GarthMJ

There isn't much to tell, once the client are assigned, it will just work. As for assigned the site there again is much to tell either, but it will depend on how you are installing the client. So how are you installing the client?

IMO I see no reason why the AD admin shouldn’t give your or SCCM full access rights to the System Management container. What is the worst thing that can happen? You delete all the object form the container? So what they will get automatic get recreated within a few minutes. Yes you can use SCCM without accessing the System Management container, it just means that your client will not be able to automatically assign themselves to your site. It also means that they will not able about to locate content locations from AD, instead they will use the MP.

Which setting you do enable? When did you enable it? How are you creating this list of software?

From what I can see from your screenshot there is nothing wrong with your DP. You have already deploy the image to it. Are you trying to update the Image?

use this blog post to find the problem http://www.enhansoft.com/blog/troubleshooting-inventory-flow

I hate to say it but it is really hard to answer questions like this in a forum. There are just too many vars., except is very rare cases, NO CAS! Take Brandon: What create a secondary in Brandon, MB? (BTW I have been there and Virden MB too! Hi from Ottawa) How any users/computers are there? What is the network like? (is it slow, do we need to protect the site, if so why? etc.) Are there any techs there? How much bandwidth is there? Is there anything special about this site? What SLA do you have in Place? How are you planning on do patching? What percentage are you clients model? What OS is installed at these sites? Etc. For CM12 How often are you preform HW inventory? What about upgrading OS? Etc. CM12 is a huge product and I would personally recommend that you hire a consultant with experience, work with them to create the design. The key is work with them more as a mentor than a contractor. That is my two Canadian cents.

Take a look at SYDI. This is what I use. http://sydiproject.com/

What you are asking for is a ton a data, instead look at this report. http://smsug.ca/blogs/garth_jones/archive/2009/02/25/patch-compliance-progression-report.aspx

I think you want to look at SCOM not SCCM.

Hi Rob yes you can do that with SSRS, it would be a custom report or dashboard that you will need to setup.

If you are not seeing within the CM12 console or within the reports. Then your task just got lot harder. You will either need to use CI to detect that it is installed using a WMI query or script. Start by looking at the QFE WMI class to confirm that they SU is displayed. If it is then create a CI to detect Computer that have it. In this case a "pass" is actually a fail. Then you can target all of the "pass" with an uninstall script to remove the SU in question.

This is probably not the answer you are looking for and this might come across the wrong way (it is not intended too, it meant to be a discussion point only) but when I consult on reporting for CM12/CM07, It is my job to tell clients that what they are asking for doesn't make sense and will not work as they expect. Using your example. If I deploy 10 SU to a computer and the first 9 fail but he last one is successful. The report that you are looking for would show that the PC was successful, thereby showing an invalid result. The next problem you will have is the sheer volume of data that this will produce. If you have 2000 computer and you want to see the last results for those 2000 computer you are looking at (2000/80 lines) 25 pages of text (without headers, footers, etc.) Now I'm willing to bet that you actually don’t want the "last status update" but the "last status update for each SU", and if this is the case, this is an insane request. Why? Preform the following steps: Execute the report call Compliance 5 - Specific computer for a sample computer. Export the report to excel Find the last line in Excel Determine the # of SU(For my test computer Windows 8.1, there are 209-6 for the header of the report = 197) Now for the math, 197*2000/80 = 4925 pages! (without headers, footers, etc.) Who will ever read this report? The answer is no one. Then I would expect the discussion to move that you don’t actually want see ALL SU but only the SU for the last month? How do you determine which SU have been apply in the last month? Do you need 100% accuracy? What do you do about old SU that got applied this month? What do you do about SU are say they are applied but later (~7 days) show as not installed? Ultimately I will ask why does it matter if SU are applied and successful? Isn’t the only real question is what SU are missing from a computer (now)? So what do I do in this case, I ask questions to the client, What are you trying to do? Why is the data useful? How exactly will you use the data? Who will read the reports?

Each computer would l have its own install date, therefore I’m sorry to say it but adding that details to that report doesn’t make any sense.

What you are trying to do is COMPLETELY unsupported. You can only delete a collect via the console or via the SDK.

yes.

This blog post will get you stated. http://smsug.ca/blogs/garth_jones/archive/2014/01/13/limiting-a-report-to-a-collection.aspx

First off, ensure that you have a good backup of both CM12 and SQL., Secondly, it is not support to use a CNAME. Thirdly, ensure that CM12 computer account is an Admin in SQL and on the SQL servers Fourthly, You will need to use the site reset to repoint CM12 to use the new SQL server. This will install (should) all the components that CM12 needs.

Have you considered Intune? why put it on Amazon?

Does this KB show up within the Built-in reports?

HW inventory is a lot more that physical hardware data, it gathers everything within the registry or WMI. AKA Add/Remove Program data and AI Data.

Updating inventory more frequently will ensure that the data is the most current. Of course it will affect bandwidth as you will be doing it more often but it will be much smaller packets. Honestly if you notice any issue then you have much bigger problems with your network.

No, NEVER use a set time! Only use a simple schedule, otherwise you will likely "kill" your site server or MP. Also I NEVER recommend using SW inv. too much over head! and add too much delays on a CM12 client. http://be.enhansoft.com/post/2013/10/03/Slow-Software-Inventory-Cycle-in-SCCM-2012.aspx

I always recommend the following: Set Hardware Inventory to daily (simple schedule) Set Heartbeat discovery to daily (simple schedule) Enable all AI classes except for Shortcuts DISABLE Software Inventory, it is useless.

Yes you can write a custom report to do that but keep in mind that it will not be 100% valid due to timing and laptops being off the network. Look at eh build-in report and use the timestamp column to filter in those rows from the last 24 hours.

This information is not possible to collect. There is no guarantee way to know if software was installed by CM12 or manually.