

    1. Pingback: SCCM ConfigMgr Compliance status of client for multiple software update groups | Eswar Koneti Blog

    2. CHENG SUN on

      Hi, thank you for the report. A question, or request. The 1st report, is compliance status per collection for multiple groups (can be 1 SUG as well). The 2nd report, it shows all the clients in that collection with status Required against the selected SUG. In the 3rd report, it shows all the missing updates on the selected client. Is it possible to show missing updates against the selected SUG in Report 1? That is, if there are 20 updates in SUG1, can Report 3 show how many updates are required but missing on select client, out of the 20 in SUG1?

      Reply
      • Eswar Koneti on

        Hi,
        For 1 SUG ,you already have default software update reports hence i created this for multiple SUG groups .
        I think for your requirement to see report for 1 SUG ,you can use the default SUG reports.

        thanks,
        Eswar

        Reply
        • Nacho on

          Hi Eswar, first of all thank you for your great job. I share the point of Cheng Sun, if would be great if i can drill down to see just the updates for the SUGs involved in my first selection in your Report 1. When i share this reports to another IT collegaues they always 'complain' about this. We just need to see the updates that belongs to the multiple SUGs we select in Report 1.

          Thank you very much
          Nacho

          Reply
          • Eswar Koneti on

            Hi Nacho,
            This is in my pending list and i understand the needs. Due to other priorities in office 365 projects, could not able to manage it.
            I will look at it and keep update the blog post.
            Sorry for the delay.

            Thanks,
            Eswar

            Reply
      • olivier on

        HEllo,

        Thank for this report.
        Where i can find it ? The link to the Technet seem broke, and i don't see it on your Github?
        Olivier

        Reply
    3. Stephen Palladino on

      Great Reports they where working fine but now that i have the full amount of users into our new SCCM setup when i run the report against multiple software updates groups and specify our main patching collection around 7000 end points it spins and fails after a long time saying it was cancelled by user. If i run it against one update group against the same 7000 end point collection it will finish it takes about 8 minutes... has anyone else had this issue when pointing to multiple groups and a large collection? Is there a fix?

      Reply
    5. Paul on

      This report is very useful. Just wondering if it could easily be adjusted to show the results of all groups together as a single set of values like an overall compliance type of report?

      Reply
      • Eswar Koneti on

        You mean all software update groups against specific collection ? If so, yes that can be done but need time to create.Will add to-do list.

        Regards,
        Eswar

        Reply
    6. Rune U on

      Hi Eswar

      Thank you for this report, it's very helpful.

      However I have a problem: When running the report, I choose a Software Update Group and Collection, then click Required to see the lists of clients.
      Then when I click a specific client, it lists all required updates in the SCCM DB, not limited to those in the Software Update Group I selected earlier.

      Is that by design?

      I was expecting it to limit by software update group like this report: http://eskonr.com/2015/12/sccm-configmgr-ssrs-report-get-list-of-missing-updates-for-pc-from-specific-software-update-group/

      Thank you
      Rune

      Reply
      • Eswar Koneti on

        Hi Rune,
        Nope,that is not by design however linked report needs to be adjusted to take the software update group that you selected as input.
        Need to look into the code to modify the report .These days very busy with O365 project hence delayed.

        Regards,
        Eswar

        Reply
        • Rune U on

          Thank you. I found a way to link one of your other reports to the one I mentioned and now I have a working solution.
          Let me know if you want a copy 🙂

          Reply
    7. Kaspars on

      Hi
      Why I see strange behavior on the second report and maybe it also influences first one too. I have approved november updes. But I wanted to check how October ones are doing. For example I see that 34 computer missing updates in Update group 10 2017. I click on missing number and see computers. When I click on one of computers I see no october updates missing but allready November (revised date 11-2017).
      How is that? So I cant realy see compliance for previos month.

      Reply

    8. Pingback: Hilfreiche ConfigMgr-Reports aus der Community | clientmgmt.de by André Picker [MVP]

    9. Muzzy on

      Great job Eswar! I wonder if it possible to rebuild this report in a opposite way - aka "Compliance report for Multiple Device Collections per update group"? Thank you in advance for your reply!

      Reply
    10. Frank on

      Thanks for this, it's just what I needed. Have an issue with the first report in the series "Software Update Compliance Status Per Collection for Multiple Groups". When running it via Report Builder it seems to work fine. The issue I'm having is when I run it via a browser http://sccmserver/reports, the page appears blank after choosing 'update group' & 'collection'

      Reply
      • Eswar Koneti on

        Hi Frank,
        Strange that ,it works fine in reporting builder but doesnt when running browser. can you try to import the reports again into folder ,change the datasource and run it ?
        I just tried the reports, it works fine for me.

        Regards,
        Eswar

        Reply
    11. lenny on

      Hi Eswar

      Want to start of by saying awesome report and thanks for sharing!

      However i got an issue, when click on the Required or unknown links i receive this following error:
      Reports/2.List Computers with specific status per UG per Collection' cannot be found. (rsItemNotFound)

      Are you able to point me into the right direction to fix this?

      Cheers

      Reply
      • Eswar Koneti on

        Hi Lenny,
        can you check if you have other 2 reports uploaded into the same folder ? This report contain 3 reports as said in the blog post.

        Regards,
        Eswar

        Reply
    12. sccm_buff on

      Hi Eswar, New Report which gives inventory of your hostname and also the required updates, but the required updates are not referred from SUG selected in first report (from where we start), infact its referring to all required updates for that hostname, Correct me if i am wrong.

      Reply
    13. Ricky Kollberg on

      Hi Eswar love this report "Software Update Compliance Status Per Collection for Multiple Groups" and then click on those who req the sug "List Computers with Specific Status Per UG Per Collection " But is there any way to go a step and se what patches are missing? not only the Update Group :"ADR Patch Tuesday Security And Critical Updates"
      Best Regards
      Ricky

      Reply
      • Eswar Koneti on

        Hi Ricky,
        I have updated the post with your requirement ,hope you will find it useful. Redownload the files and upload to your SSRS reports folder.

        Regards,
        Eswar

        Reply
    14. Justin Sparks on

      Thanks for all of the great posts! I am needing a report similar to this that shows the enforcement states for a deployment by collection. Is there a way to modify the report "States 1 - Enforcement states for a deployment" to include a collection filter?

      Thanks!

      Reply
      • Eswar Koneti on

        Hi,
        Nope, you can get only get the enforcement state for the collection that are deployed with software update groups. You cannot get enforcement states for non-deployed collections as they dont send any enforcement states like downloaded updates,failed etc.
        IF you have deployed a software update group to multiple collections and you want to use filter in this report ,you can do so by using the following SQL query:
        Replace the parameters like assignment ID and collection ID .

        select
        DeploymentID=a.Assignment_UniqueID,
        DeploymentName=a.AssignmentName, a.CollectionName,a.CollectionID,
        Available=a.StartTime,
        Deadline=a.EnforcementDeadline,
        LastEnforcementState=sn.StateName,
        NumberOfComputers=sc.StateCount,
        --PComputers=convert(float, sc.StateCount*100.0) / isnull(nullif(@COLLCOUNT, 0), 1),
        DeploymentStateID=sc.StateType*10000 + sc.StateID
        from v_CIAssignment a
        cross apply(select StateType, StateID, StateCount=count(*) from v_AssignmentState_Combined where AssignmentID=a.AssignmentID and StateType in (300,301) group by StateType, StateID) sc
        left join v_StateNames sn on sn.TopicType=sc.StateType and sn.StateID=sc.StateID
        where a.AssignmentName='SOFTWARE UPDATE ASSIGNMENT'
        and a.CollectionID='COLLECTION ID'
        order by sc.StateCount desc, sn.StateName

        Regards,
        Eswar

        Reply
    15. Jose Sisto on

      Very useful Eswar, exactly what I needed to unify SU compliance reports.

      I added some semaphoric color coding to make it more visual for quick inspections. You can include it if you like it.

      On "Software Update Compliance Status Per Collection for Multiple Groups" report on properties of the data row, I changed Fill > Backgroundcolor Expresion by

      =Switch(Fields!Success__.Value < 50,"Tomato", Fields!Success__.Value = 75, "LightGreen")

      and sorted results by Sucess ratio

      Thanks for such excellent report.

      Reply
      • Eswar Koneti on

        Hi Jose,
        Glad it helped you and thanks for your thought. Yes, you can lot more changes depends on the requirement using this basic report.

        Thanks,
        Eswar

        Reply
    16. Anna Orlove on

      This report SCCM Configmgr Software update Compliance Report for multiple Software Update groups per collection is really close to what my CIO is looking for, except he wants the 'dwell time' between a patch release and it's deployment on the target systems in a collection. How can I get the 'dwell time' i.e., the time between when a software update patch is released and when it's deployed? A thousand thanks in advance!

      Reply
      • Eswar Koneti on

        Hi Anna, where do you want to see the dwell time and deployment time? Which report are you referring to?

        Reply

    Leave a Reply

    This site uses Akismet to reduce spam. Learn how your comment data is processed.