Class security Level Vs Instance Level Security Rights You can configure the security rights either the class level or the instance level in SMS/SCCM. These rights basically helpful in providing the access to the SMS objects like collection,packages,reports and many more too! class security rights: It applies to the entire class like SMS site.Let say if you have collection called "All windows systems" and inturn it has child collection "All XP","All Vista" etc.If you apply class security rights on"All windows systems" it automatically applies to child collections. Instance security rights:The name itself gives the answer,it is applied to an instance.If…
Author: Eswar Koneti
some times its hard to know the systems which are having issues in reporting their inventory and even some systems doesnt reporte anything to the site server though the client is installled on it. Here is the collection which gives you all computers which doesnt report inventory for x days(taken 15days). select SMS_R_System.ResourceID,SMS_R_System.ResourceType,SMS_R_System.Name,SMS_R_System.SMSUniqueIdentifier,SMS_R_System.ResourceDomainORWorkgroup,SMS_R_System.Client from SMS_R_System where ResourceId in (select SMS_R_System.ResourceID from SMS_R_System inner join SMS_G_System_WORKSTATION_STATUS on SMS_G_System_WORKSTATION_STATUS.ResourceID = SMS_R_System.ResourceId where DATEDIFF(dd,SMS_G_System_WORKSTATION_STATUS.LastHardwareScan,GetDate()) > 25) or ResourceId not in (select ResourceID from SMS_G_System_WORKSTATION_STATUS) Good luck in troubleshooting why it doesnt report 🙂 Hints: solution that i tried got worked. 1.check if you…
You can take a remote of any SCCM client by disabling the Firewall. But for security reasons/project requirement,the windows firewall should be ON,in this case,you can not do remote control from SMS/SCCM.Either you should disable the firewall or enable the SMS/SCCM reports to allow communication. In this post,i will show you i you can achieve this by adding the SMS ports to the windows firewall. 1.Open the windows firewall (from cmd ,run firewall.cpl or you can also open it from control panel) 2.Go to exceptions and click on add port. 3.Name it as SMS1 or any name which…
Below are the basic log files (more understandable way) that are helpful in troubleshooting the client issues if there are any application instllation failure/inventory and other issues.This information has been compiled from Microsoft Knowledge Base Article 867490 A list of windows update error codes can be found here. CAS.log ."CAS" means "Content Access Service". In this Log you will find the local Package Cache status. useful in Downloaded package issues and "cache out of space" errors. Make sure package content access is completed. ccmexec.log ."CCMEXEC" means "Client Configuration Manager Executive" and it is nothing else that the SMS Service itself (ccmxec.exe) Log.…
This gives list of machines where the group policy database file not updated .Before creating the SCCM web report,software inventory has to be enabled for GPO file secedit.sdb file which will is available in  %windir%\security\database. collection(WQL): select SMS_R_SYSTEM.ResourceID ,SMS_R_SYSTEM.ResourceType ,SMS_R_SYSTEM.Name ,SMS_R_SYSTEM.SMSUniqueIdentifier ,SMS_R_SYSTEM.ResourceDomainORWorkgroup ,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SoftwareFile on SMS_G_System_SoftwareFile.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SoftwareFile.FileName = “secedit.sdb” and DATEDIFF(dd,SMS_G_System_SoftwareFile.ModifiedDate,GetDate()) > 15 Now you have to figure out why it is not updating SCCM Report(SQL): select a.Name0 ,cs.UserName0 [Last loggedin],os.Caption0 [OS] , CONVERT(VARCHAR(12),b.ModifiedDate,107)As "GPO Date Last Applied" from v_R_System a join v_GS_SoftwareFile b on b.ResourceID=a.ResourceID join v_GS_OPERATING_SYSTEM OS on Os.ResourceID=a.ResourceID join v_GS_COMPUTER_SYSTEM…
This Report will help you in identifying the collection that are member of any other parent collection. SELECT COL.CollectionID, COL.Name, COL.Comment, CTSC.parentCollectionID FROM dbo.v_Collection COL, dbo.v_CollectToSubCollect CTSC WHERE CTSC.subCollectionID = COL.CollectionID The above report is to get collection with its parent collection but if you want to know the root map of particular, go with this post http://blogs.catapultsystems.com/mdowst/archive/2012/02/23/finding-sccm-sub-collections.aspx
Gives list of computers where Programs installed recently. SELECT CS.Name0, CS.UserName0, ISW.ProductName0, ISW.VersionMajor0, ISW.VersionMinor0, ISW.Publisher0, ISW.RegisteredUser0, ISW.InstallDate0, ISW.InstallSource0 FROM dbo.v_GS_COMPUTER_SYSTEM CS, dbo.v_GS_INSTALLED_SOFTWARE ISW WHERE ISW.ResourceID = CS.ResourceID ORDER BY ISW.InstallDate0 DESC, CS.Name0, CS.UserName0, ISW.ProductName0
Select Sys.Name0, Sys.SMSID0, Sys.Domain0, Sys.SystemRole0 from dbo.v_GS_SYSTEM Sys Where Sys.SMSID0 = @GUID Prompt for GUID: select SMS_Unique_Identifier0 from v_R_System