GarthMJ

If you are not seeing within the CM12 console or within the reports. Then your task just got lot harder. You will either need to use CI to detect that it is installed using a WMI query or script. Start by looking at the QFE WMI class to confirm that they SU is displayed. If it is then create a CI to detect Computer that have it. In this case a "pass" is actually a fail. Then you can target all of the "pass" with an uninstall script to remove the SU in question.

This is probably not the answer you are looking for and this might come across the wrong way (it is not intended too, it meant to be a discussion point only) but when I consult on reporting for CM12/CM07, It is my job to tell clients that what they are asking for doesn't make sense and will not work as they expect. Using your example. If I deploy 10 SU to a computer and the first 9 fail but he last one is successful. The report that you are looking for would show that the PC was successful, thereby showing an invalid result. The next problem you will have is the sheer volume of data that this will produce. If you have 2000 computer and you want to see the last results for those 2000 computer you are looking at (2000/80 lines) 25 pages of text (without headers, footers, etc.) Now I'm willing to bet that you actually don’t want the "last status update" but the "last status update for each SU", and if this is the case, this is an insane request. Why? Preform the following steps: Execute the report call Compliance 5 - Specific computer for a sample computer. Export the report to excel Find the last line in Excel Determine the # of SU(For my test computer Windows 8.1, there are 209-6 for the header of the report = 197) Now for the math, 197*2000/80 = 4925 pages! (without headers, footers, etc.) Who will ever read this report? The answer is no one. Then I would expect the discussion to move that you don’t actually want see ALL SU but only the SU for the last month? How do you determine which SU have been apply in the last month? Do you need 100% accuracy? What do you do about old SU that got applied this month? What do you do about SU are say they are applied but later (~7 days) show as not installed? Ultimately I will ask why does it matter if SU are applied and successful? Isn’t the only real question is what SU are missing from a computer (now)? So what do I do in this case, I ask questions to the client, What are you trying to do? Why is the data useful? How exactly will you use the data? Who will read the reports?

Each computer would l have its own install date, therefore I’m sorry to say it but adding that details to that report doesn’t make any sense.

What you are trying to do is COMPLETELY unsupported. You can only delete a collect via the console or via the SDK.

yes.

This blog post will get you stated. http://smsug.ca/blogs/garth_jones/archive/2014/01/13/limiting-a-report-to-a-collection.aspx

First off, ensure that you have a good backup of both CM12 and SQL., Secondly, it is not support to use a CNAME. Thirdly, ensure that CM12 computer account is an Admin in SQL and on the SQL servers Fourthly, You will need to use the site reset to repoint CM12 to use the new SQL server. This will install (should) all the components that CM12 needs.

Have you considered Intune? why put it on Amazon?

Does this KB show up within the Built-in reports?

HW inventory is a lot more that physical hardware data, it gathers everything within the registry or WMI. AKA Add/Remove Program data and AI Data.

Updating inventory more frequently will ensure that the data is the most current. Of course it will affect bandwidth as you will be doing it more often but it will be much smaller packets. Honestly if you notice any issue then you have much bigger problems with your network.

No, NEVER use a set time! Only use a simple schedule, otherwise you will likely "kill" your site server or MP. Also I NEVER recommend using SW inv. too much over head! and add too much delays on a CM12 client. http://be.enhansoft.com/post/2013/10/03/Slow-Software-Inventory-Cycle-in-SCCM-2012.aspx

I always recommend the following: Set Hardware Inventory to daily (simple schedule) Set Heartbeat discovery to daily (simple schedule) Enable all AI classes except for Shortcuts DISABLE Software Inventory, it is useless.

Yes you can write a custom report to do that but keep in mind that it will not be 100% valid due to timing and laptops being off the network. Look at eh build-in report and use the timestamp column to filter in those rows from the last 24 hours.

This information is not possible to collect. There is no guarantee way to know if software was installed by CM12 or manually.

So it is unclear to me does this query work for you or not?

you need to use a subselect query. http://be.enhansoft.com/post/2014/09/17/The-Subselect-Query.aspx http://be.enhansoft.com/post/2014/09/24/Subselect-Query-for-SCCM-Queries-or-Collections-(WQL).aspx

Try accessing the website using the FQDN from your CM12 server.

Since you are clearly a consultant and clearly are going to charge your client for this work. I will let you do all the research into this but I will point you in the right direction. Skpswi.dat http://technet.microsoft.com/en-us/library/bb632671.aspx Plus System and Hidden file don’t always get inventoried. 4 hour time out, This is a well know issue and you can see the 4 hour time by reviewing your inventoryagent.log, just look at the last command. And there is no supported way to change this. Collection: Namespace = \\.\root\ccm\invagt; Query = SELECT Name, Path, LastWriteDate, Size, CompanyName, ProductName, ProductVersion, ProductLanguage, FileVersion, FileDescription FROM FileSystemFile WHERE Name = 'iexplore.exe' AND Path = 'C:\\Program Files\\Internet Explorer\\*' AND IsCompressed = FALSE AND IsEncrypted = FALSE; Timeout = 14400 secs. You should read this one as well. http://be.enhansoft.com/post/2013/10/03/Slow-Software-Inventory-Cycle-in-SCCM-2012.aspx I too am a consultant and I regularly tell my clients they are nuts. What they think is a simple thing is not always or it will cost huge $$s. This is one of those things that just doesn’t make sense.

IMO anything less that 4 hours is too much and seem to cause problems. Every 4 hours seem to work the best, all the time.

Why do you say Package does work with the App Catalog? They do work and I use them all the time.

I’m sorry to say this is an insane request. You need to talk to the person asking this and tell them “No”. Yes it is theoretically possible to do but theory and practice are two different things. CM12 will NOT inventory all EXE, even if you tell it too. CM12 will time out after 4 hours (runtime, not real time) of Scanning, if it not complete it will just stop and that it. While SW Inv is going on all other inventory tasks are blocked. Each different computer will have different EXE based on what tools are installed or Driver are installed. ‘ Just using my PCs as an example and only look at EXE, I have over 4700 EXEs on my C: alone! Each version of a EXE will be consider as two different items. Etc. Seriously I could go on and on about how this will virtually never work. What you need to find out is exactly what are their trying to solve by doing this. What is the risk of nto doing this and how much $$s do they want to spend on this?

Since you only waited less than 3 hours before "bumping" this post, it must mean this is an emergency and therefore you should contact Microsoft support (CSS) directly. They will work with you to solve this issue. Secondly, I'm sure that it can be done but it clearly is not a simple task, this will take a lot of programming and fiddling with security rights to get it right. My guess is that this will take someone ~1-5 days to create and test. Start by figuring out how to query DHCP using VBS or PowerShell, once you figure that out you can move on from there.

I would use a direct membership for the security group that you are using for both users and computers. Uninstalling for users collection is harder as it means that the SW might flip flop, Why would you want to do this? BTW You uninstall query will only find x86 software. it is not best practice to use NetBIOS name in the subselect, instead use resourceid.

Have you tried the built-in reports?