locked
SCCM server 2012 device collection Patch updates change tracking RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi

    We are having SCCM server 2012 in our environment, someone changed/altered patch updates collection which caused unapproved servers reboot maintenance. 

    We need to know who changed patch updates group changes:

    Assets and Compliance >> Device Collections >> Patch Updates

    is there any way to know who changed it? 

    MD

    Sunday, July 28, 2019 2:32 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi MD,
       

    If you have made any changes to the product and classification in WSUS, you can check the change.log (on the WSUS server, usually located in Program Files\Update Services\LogFiles).
      

    As far as I know, in SCCM, you can consider viewing the WCM.log (on the site server, usually located in Program Files\Microsoft Configuration Manager\Logs) and also record the relevant changes.
      

    Hope the above can help you.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, July 29, 2019 3:22 AM