The below scripts works for only Win 2000 and XP not for other operating systems .Here are the simple steps that you can achive this(getting a report for local administrators).*******test it once before taking it to production***************** 1.Go to the X:\smsinboxes\clifiles.src\hinv\sms_def.mof where X is SMS installed Drive,edit SMS_DEF.MOF file (If you have already edited it ,not changes are required .If you are doing it in SCCM environment for the first time, u can still do the same in SMS_DEF.MOF file.) 2.At the very bottom ,Add these lines to the MOF file . //***********************************Local admins*********************** //#pragma namespace ("\\\\.\\root\\cimv2\\sms") [ SMS_Report …
Author: Eswar Koneti
Here is the collection that gives you a list of machines with specific staus message ID: select sys.ResourceID,sys.ResourceType,sys.Name,sys.SMSUniqueIdentifier,sys.ResourceDomainORWorkgroup,sys.Client from sms_r_system as sys inner join SMS_ClientAdvertisementStatus as offer on sys.ResourceID=offer.ResourceID WHERE AdvertisementID = 'GSA2035F' and LastStatusMessageID = 10009 10009 is success, replace advertisementID with your advertisement ID. With specific State name: SELECT sys.ResourceID,sys.ResourceType,sys.Name,sys.SMSUniqueIdentifier,sys.ResourceDomainORWorkgroup,sys.Client FROM sms_r_system as sys inner join SMS_ClientAdvertisementStatus as offer on sys.ResourceID=offer.ResourceID WHERE AdvertisementID = 'KBS00289' and LastStateName = "Failed" Below are the list of status messages with the discription: SMS Status Message ID's. 10050 Cache too small 10061 Download failed (retrying) 10003 Failed (bad environment) 0 No messages have…
Class security Level Vs Instance Level Security Rights You can configure the security rights either the class level or the instance level in SMS/SCCM. These rights basically helpful in providing the access to the SMS objects like collection,packages,reports and many more too! class security rights: It applies to the entire class like SMS site.Let say if you have collection called "All windows systems" and inturn it has child collection "All XP","All Vista" etc.If you apply class security rights on"All windows systems" it automatically applies to child collections. Instance security rights:The name itself gives the answer,it is applied to an instance.If…
some times its hard to know the systems which are having issues in reporting their inventory and even some systems doesnt reporte anything to the site server though the client is installled on it. Here is the collection which gives you all computers which doesnt report inventory for x days(taken 15days). select SMS_R_System.ResourceID,SMS_R_System.ResourceType,SMS_R_System.Name,SMS_R_System.SMSUniqueIdentifier,SMS_R_System.ResourceDomainORWorkgroup,SMS_R_System.Client from SMS_R_System where ResourceId in (select SMS_R_System.ResourceID from SMS_R_System inner join SMS_G_System_WORKSTATION_STATUS on SMS_G_System_WORKSTATION_STATUS.ResourceID = SMS_R_System.ResourceId where DATEDIFF(dd,SMS_G_System_WORKSTATION_STATUS.LastHardwareScan,GetDate()) > 25) or ResourceId not in (select ResourceID from SMS_G_System_WORKSTATION_STATUS) Good luck in troubleshooting why it doesnt report 🙂 Hints: solution that i tried got worked. 1.check if you…
You can take a remote of any SCCM client by disabling the Firewall. But for security reasons/project requirement,the windows firewall should be ON,in this case,you can not do remote control from SMS/SCCM.Either you should disable the firewall or enable the SMS/SCCM reports to allow communication. In this post,i will show you i you can achieve this by adding the SMS ports to the windows firewall. 1.Open the windows firewall (from cmd ,run firewall.cpl or you can also open it from control panel) 2.Go to exceptions and click on add port. 3.Name it as SMS1 or any name which…
Below are the basic log files (more understandable way) that are helpful in troubleshooting the client issues if there are any application instllation failure/inventory and other issues.This information has been compiled from Microsoft Knowledge Base Article 867490 A list of windows update error codes can be found here. CAS.log ."CAS" means "Content Access Service". In this Log you will find the local Package Cache status. useful in Downloaded package issues and "cache out of space" errors. Make sure package content access is completed. ccmexec.log ."CCMEXEC" means "Client Configuration Manager Executive" and it is nothing else that the SMS Service itself (ccmxec.exe) Log.…
This gives list of machines where the group policy database file not updated .Before creating the SCCM web report,software inventory has to be enabled for GPO file secedit.sdb file which will is available in %windir%\security\database. collection(WQL): select SMS_R_SYSTEM.ResourceID ,SMS_R_SYSTEM.ResourceType ,SMS_R_SYSTEM.Name ,SMS_R_SYSTEM.SMSUniqueIdentifier ,SMS_R_SYSTEM.ResourceDomainORWorkgroup ,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SoftwareFile on SMS_G_System_SoftwareFile.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SoftwareFile.FileName = “secedit.sdb” and DATEDIFF(dd,SMS_G_System_SoftwareFile.ModifiedDate,GetDate()) > 15 Now you have to figure out why it is not updating SCCM Report(SQL): select a.Name0 ,cs.UserName0 [Last loggedin],os.Caption0 [OS] , CONVERT(VARCHAR(12),b.ModifiedDate,107)As "GPO Date Last Applied" from v_R_System a join v_GS_SoftwareFile b on b.ResourceID=a.ResourceID join v_GS_OPERATING_SYSTEM OS on Os.ResourceID=a.ResourceID join v_GS_COMPUTER_SYSTEM…
This Report will help you in identifying the collection that are member of any other parent collection. SELECT COL.CollectionID, COL.Name, COL.Comment, CTSC.parentCollectionID FROM dbo.v_Collection COL, dbo.v_CollectToSubCollect CTSC WHERE CTSC.subCollectionID = COL.CollectionID The above report is to get collection with its parent collection but if you want to know the root map of particular, go with this post http://blogs.catapultsystems.com/mdowst/archive/2012/02/23/finding-sccm-sub-collections.aspx