SCCM – Client health report for a specific computer

*** Update August 28: I have updated the RDL file and added the information for CM client 1606 . I’ve also added the required permission for the datasource***

In this post I will share with you a report that I’ve build to get all the information required for a specific computer. This report is divided in 4 different tables and here are the details;

  1. Operating System, in this table you will get all the information about the OS, such as display name, last reboot, etc. Specific_Comp_1
  2. Configuration Manager Client & AD, well this is a very interesting table that contains a lot of information, so in this table you get all the information about CM and AD sites, as well as all the information about the inventories,discoveries,policy request, MP, SUP, evaluation  and lastly the information about the collections, which can be expand to get the collection name. Specific_Comp_3
  3. System Information, in this table you will get all the information about the system, like computer Name & AD DN, Network, System drive, CM User Affinity and the next effective maintenance window.Specific_Comp_2
  4. Software Updates Information, in this last table you’ll get all the information about software updates (can be filter on vendors and classifications). Again, you’ll get information about the level of compliance, WUA version, missing updates and all the detail about the missing updates, like if they are targeted or not, etc.Specific_Comp_4

Alright, so now we need to discuss about requirements. First you need to add the Managed By attribute to your AD system discovery in configuration manager. Then you will also need to add the following properties to your hardware inventory, Logical_Disk — Free Space (MB) and Services — State, and finally but not the least you will need to create the following SQL function, Report for upcoming maintenance window.

Once the SQL function is created, you’ll now have to modify the SQL permissions (unless the reporting point service account already have db_datareader permission on the CM DB) and grant at least the Select permission on the 2 following SQL objects to your reporting service point account:


So here the link to get the RDL file: Client Health – Specific Computer




SCCM – Software Updates Compliance Reports (Updated)

Recently, I received some suggestions/comments about some of the reports that I published on my blog (and thanks to all of you guys)… and one of them was to add the Maintenance Windows information to the Software Updates Compliance Reports, which I think could be very helpful.

So, here’s an updated version of those reports, which now include the information on the next active maintenance window (if set), plus a new linked report, which gives the Maintenance Windows & Deployments details for the selected collection.

Here are some screenshots of these reports;













SCCM – Software Updates Compliance Reports

Here’s a report that I’ve created to obtain the compliance status for the software updates. The first report will allow you to get the information for selected update classifications and for a specific collection. Then the second report, give you the ability to drill down for a specific computer and get the detail by computer as well as the % of compliance based on the selected classification(s).

Here are some screenshots of this reports;

Software Updates – Collection Status


Software Updates – Computer Status


You can also expand the result by classification to get the detail.


Also note that the targeted count don’t include the updates which are already installed.

So if you’d like to use them, the only thing you need it’s to download those .RDL files, import it and changed the datasource for the appropriate one.

– Software update – Compliance Status By Collection

– Software update – Compliance Status By Computer

SCCM – Report To Get All Java Versions

Here’s a quick post about a custom report that I’ve created to inventory all the java versions installed on sccm clients. It will allow you to get the details by version as well as the ability obtain to drill down and get all the computer(s) by a specific version.

Dashboard View

Screenshot of the dashboard view, which contain the top 10 version.

Computer(s) Detail

Detailled view by specific version, which you can get by clicking on the dashboard or the version column

So basically, the only thing you need it’s to download those .RDL file, import it and changed the datasource for the appropriate one.

Computer(s) Detail.rdl (make sure that the report name will stay exactly the same,  if not the drill down will not work);

Java Inventory Report.rdl;

SCCM – Build Active Directory Dashboard from CM Discovery

In this post I will show you how you can use informations from sccm discoveries to build a dashboard for Active Directory users states. This can be helpfull, for active directory auditing purpose or for identity management. Before you can proceed, you must have the sccm dashboard installed, a linked server in SQL, which points to one of your DC and a sccm users discoveries enable.

Ok so Here’s an overview of the dashboard;

Main dashboard view

sample of Detailled report

Now let’s move on with the steps

1- Go to your sccm dashboard site and from the edit mode,  Enter a Dataset Configuration name(UserAccountStates.xml) then configurre the data refresh rate, database Server Name\instance, database name (your sccm database name), time zone.

2- Copy/paste the following query; SQLQuery

3- Validate the query, then create a column charts named User Accounts status

4- From the data grid section, add a column for each of those who are available.

5- Repeat these steps for all the web parts you want to add in your dashboard, based on these queries

SQL Queries

SCCM – Use CM Discovery to Monitor Active Directory User Accounts

Here are some reports that I’ve created to help our technical support team with the management of users accounts in active directory. This allows them to get the following information about users (also note that this has been tested in a single AD (DFL 2003) domain and Sccm 2007 sp2);

So the first report will give you a count of users by  status, Enable, Disable, Password Set to never Expired, Account Expired and Stale Account ( which as exceed their threshold of 90 days). Also, with the ability to get a list of all user accounts with a specific status, ex; all expired Account or All users account with password set to never expired.

And the second report will count users by OU, with the ability to drill down and get the users informations in the selected OU and then get the group membership by Users.

First Report;

Count user accounts in a specific state

All Users in a specific state

Second Report;

User Accouts by OU

All Users in the selected OU

Group Membership for a selected user

So here’s the queries

FirstReport, (contains queries for the two reports)

SecondReports, (contains queries for the three reports)


**** user discovery must be enable with all these attributes ****