none
SCCM 1710 - Report Generation RRS feed

  • Question

  • Hi All,

    Need some advice on the below please

    I have SCCM CB 1710 in which i need to collect the below reports if possible. Kindly suggest 

    * Can it check if power shell code or any script execution is disabled 
    * Check if USB access is blocked. Is there any report i can customize or is it available out of box
    * Prevent Code execution on the client PC? Can i control from client settings?
    * Check if compilers and libraries are not installed?
    * Collect the services running on server? and its status started/disabled?
    * Can i collect the service account configured for the services running on the server?


    Regards, Pratap

    Monday, October 14, 2019 11:57 AM

All replies

  • Hi Pratap,

    We can to this with SCCM compliance settings, but you have to customize and create configuration item related to you need.

    For the running services, I think you can get this with a Hardware Inventory, check in their browser.

    More details about compliance settings in SCCM:

    https://docs.microsoft.com/en-us/sccm/compliance/get-started/get-started-with-compliance-settings

    https://docs.microsoft.com/en-us/sccm/compliance/deploy-use/create-configuration-baselines

    Don't forget that SCCM 1710 is no longer supported, you have to upgrade it to the latest SCCM CB version 1906.

    https://www.systemcenterdudes.com/sccm-1902-step-by-step-upgrade-guide/

    Regards,

    SAAD Youssef

    ______

    Please remember to mark the replies as answer if they help, thank you!



    • Edited by SAAD Youssef Monday, October 14, 2019 12:45 PM
    • Proposed as answer by SAAD Youssef Monday, October 14, 2019 1:52 PM
    Monday, October 14, 2019 12:43 PM
  • A configuration baseline is what you would require for all of them.
    You can also utilise the Scripts feature if you choose to upgrade to 1802 as it may only be available to you as a pre-release feature possibly

    Website: www.walshamsolutions.com Technical Blog: https://www.walshamsolutions.com/technical-blog Personal Blog: https://www.walshamsolutions.com/personal-blog Twitter: Dwalshampro

    Monday, October 14, 2019 12:52 PM
  • Hello Pratap,
     
    Thanks for posting in TechNet.
     
    I believe there is more than one way to achieve your goals. The point is how we get these information on the local machine, and if we need a real-time report. Then we can determine which method is appropriate.

    > Can it check if power shell code or any script execution is disabled?
     
    Take PowerShell for an example, we could get execution policy by running the cmdlet "Get-ExecutionPolicy". We could get the result/report by using compliance baseline, running script. Keep in mind that running scripts require the client to be online or go online within the next hour.
     
    > Check if USB access is blocked.
     
    We could check registry to see if USB access is blocked. As above, we could use compliance baseline, script, even hardware inventory.
     
    > Prevent Code execution on the client PC? Can i control from client settings?
     
    We could set PowerShell execution policy from client settings as shown below.
     

     
    > Check if compilers and libraries are not installed?
     
    If they are registered in WMI, we could get the report by hardware inventory, or comliance baseline.
     
    > Collect the services running on server? and its status started/disabled?
     
    We could collect it by hardware inventory. But if you need a real-time report, I believe the best method is updating SCCM to at least 1806 so we could use a feature called "CMPivot" to the the real-time data. Refer to the following screenshot.
     
      
    >  Can i collect the service account configured for the services running on the server?
     
    Yes, refer to above capture.
     
    Hope my answer could help you and look forward to your feedback.
     
    Best Regards,
    Ray
     

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 15, 2019 7:33 AM
  • Hello Pratap,
     
    I noticed that you have not updated for several days. May I know that if your issue is solved or if there is any update? Feel free to feedback. 
     
    Best Regards,
    Ray

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 21, 2019 2:33 AM