Trace Changes in SCCM via Audit Messages

Who deleted the Collection? Who Modified the Collection? Who Deployed the application? SCCM Audit Reports?

The SCCM Audit Status messages will help you get answers for most of the accidental issues that happen in the SCCM environment. In this video, we will see how to trace who deleted or modified, or changed SCCM Settings.

SCCM Audit Status Messages Track Who Deleted Modified Changed Settings

How to Trace SCCM Deletions

SCCM Audit Status messages

The above video tutorial will provide more details about the details audit messages. How many default audit reports are available in SCCM? How many SCCM audit status messages are stored in SCCM etc.

SCCM Audit Trace Changes in SCCM via Audit Messages
Trace Changes in SCCM via Audit Messages

Report name Description ( SCCM audit ) Administration activity log – Displays a record of administrative changes made for administrative users, security roles, security scopes, and collections.

Administrative user’s security assignments Display administrative users, their associated security roles, and the security scopes associated with each security role for each user.

Objects secured by a single security scope Displays objects that an administrator assigned to only the specified security scope. This report does not display objects that an administrator associates with more than one security scope.

Security for a specific or multiple Configuration Manager objects Displays securable objects, the security scopes associated with the objects, and which administrative users have rights to the objects.  SCCM audit reports.

Security roles summary Displays security roles and the Configuration Manager administrators associated with each role.

SCCM audit: Security scopes summary Displays security scopes and the Configuration Manager administrative users and security groups associated with each scope.


Latest SCCM Related Posts –

SCCM Health and Status Summarizers

SCCM Status Summarizers helps to troubleshoot on many issues. Following are the content of this video post where I explained about different ways to get SCCM health details via SCCM Status Summarizers. In this video you will also learn how to check SCCM components health with the help of status Summarizers.

SCCM Site & Compoenent Status

SCCM sites and Component Status summarizers group summaries of two kinds of data and those are software SCCM component health and physical system health.

What is SCCM Status Summarizers?
List of SCCM CB Status Summarizers
Health Details of a SCCM Site via WMI class
Health Details of SCCM Site via SQL Views

Summary class (SMS_SummarizerStatus) within WMI helps you to determine the SCCM health > This also helps to determine the status, of different aspects of SCCM Infrastructure. The SCCM status summarizers are getting input from status messages, states, and counts.

You can determine the overall health or status of a site, in SCCM, by inspecting the SMS_SummarizerSiteStatus object Status property. SCCM Health details are retrieved from SCCM Status Summarizers.  The Status property has three possible values:

0The site is healthy.
1The site has warning conditions.
2The site has error conditions.

How to To determine SCCM health with  Status Summarizer

    1. Set up a connection to the SMS Provider. For more information, see About the SMS Provider in SCCM.

    1. Get the SMS_SummarizerSiteStatus object by using the Configuration Manager site code.

  1. Inspect the SMS_SummarizerSiteStatus object Status property to determine the site status

The deployment summarizers track the progress of deployed programs as they are advertised and run on the client computers. SCCM deployment status summaries count the different types of messages generated by advertisements.

Site system and package.application status summaries track the state changes instead of counting the error messages. For example, site system status summaries react to changes in free disk space on a site system. If the free space falls below the threshold you set, the site system’s status summary health indicator changes.


More Details about SCCM Health and Status Semmaries here

Latest SCCM Related posts –