If you search on the web for patch compliance report in configmgr,you get various reports of which you can customize it if you still need the way you want.I don’t see any standard report that tell the compliant % for each month in one line ?

How do you monitor the overall progress of the current month and its previous months ? let say,for the current month,compliant machines are 500(which have got all approved patches) and noncompliance and its % in one line ?

How about something like this ?

Not sure how many of you already seen post from Alexsemi who has developed report by month wise since from beginning(based on the patch date posted).

Criteria’s used in the query:

1. Category: Security patches

2. Products: All

3. Severity: Critical and Important

4. One missing patch brings entire computer to noncompliance.

If you are into configuration manager 2007 and using classic report feature,you can use the below SQL code which is also available here to download .

if you are into Configuration manager 2012 ,you will have to create SSRS report ,for which i have uploaded the .RDL file here ,so download and upload it to your SSRS reports.

SELECT D.MonthPosted , Compliant , Incompliant [Non-Compliant],Compliant + Incompliant [Total], cast(Compliant / ( (Compliant + Incompliant) /100.0) as decimal(5,2) ) as [Compliant %],
cast(Incompliant / ( (Compliant + Incompliant) /100.0) as decimal(5,2) ) as [Non-Compliant %]
FROM
(
Select MonthPosted, Count(1) as Compliant FROM
(
SELECT MonthPosted, ResourceID
FROM (SELECT TOP (100) PERCENT v_UpdateComplianceStatus.ResourceID, v_UpdateComplianceStatus.Status, CAST(DATEPART(yyyy,
v_UpdateInfo.DatePosted) AS varchar(255)) + ‘-’ + RIGHT(’0′ + CAST(DATEPART(mm, v_UpdateInfo.DatePosted) AS VARCHAR(255)), 2)
AS MonthPosted, COUNT(1) AS Count
FROM v_UpdateComplianceStatus INNER JOIN
v_UpdateInfo ON v_UpdateComplianceStatus.CI_ID = v_UpdateInfo.CI_ID INNER JOIN
v_R_System ON v_UpdateComplianceStatus.ResourceID = v_R_System.ResourceID
WHERE (v_R_System.Obsolete0 = 0 AND v_R_System.Client0 = 1 AND v_R_System.Active0 = 1) AND (v_UpdateInfo.Severity IN (8, 10)) AND (v_UpdateInfo.IsSuperseded = 0) AND (v_UpdateInfo.IsEnabled = 1)
GROUP BY v_UpdateComplianceStatus.ResourceID, v_UpdateComplianceStatus.Status, CAST(DATEPART(yyyy,
v_UpdateInfo.DatePosted) AS varchar(255)) + ‘-’ + RIGHT(’0′ + CAST(DATEPART(mm, v_UpdateInfo.DatePosted) AS VARCHAR(255)), 2)) A
where Status =3
AND not exists
(
SELECT B.MonthPosted, B.ResourceID
FROM (SELECT TOP (100) PERCENT v_UpdateComplianceStatus.ResourceID, v_UpdateComplianceStatus.Status, CAST(DATEPART(yyyy,
v_UpdateInfo.DatePosted) AS varchar(255)) + ‘-’ + RIGHT(’0′ + CAST(DATEPART(mm, v_UpdateInfo.DatePosted) AS VARCHAR(255)), 2)
AS MonthPosted, COUNT(1) AS Count
FROM v_UpdateComplianceStatus INNER JOIN
v_UpdateInfo ON v_UpdateComplianceStatus.CI_ID = v_UpdateInfo.CI_ID INNER JOIN
v_R_System ON v_UpdateComplianceStatus.ResourceID = v_R_System.ResourceID
WHERE (v_R_System.Obsolete0 = 0 AND v_R_System.Client0 = 1 AND v_R_System.Active0 = 1) AND (v_UpdateInfo.Severity IN (8, 10)) AND (v_UpdateInfo.IsSuperseded = 0) AND (v_UpdateInfo.IsEnabled = 1)
GROUP BY v_UpdateComplianceStatus.ResourceID, v_UpdateComplianceStatus.Status, CAST(DATEPART(yyyy,
v_UpdateInfo.DatePosted) AS varchar(255)) + ‘-’ + RIGHT(’0′ + CAST(DATEPART(mm, v_UpdateInfo.DatePosted) AS VARCHAR(255)), 2)) B
where Status =2
and B.MonthPosted = A.MonthPosted and B.ResourceID = A.ResourceID
Group By MonthPosted, ResourceID
)
Group By MonthPosted, ResourceID
) C
Group By MonthPosted
) D,
( SELECT MonthPosted, Count(1) as Incompliant
FROM (SELECT TOP (100) PERCENT v_UpdateComplianceStatus.ResourceID, v_UpdateComplianceStatus.Status, CAST(DATEPART(yyyy,
v_UpdateInfo.DatePosted) AS varchar(255)) + ‘-’ + RIGHT(’0′ + CAST(DATEPART(mm, v_UpdateInfo.DatePosted) AS VARCHAR(255)), 2)
AS MonthPosted, COUNT(1) AS Count
FROM v_UpdateComplianceStatus INNER JOIN
v_UpdateInfo ON v_UpdateComplianceStatus.CI_ID = v_UpdateInfo.CI_ID INNER JOIN
v_R_System ON v_UpdateComplianceStatus.ResourceID = v_R_System.ResourceID
WHERE (v_R_System.Obsolete0 = 0) AND (v_UpdateInfo.Severity IN (8, 10)) AND (v_UpdateInfo.IsSuperseded = 0) AND (v_UpdateInfo.IsEnabled = 1)
GROUP BY v_UpdateComplianceStatus.ResourceID, v_UpdateComplianceStatus.Status, CAST(DATEPART(yyyy,
v_UpdateInfo.DatePosted) AS varchar(255)) + ‘-’ + RIGHT(’0′ + CAST(DATEPART(mm, v_UpdateInfo.DatePosted) AS VARCHAR(255)), 2)) F
where Status =2
Group By MonthPosted ) E
where D.MonthPosted = E.MonthPosted
order by MonthPosted Desc

Sccm Configmgr 2012 :Patch Compliance Summary Report Month Wise is a post from: Eswar Koneti's Blog

Quick post on the Boundaries and its assigned Site Servers which are nothing but Distribution Points.Simply creating boundaries does not make clients to get connected to DP and download the content.

you will have create assign these boundaries to boundary group and boundary group to Site+Content location.

Here is report to list all Boundaries and its connected Distribution Points.

Note: Boundary Name is nothing but Description what you gave.

I have uploaded the .RDL ile onto TechNet gallery.Download it from here.

SCCM 2012 SSRS report: Site Servers and its assigned boundary information is a post from: Eswar Koneti's Blog

This is updated post for long ago blogged post http://eskonr.com/2010/04/sccm-reportcollection-for-computers-with-internet-explorer-with-different-versions/.

are you in search of getting summary of IE Versions ,so that you can plan for the migration of Old IE Versions to current version ?

Below is the SSRS/SQL report which will help you to get count of IE Versions and total.

SQL Query used in Report(if you are still running on SCCM 2007):

SELECT distinct SUBSTRING(sf.fileversion, -1, CHARINDEX(‘.’, sf.fileversion) +1 ) AS [IE Version],
COUNT(*) as Count from v_GS_SoftwareFile SF where FileName=’iexplore.exe’
group by SUBSTRING(sf.fileversion, -1, CHARINDEX(‘.’, sf.fileversion) +1 )
order by 2

Note:Replace the quotes with original.

SSRS Report attached here. Download the rdl file and upload to your SSRS report folder.

Configmgr :SSRS Report count of IE Versions is a post from: Eswar Koneti's Blog

Year ago,I created CM07 report to know the patch compliance stats for active patches last 30 days.More info can be found from here.But this report was for configuration manager 2007 which will not work with Configmgr 2012 due to the changes in storing the information in SQL tables/Views.

I have created similar report for configuration manager 2012.This report will list down all active patches which are deployed during last 30 days .I have used the criteria to filter the days using patch released date(DateCreated).

SQL Code Used in SSRS Report:

select UI.Title, UI.BulletinID,
Count (case when UCS.ResourceID is not null then ‘*’ else Null end) as  Targetted,
Count(case when UCS.Status=3 then ‘*’ else Null end )AS Installed,
Count (case when UCS.Status=2 then ‘*’ else Null end ) AS Missing,
CONVERT(decimal(5,2),round(100.00*COUNT(case when UCS.Status=3 then UCS.ResourceID else NULL End) /count(UCS.ResourceID),1)) ['Success Ratio %'],
case UI.IsSuperseded
when 1 then ‘Yes’
Else ‘No’ End as [Superseded],
case UI.Isexpired
when 1 then ‘Yes’
Else ‘No’ End as [Expired],
case UI.IsDeployed
when 1 then ‘Yes’
Else ‘No’ End as [Deployed],
ui.dateposted,UI.DateCreated,
Deadline=cdl.Deadline,
UCS.CI_ID,
UI.InfoURL
         from v_UpdateComplianceStatus UCS
         inner join v_UpdateInfo UI On UI.CI_ID=UCS.CI_ID
         inner join v_R_System Sys on sys.ResourceID=UCS.ResourceID
        inner join v_CICategoryInfo CI On CI.CI_ID=UCS.CI_ID
        outer apply (
          select min(a.EnforcementDeadline) as [Deadline]
          from V_CIAssignment  a
         join v_CIAssignmentToCI  atc on atc.AssignmentID=a.AssignmentID and atc.CI_ID=UCS.CI_ID
           ) cdl
            where (DATEDIFF(Day,UI.DateCreated, GETDATE())) <=30
         group by UI.BulletinID,UI.Title,cdl.Deadline,UI.InfoURL,IsExpired,IsSuperseded,dateposted,IsDeployed,UCS.CI_ID,UI.DateCreated

Looking for RDL file ? Download it from here,uploaded to your SSRS Report folder and Run

To know more about software update management and how does system become compliant in Configmgr refer http://blogs.technet.com/b/system_center_in_action/archive/2011/05/02/test.aspx

Configmgr SSRS Report : Patch Compliance Statistics Last 30 days is a post from: Eswar Koneti's Blog

A question asked in the forum recently about,way to get list of applications ,packages assigned to specific collection.I looked at the default reports if there is any or similar which can be customized but cannot find.

It is hard to see always what apps/packages assigned to collection using manual method.Here is the SSRS /SQL query to get list of apps assigned.

This contains 2 queries 1) apps assigned and 2) packages assigned both excluding the software updates and endpoint protection updates.

I always use Configmgr 2012 R2 SQL views excel spreadsheet to find the correct view for what you need.For this report,application name is available from v_ApplicationAssignment and package name(legacy) from v_advertisement.

Applications Assigned:

select CA.ApplicationName,
case when NotifyUser=1 then ‘Yes’ Else ‘No’ End as ‘Notify User’,
case when  UserUIExperience=1 then ‘Yes’ Else ‘No’ End as ‘UserUIExperience’,
case when AssignmentAction=2 then ‘Install’ Else ‘Uninstall’ End as ‘Action’,
CA.CreationTime,CA.LastModificationTime,CA.LastModifiedBy from v_ApplicationAssignment CA,v_Collection coll
where ca.CollectionID=coll.CollectionID and
coll.CollectionID=@collection and (CA.AssignmentName not like ‘%Software Update%’ and CA.AssignmentName not like ‘%Endpoint Protection%’)

Package Assigned:

select SUBSTRING(adv.AdvertisementName, 1, CHARINDEX(‘_’, adv.AdvertisementName) – 1) aS [Advertisement Name],
adv.ProgramName,adv.ExpirationTime from v_Advertisement adv,v_Collection coll
where adv.CollectionID=coll.CollectionID
and coll.CollectionID = @Collection

Prompt:

select CollectionID,name from v_Collection
order by name

Download the RDL file from Technet Gallary:

Some information about Notify User and UserUIExpeirnce from Phil .

Application Deployments which are marked as Available will have two options:

Display in Software Center and show all notifications
Display in Software Center, and only show notifications for computer restarts

Deployments marked as Required also have a third option to “Hide in Software Center and all notifications”

The NotifyUser value determines whether the user sees notifications for new applications in the system tray, and the UserUIExperience determines whether the user sees anything at all related to the application.  Thus an available deployment set to show all notifications would have a value of 1 for both, an Available or Required deployment set to only show notifications for reboots would have NotifyUser set to 0 and UserUIExperience set to 1, and a Required deployment set to hide everything would have both set to 0

SCCM Configmgr 2012 Report Applications packages assigned to specific collection is a post from: Eswar Koneti's Blog

With the recent Cumulative Update releases CU1,CU2 and now CU3 for Configuration Manager 2012 SP1,as Configmgr admin,you will have make sure to get the Configmgr clients are running on the Version of your Primary Site.

Each cumulative update will have its new Version with its previous Cumulative Update. so if you are upgrading from previous CU’s to Newly Released Cumulative Update,you may have to look at the client versions in your environment if they are all on same boat or not.

Update: Configmgr 2012 R2 CU1 version also added to the Report.

Use this below SQL query to count the Client Versions from Configmgr environment.You can create list of PC’s with the specific client version to drill down.

select "Client Version"=
case sys.Client_Version0
when ’5.00.0000.0000′ then ‘RTM (5.00.0000.0000)’
when ’5.00.7804.1000′ then ‘SP1 (5.00.7804.1000)’
when ’5.00.7804.1202′ then ‘SP1 CU1 (5.00.7804.1202)’
when ’5.00.7804.1300′ then ‘SP1 CU2 (5.00.7804.1300)’
when ’5.00.7804.1400′ then ‘SP1 CU3 (5.00.7804.1400)’
when ’5.00.7958.1000′ then ‘R2 (5.00.7958.1000)’

when ’5.00.7958.1203′ then ‘R2 CU1 (5.00.7958.1203)’

else ‘Others(non-Clients)’
End,count(*) [Total]
from v_R_System sys
where sys.Name0 not like ‘unknown’
group by sys.Client_Version0
order by 2 desc

Note:If you have configmgr 2007 clients appearing in CM12,you can add them too here using simple case statement. List of Client versions available on Wikipedia

SSRS Report:

Configmgr 2012 SSRS Report Count of Client Versions is a post from: Eswar Koneti's Blog

Background: I had a requirement to not allow others except Configmgr admins to deny access to Configmgr 2012 Console, also to Configmgr SQL Database access (this can be done by revoking access from SSRS_Read Group.If the users are part of this group,they can install SQL and try to connect to configmgr database remotely to run queries).How do we provide access to service Desk /Others to access reports In General? Create AD security group,add this group to SMS Admins (to get access to the SMS Provider) on Configmgr server,Create new Security role in Configmgr by providing Run report permissions and add the AD sec group to administrative users by selecting the above created security scope.

So far,everything is fine but the problem here is,we usually create SSRS reports using custom tools like Business intelligence studio(Visual Studio) .

so during the process of new Report creation,we mostly go with Data  source connection string as ‘Data Source=SQLserverName;Initial Catalog=DatabaseName’. once you are done with reports,we publish them to SSRS by Uploading the RDL file or auto publish from BIDS. How to publish the custom reports to specific folder in SSRS available here

what happens when end users browse these reports ? they get access denied since they are not allowed to connect to SQL server(they are not part of SSRS_Read group) ,what is used in above Reports. So you are required to change the Data source to Shared Data source(default Data source for Configmgr). 

For single report,you can do this by going to report properties—data source and select the Shared Data source from Configmgr_P01 as shown below:

But what,if you want to do this change for multiple custom reports ,manual method is not preferable.

Here is the powershell script to change form Custom Data Source to Share data source for multiple reports under specific folder.

#Set variables:
#Change the Configmgr Report server name
$reportserver = "sccm2012pri";
$url = "http://$($reportserver)/reportserver/reportservice2005.asmx?WSDL";
#Provide New Data source Path ,you need to replace this with correct one from your SSRS report
$newDataSourcePath = "/ConfigMgr_P01/{5C6358F2-4BB6-4a1b-A16E-8D96795D8602}"
#Provide new Data source Name which is part of above source path
$newDataSourceName = "{5C6358F2-4BB6-4a1b-A16E-8D96795D8602}";
# provide Report folder path that contains reports to change the Data source.in my case,i want to change DS for all reports under eskonr/eswar/sup folder.If you have multiple folders to change the Data source,you need to run the script by changing the folder name .
$reportFolderPath = "/eskonr/eswar/SUP"
#————————————————————————
$ssrs = New-WebServiceProxy -uri $url -UseDefaultCredential
$reports = $ssrs.ListChildren($reportFolderPath, $false)
$reports | ForEach-Object {
$reportPath = $_.path
Write-Host "Report: " $reportPath
$dataSources = $ssrs.GetItemDataSources($reportPath)
$dataSources | ForEach-Object {
$proxyNamespace = $_.GetType().Namespace
$myDataSource = New-Object ("$proxyNamespace.DataSource")
$myDataSource.Name = $newDataSourceName
$myDataSource.Item = New-Object ("$proxyNamespace.DataSourceReference")
$myDataSource.Item.Reference = $newDataSourcePath
$_.item = $myDataSource.Item
$ssrs.SetItemDataSources($reportPath, $_)
Write-Host "Report’s DataSource Reference ($($_.Name)): $($_.Item.Reference)";
}
Write-Host "————————"
}

I have also attached the powershell script here for your reference, incase of any syntax errors.

Note: replace the quotes as blog converts them to fancy.

Bold letters refers require change.

Hope it helps others who wants to change the Custom Data source to Shared Data source.

SCCM Configmgr 2012 How to change Custom Data source to Shared Data Source for multiple SSRS reports is a post from: Eswar Koneti's Blog

Another Configmgr 2012 SSRS Report that brings Client Health Summary.This time,it will be a dashboard instead normal SSRS report.Dashboard is nice way to display multiple reports into one report.Dashboard reports are very helpful if you want to monitor the information about client health (mainly the Count),client hardware/software,operating system,IE versions etc.You can also link all these individual reports to get list of computers with its hardware information.

I created Dashboard report to get client health summary into one Page instead browsing to multiple reports when required.

This report consists of several individual reports listed below:

1.Total Computers

2.Client Installed Vs Active Vs Missing

3.Client Health Based on CCMEVAL

4.Clients Assignment Per Management Point

5.Computers Discovered During last 30 Days

6.Computers Not Discovered During Last 30 Days

7.Clients Vs Non-Clients By Domain

8.Inventory (HW/SW) during last 30 days

9.Computers by Chassis Type

10.IE Versions

11.Computers by Architecture

12.Computers By Operating System

Note:Client health report is being filtered with lastlogon timestamp (<30 Days) attribute which is updated by AD system Discovery .

The Count in Crimson color indicates linked report to show list of computers which are not uploaded for now as there are many in this Dashboard.I will collate all of them during next update.

Download the RDL file from TechNet Gallery and uploaded to your SSRS report.

Don’t forget to change the Data source after you upload it.To know more about how to upload the .RDL file and change Data source,follow http://be.enhansoft.com/post/2010/08/26/How-to-Change-the-SSRS-Datasource.aspx

SCCM Configmgr 2012 SSRS Dashboard Client Health Summary Report is a post from: Eswar Koneti's Blog

Question from configmgr forum :Query for disk space <500 MB on all servers last scan plus last 10 history scans.

History of disk space information is stored in v_HS_LOGICAL_DISK ,where as the current information is stored inv_GS_LOGICAL_DISK .

By Default,when you query v_HS_LOGICAL_DISK ,it gives you information with all the existing rows but how do i select the most recent 10 records for each computer ?

Below query gives you the information with most recent 10 records based on the timestamp for each computers.

with diskspace as (
SELECT SYS.Name AS [Server Name], CASE WHEN RSYS.Is_Virtual_Machine0 = 1 THEN ‘Virtual Machine’ ELSE ‘Physical Machine’ END AS [Hardware Type],
                      vHSLDISK.TimeStamp AS [Scaned Date], vHSLDISK.DeviceID0 AS [System Drive C:], vHSLDISK.FreeSpace0 AS [Free space (MB)] 
                     , ROW_NUMBER() over (partition by SYS.Name order by  vHSLDISK.TimeStamp desc) rno
                     FROM         v_FullCollectionMembership AS SYS INNER JOIN
                      v_HS_LOGICAL_DISK AS vHSLDISK ON SYS.ResourceID = vHSLDISK.ResourceID INNER JOIN
                      v_R_System AS RSYS ON SYS.ResourceID = RSYS.ResourceID inner join
                       v_GS_LOGICAL_DISK AS LDISK ON SYS.ResourceID = LDISK.ResourceID
WHERE     (vHSLDISK.DeviceID0 = ‘c:’) AND (SYS.CollectionID = ‘P0100831‘) AND (vHSLDISK.FreeSpace0 <= 500)
)
select [Server Name],[Hardware Type],[Scaned Date],[System Drive C:],[Free space (MB)] from diskspace
where rno<=10

Change the Collection ID ,Drive letter and disk Space value.

Reference TechNet Article : http://technet.microsoft.com/en-us/library/ms186734.aspx

SCCM Configmgr 2012 SQL query get most recent 10 records with free disk space history is a post from: Eswar Koneti's Blog

I think ,this post is going to be one of my Favorite on Configmgr 2012 SSRS report so far i created .Question from smsforum list asking,about if there is any pre-existing report that list all applications and its dependencies.There is none from the default reports(out of 400+) and not sure why Microsoft did not include this kind of report as part of default reports.

If you want to know all dependencies for specific application,you can directly get this from Configmgr 2012 console by right click on the application and choose view relationships——dependency  but how to get list of applications that dependent on specific application.

For Ex: Get list of all applications who dependent on  Microsoft .net Framework 4.5 or Microsoft Visual C++ 2008 etc.

Before you jump into creation of reports,i would recommend you to read deep technical drive on Application Model and its Internal how they stored in Database by Steve Rachui.

I would like to thank Todd for the original SQL Query that helped me to write this blog post.

So this blog post brings you ,3 different SSRS Reports named 1 ) List all applications and its count of Dependencies and 2) linked report to list Dependencies for Specific Application 3) List all applications that Dependent on specific application

1 )List all applications and its count of Dependencies:

2) List Dependencies for Specific Application

Click on any application that has dependencies ,it will show give you apps list.

For Ex; Interactive 6.2: You can see the parent application folder name where it resides,dependencies and its folders where do they sit.

3) List all applications that Dependent on specific application:

Download these 3 reports .RDL files from TechNet Gallery and Uploaded to yours SSRS report folder. Don’t forget to change the Data Source ,to know How refer Garth blog.

you can also use powershell script to change the Data source for multiple reports at one go instead one by one refer blog post.

Note: When you upload these .rdl files ,make sure 1st and 2nd reports should be in same folder as they both are linked each other.

Hope it Helps!

SCCM Configmgr 2012 SSRS Report List Applications and its Dependencies is a post from: Eswar Koneti's Blog

Its always painful to check via reports for specific application if an assigned application successfully installed for Computer or User ,especially for GSD/helpdesk guys as they are the first point of contact for basic troubleshooting and they cannot always browse to default reports for such information and there is no straight report to give this information.

I have created 2 Reports 1 ) List all applications with status for specific Computer 2) List applications with status for Specific User.

These 2 reports will help you to get quick information about specific application whether it is installed /requirements not met /error what ever the reason before you jump into troubleshoot it.

While running report for User,you will have specify Username which is NTUser name which is used to log into domain for Ex:eskonr\eswar ,specify only eswar,domain name is not required.

1.List all applications with status for specific Computer

2.List applications with status for Specific User:

you can download there 2 reports from TechNet Gallery .

As usual,Download the reports,uploaded to SSRS report folder .

Don’t forget to change the Data Source ,to know How ,refer Garth blog.

you can also use powershell script to change the Data source for multiple reports at one go instead one by one refer blog post.

SCCM Configmgr 2012 How to check Status of applications Assigned to Computer or User is a post from: Eswar Koneti's Blog

few weeks Ago, Microsoft released Cumulative Update 2 (kb2970177) for Configuration manager 2012 R2 which supersedes previously released cumulative Update (1).

This update fixes several issues ,supports to new platform for Unix/Linux and brings changes to Configmgr powershell cmd-lets as well.

Download the Cumulative Update 2 from http://support.microsoft.com/kb/2970177

Description of Windows PowerShell changes in CU2 http://support.microsoft.com/kb/2962855

About Cumulative Update documentation,refer http://technet.microsoft.com/en-us/library/jj553405.aspx

The installation procedure is straight forward.You can refer my previous blog post ,where i showed how to Install Configmgr 2012 R2 CU1 http://eskonr.com/2014/03/how-to-install-configmgr-2012-r2-cu1-part-1/.

In this post,I will show you how to create collections to bring the configmgr clients which are not with R2 CU2 .This will help you to target CU2 to these lower Version clients.

Note: If you have not installed CU1 yet on top of Configmgr 2012 R2,you can directly go with CU2 and it doesn't require any restart.

After you install R2 CU2 hotfix ,you will see folder kb2970177 from your Configmgr Installation Drive:\Configmgr folder\hotfix (for Ex:F:\SCCM\hotfix)

Packages in Configmgr Console:

It Contains updates to Admin Console,Client (X86 and X64),SCUP,Server (Includes Primary and Secondary Sites).

Lets start creating collections for all above:

Collection for R2 CU2-Site server:

After you install CU2 update,it will only write information to registry with CU level (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup ) and no into add and remove programs.so it would be difficult to create collection for sites that are not running on CU2 until unless you use regkey2mof to pull this via hardware inventory.

So it would be good to create collection for site server (secondary's) manually using direct membership or using the query below but you need to exclude Primary site manually in Query based.

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System where SMS_R_System.SystemRoles = "SMS Site Server"

Collection for R2 CU2-Console:

Again,for Console,you will get list of all Computers with configmgr 2012 console installed whether they are running on R2 CU2 or not .

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "System Center 2012 R2 Configuration Manager Console"

Collection for R2 CU2 X86:

This will list all configmgr Clients with criteria : should include X86,Client=1,Client <CU2 (5.00.7958.1303) and client version >= R2( 5.00.7958.1000).

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_R_System.Active = "1" and SMS_G_System_SYSTEM.SystemType = "X86-based PC" and SMS_R_System.ClientVersion < "5.00.7958.1303" and SMS_R_System.ClientVersion >= "5.00.7958.1000"

Collection for R2 CU2 X64:

This will list all configmgr Clients with criteria : should include X64,Client=1,Client <CU2 (5.00.7958.1303) and client version >= R2( 5.00.7958.1000).

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_R_System.Active = "1" and SMS_G_System_SYSTEM.SystemType = "X64-based PC" and SMS_R_System.ClientVersion < "5.00.7958.1303" and SMS_R_System.ClientVersion >= "5.00.7958.1000"

Now you have 4 packages and 4 collections .Deploy the CU2 package to respective Collection to have them on CU2 level.

Monitor the report to know the Deployment status .

SCCM Configmgr 2012 R2 Collections to Upgrade Clients to CU2 Version is a post from: Eswar Koneti's Blog

This post is an extension to my previous article to view the content status for the applications,packages,driver packages,software updates,windows images using SSRS report instead of Console.

Few people contacted me ,if there is way to get the status /Report of all packages on all Distribution points with its compliance % and other information what is available in SCCM console, when you look at monitoring-Distribution Status—>content Status and the reason for this is, performance of the console for this node is little slower .

To know the distribution status of specific application,we generally refer to monitoring node—content Status. By default this node display only 1000 rows and if you have more than 100 applications, you will have to click on ‘Click here to view a maximum of 100000 results and then search for specific application which is bit slow what i have observed.

If you have not noticed any slow performance with content status ,still its worth to take a look at the report with some extra information added like Installed,Not installed and drill down the report to Not Installed Servers etc.

This SSRS report gives you the same columns what you see from the content status node in addition with Installed, Not Installed and Hyperlink to Not installed DP servers.

Red color indicates hyperlink to failed servers.

Click on the numbers indicating in Red color (Not installed) to view the Distribution points on which, the package is failed to install .Happy troubleshooting

Download the RDL file from TechNet library ,upload to your SSRS Folder .

Note: don't forget to change the Data Source after you upload. How to change the DataSource refer http://be.enhansoft.com/post/2010/08/26/How-to-Change-the-SSRS-Datasource.aspx

SCCM Configmgr 2012 SSRS Report Content Status with Compliance – Console View is a post from: Eswar Koneti's Blog

Last year i wrote blog post on summary of patch compliance status report --month wise and am sure ,it would helped many of Configmgr guys who are responsible for patching and to let security /management know whether they met the company SLA for each month or not.

I have received couple of comments for my previous blog post ,asking for ,is there way to limit this report to specific collection instead of all active clients .My previous report get the compliance status for all active clients in Configmgr irrespective of ,whether you manage the patching for all clients or not.

There are cases ,where in,you are not supposed to patch some of the clients (workstations\servers) for different reasons and you are requested to get the patch compliances only for specific clients.

This blog post is about,how to limit the report to specific collection.

Download the RDL file from TechNet gallery ,upload to your SSRS report folder.

Don't forget to change the Data Source after you upload. If you want to know How to change the DataSource, refer http://be.enhansoft.com/post/2010/08/26/How-to-Change-the-SSRS-Datasource.aspx

Configmgr 2012 summary of Patch Compliance status Report month wise for specific Collection SSRS report is a post from: Eswar Koneti's Blog

In this post, i will discuss about how to install CU3 update and  How to Upgrade clients to CU3 with query based collections.

Installation of CU3 is not so difficult ,it is straight forward .If you need step by step with screenshots ,you can refer my previous post http://eskonr.com/2014/03/how-to-install-configmgr-2012-r2-cu1-part-1/ 

So,as i discussed in my previous post about the CU3 update : it contains many bug fixes with respect to Powershell and other Site server and client functionalities including 3 important new changes to this update.

1) you can now assign the clients to Specific Management point (kind of restrict the client to always choose specific MP but incase of MP failure,client will be Unmanaged ,there is no fallback). Justin had explained in nice way ,more info about Management point affinity http://blogs.technet.com/b/jchalfant/archive/2014/09/22/management-point-affinity-added-in-configmgr-2012-r2-cu3.aspx

2) Child sites may perform partial WSUS synchronization when the primary is under heavy load. This partial synchronization occurs when the WSUS Synchronization Manager component on a primary site begins synchronization before WSUS has completed processing all updates metadata.

3) The following operating systems are added to the list of supported platforms for software distribution:

• Debian 7 (x86)
• Debian 7 (x64)
• Red Hat Enterprise Linux 7 (x64)
• CentOS 7 (x64)
• Oracle 7 (x64)

So before we start,try downloading the CU3 update from http://support.microsoft.com/kb/2994331 and extract it.

After you have the file,try to run with file with administrative permissions.

As you can see from above screen,you can install CU3 on CAS,Primary,Secondary,SMS Provider and Console.

The Installation procedure is straight forward , but make sure you don't have any reboot pending while installing this CU ,also close any administrative consoles open which are connected to the SMS provider.

after you click next,next next,you see summary window:

Log will be created under C:\windows\temp\cm12-r2cu3-kb2994331-x64-enu.log with CU3 installation progress.

after a while,you see success

Check your Console if it is updated to Right version or not.

From Registry : HKLM\software\Microsoft\SMS\setup: CULevel =3

After you are done with the installation of CU3, you are need to distribute the CU3 packages (Console,Server,X86 and X64) to Distribution points .

and next ,create collections to upgrade the clients which are lower version < CU3 version but >=R2 to CU3.

I did not discuss about installation of CU3 on secondary site servers on this blog .If you are having multiple secondary sites,you can create collection by referring to my old blog post or you can install CU3 patch called : R2 CU3 – Server Update package manually.

Note: you can install this Update only on clients which are running on CM12 R2 + any Cumulative update but not on any other versions.

Now we need to upgrade clients to CU3 version from Configmgr 2012 R2 + CU1 or CU2

lets try creating collections for X86,x64 and Console :

Collection for R2 CU3-Console Update:

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "System Center 2012 R2 Configuration Manager Console"

Collection for R2 CU3 Client x86:

This will list all configmgr Clients with criteria : should include X86,Client=1,Client <CU3 (5.00.7958.1401) and client version >= R2( 5.00.7958.1000).

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_SMS_ADVANCED_CLIENT_STATE on SMS_G_System_SMS_ADVANCED_CLIENT_STATE.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.SystemType = "x86-based PC" and SMS_G_System_SMS_ADVANCED_CLIENT_STATE.DisplayName = "CCM Framework" and SMS_G_System_SMS_ADVANCED_CLIENT_STATE.Version >= "5.00.7958.1000" and SMS_G_System_SMS_ADVANCED_CLIENT_STATE.Version < "5.00.7958.1401"

Collection for R2 CU3 Client X64:

This will list all configmgr Clients with criteria : should include X64,Client=1,Client <CU3 (5.00.7958.1401) and client version >= R2( 5.00.7958.1000).

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from  SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_SMS_ADVANCED_CLIENT_STATE on SMS_G_System_SMS_ADVANCED_CLIENT_STATE.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.SystemType = "x64-based PC" and SMS_G_System_SMS_ADVANCED_CLIENT_STATE.DisplayName = "CCM Framework" and SMS_G_System_SMS_ADVANCED_CLIENT_STATE.Version >= "5.00.7958.1000" and SMS_G_System_SMS_ADVANCED_CLIENT_STATE.Version < "5.00.7958.1401"

Now you have  packages and  collections ready for deployment .Deploy the CU3 package to respective Collection to upgrade the clients to CU3 level.

Monitor the report for the the Deployment status .

Happy Upgrade ---

How to Install and upgrade clients to Configmgr 2012 R2 Cumulative Update 3 (CU3) is a post from: Eswar Koneti's Blog

Started working with New Customer since few weeks ago ,running Configmgr 2012 R2 CU1 ,yet to upgrade to Latest CU . since few days,I have been running lot of SQL Queries ,reports checking the SCCM client health and analyzing the existing setup for some improvements. For everything what ever you do in SCCM,the first and foremost is ,client health,otherwise ,there is nothing for you to manage  .

Using reports/ collections, cleanup lot of old records ,fix SCCM client issues using scripts and clients are now at good success rate (>95%).

Even though, client health success rate is >95% ,for some reason,Software update scan is lower than 80% and that causes the SUP compliance failed to meet the SLA.

I started running the following SQL Query on SSMS (SQL Server Management Studio) to see how many computers are succeeded with software update scan and how many are not.

There is table called v_UpdateScanStatus,  that stores the information about last scan state,lastscanpackagelocation ,WUAgent etc.

By running the following query, you get count of clients for each lasterrorcode that reported to CM12.

select uss.LastErrorCode,count(*) [Total] from v_UpdateScanStatus uss
group by uss.LastErrorCode

I have got lot many computers with error code –2016409966 .Straightaway went to CMtrace log and find what this error means.

using CTRL+L from the CMTrace log viewer, it tells me ‘Group policy conflict’ which means,there is something wrong applying the GPO .

Ran below SQL Query to pick one computer with above error code(–2016409966 ):

select sys.name0 from v_r_system sys,v_updatescanstatus uss
where sys.resourceid=uss.resourceid
and uss.LastErrorCode='-2016409966'

connect to computer ccm\logs and check WUAHandler.log.  Below is snippet from the log.

The above errors leads to me to think about GPO, if there is any such configured but after checking with Server Team ,there is no such group policy configured.

Some additional information that refers to above problem talking about GPO. http://technet.microsoft.com/en-us/library/bb735866.aspx and http://blogs.technet.com/b/smsandmom/archive/2008/12/02/configmgr-2007-wuahandler-log-failed-to-add-update-source-for-wuagent-error-0x80040692.aspx

I then ran RSOP /GPresult on the problem computer to see if there is any such GPO configured but there is nothing via AD Except local group policy configured with WSU entries.

What next ?  there is no GPO exist that configures the WSUS Settings and Configmgr suppose to configure these WSUS Settings on the client but that’s not happening.

Recently I come across article that solves the software update sync by deleting the registry.pol file from C:\Windows\System32\GroupPolicy\Machine,even though, the article talks about different software update scan error.

I then thought of giving a try ,by deleting the registry.pol file from C:\Windows\System32\GroupPolicy\Machine as described in the article and initiate software update scan cycle /Software update deployment evaluation cycle action.

review the log if that succeeded or not ,Still the error persists.What next ?

I then restarted the SMS Agent host on the client to download all the policies ,wait a minute and then initiate software update scan cycle /Software update deployment evaluation cycle action.

during the initiation of software update scan cycle,Registry.pol file will be recreated with WSUS settings.

Tried the above solution on 2 more computers to see if it works or not, sync succeeded.

Summary:

1.Delete Registry.pol from C:\Windows\System32\GroupPolicy\Machine .

2. Restart SMS agent host service from services.msc to download the policies again.

Fix can be automated by creating script that does the deletion of file ,restart SMS agent host and initiate the software update scan and deployment evaluation cycle.

I would not say,the above solution will work on all scenarios with above error code but you need to check all the possible solutions to solve the problem.

Hope it helps!

SCCM Configmgr 2012 Software Update Scan error Group policy settings were overwritten by a higher authority Error Code 0x87d00692 is a post from: Eswar Koneti's Blog

In this blog post,I will show you ,how to know /monitor the clients with software update scan status results .

For patch management,all Configmgr Managed clients should do successful software update scan else,client will not be able to get updates from SCCM and thus ,SUP compliance go down the SLA.

I looked at the default reports to check if there is any such report to get count of clients that performed successful scan ,not successful scan and how many do not even report anything about scan.

I come up with nice SSRS Report gives you count of clients with success SU Scan,Failed and client that do not report anything.

All the counts in the report have linked report means,you can get list of clients for troubleshooting why they failed.

Software update scan results stored in v_updatescanstatus ,with LastErrorCode='0' considered as success and rest are considered as failed.

Download the RDL files from TechNet Gallary,uploaded all the reports to your SSRS Folder (make sure you uploaded all these files into same folder as they are linked) and change the data source before you run them.

Note:All these reports filtered with criteria DATEDIFF(dd,sys.Last_Logon_Timestamp0,GetDate()) <30 (computers did not logged into domain during last 30 days will not be reflected in this report ,I feel that ,no point looking at these computers since they are not on the network) and no other filters added like OU limitation /Server limitation etc. If at all you want,you can customize the RDL File.

Uploaded to your folder:

Software Update Scan Results:

Linked report- List of client SUScan Failed:

List of Client NoSUScan:

This report includes clients with no sccm client and you are required to get the client install on all computers with client=No.

Hope this report will help you to get some idea how the client are doing with respect to Soft update Scan  ,from this point,you can start troubleshooting the failed clients.

Feel Free to share your feedback via comments section .

SCCM Configmgr 2012 Report Get the Status of Software Update Scan results is a post from: Eswar Koneti's Blog

Question asked in the forum ,if it is possible to get patch compliance /deployment status report (installed,required,not applicable and unknown) based on OU for specific software update group instead of collection.

Long ago,I posted patch compliance report for specific collection month wise but this report is just overall compliance for each month ,how the patch installation went.

This report will give you count of computers with its compliance/ deployment status (installed,required,not applicable and unknown) from specific OU per Update Group.

It took few hours for me to identify the right views from excel spread sheet that store the information about software update group and its compliance results.

There are various Patch compliance /updates views available in CM12 but you need to identify which are the ones that you require to create report.

For this report, I need to know the view for software update group and its compliance status info.

Software update group info stored in v_AuthListInfo and compliance results stored in v_Update_ComplianceStatusAll

Download the SSRS Report from TechNet Gallery ,upload to your SSRS Folder ,change the Data source and run the report.

Report:

You need to look at the unknown status clients since they did not report anything about the software update scan ,could be that software update component not functioning correctly or for different reasons.

In my next report,I will show you how to get the list of clients (Linked report) with status required /unknown.

SCCM Configmgr 2012 Patch Report – OU based Compliance status per Update Group is a post from: Eswar Koneti's Blog

Over the past few weeks,I posted several patch Compliance reports because ,the default report do not meet the requirements what I need thus ,created custom reports that would help the team to analyze the patch Statistics and troubleshooting non compliant machines.

Software update compliance report month Wise: http://eskonr.com/2013/11/sccm-configmgr-2012-patch-compliance-summary-report-month-wise/

Software update Compliance report month Wise for Specific Collection:http://eskonr.com/2014/09/configmgr-2012-summary-of-patch-compliance-status-report-month-wise-for-specific-collection-ssrs-report/

Software update compliance report Per Update Group Per OU: http://eskonr.com/2014/11/sccm-configmgr-2012-patch-report-ou-based-compliance-status-per-update-group/

Software Update Scan Results: http://eskonr.com/2014/10/sccm-configmgr-2012-report-get-the-status-of-software-update-scan-results/

Recently ,while running the Default patch compliance report Compliance 1 - Overall compliance from category called Software Updates - A Compliance ,it gives me the count of clients with  Compliant ,Non-compliant ,Compliance state unknown for selected  Software update group and collection . This report looks good with overall compliance but the linked report for non-compliant and  Compliance state unknown do not give much information to start or analyze before you take any action.

It provides the basic information about the client like  computer name,last logged on user,assigned site and client version ,but this information do not really help you  to start troubleshooting why it is non-complaint .

I feel that, It would be good to have some additional information like last logged on time,OS,last hardware inventory,last software update scan ,client is Yes or No and other important information.

Overall Compliance (Default report):                                            Linked report for Non-Complaint(Default Report):

Having this additional information about client in linked reports will help the team to analyze whether SCCM client is having problem or issue with SUP component or offline line since long time ?

I tried modifying the default report but I find some difficulties with functions and other stuff used in the report.

So ,I thought of creating a new report with my requirement and Yes,this report runs faster than the Default report.

Overall Compliance (Custom report):

The blue color indicates the Linked report to get list of clients with specific status.

Linked report : list clients with specific Status (Custom Report):

Download the RDL files from TechNet Gallary ,uploaded to your SSRS Folder (both reports should be in same folder) ,change the Data Source ,run the report.

Enjoy!

SCCM Configmgr 2012 SSRS Report Overall Compliance Per Update Group Per Collection will help to troubleshoot the clients is a post from: Eswar Koneti's Blog

Did you ever had difficulties importing, exporting or migrating the reports from Configuration manager 2007  (SSRS ) to Configuration manager 2012 ? If so,how do you migrate reports to Configmgr 2012 ?

To get the SSRS Reports from Configmgr 2007 to Configmgr 2012,you will have to download each report (.RDL) manually and upload it your Configmgr 2012 SSRS Folder. If you have bunch of reports ,what do you do ? Doing this task manually is tedious and involves lot of time.

This blog post discuss about how to migrate reports ,download,upload your custom reports to Configmgr SSRS folder.

During my Search ,I found a tool called ReportSync that does the following activities .

• Sync reports between two SSRS servers.
• Download RDL Files from SSRS  to local PC.
• Upload RDL files to a SSRS server
• Attach datasources automatically on upload(Data source name given in the report must exist on server)

I use this tool oftenly while working with SSRS Reports since it gives me the flexibility to upload multiple reports to specific folder in SSRS. (Default via SSRS browser allows only one at a time).

Download the tool from https://code.google.com/p/reportsync/

Run the Tool

This tool contains 2 fields 1) Source SSRS Web service and 2 ) Destination SSRS Web service.

As I said before,you can use this tool download SSRS Reports to local Drive,migrate reports between the SSRS Servers,upload the reports from Drive.

If you want to download the Reports (.RDL) files from your SSRS server (Configmgr 2007 or 2012 ),enter the source URL ,User hat has permissions to connect to SSRS,Password in Source URL Web Service and click on Load.

How to get the right SSRS URL that has been configured in your environment ?

From your Configmgr server or SQL Server,Launch Reporting services Configuration manager tool and look for Web service URL

After you run the tool ,It takes few seconds or minute to load the reports from your SSRS Folder .

Select the report that you want ,provide the local path to store these reports (.RDL files) and click on Download.

Each category what you see in this tool will be created as Folder in yours local Path.

Reports folder look like this :

You can also try to upload your customized reports to Destination server ,sync and do other functions with this tool.

Hope it helps!

SCCM Configmgr How to Import Export Migrate upload reports to CM12 easy way using ReportSync Tool is a post from: Eswar Koneti's Blog