SCCM Documentation
Introduction: Core SCCM Content
Systems administrators can use the Tanium Microsoft System Center Configuration Manager (SCCM) Content to provide useful inventory and state information for a wide variety of endpoint management, security, and risk reduction use cases. Tanium SCCM Content answers questions such as:
- What is the Health of the SCCM Client?
- What is the compliance status for each DCM baseline?
- What is the role of the SCCM Server?
- When was the last software update and what was the source of that update?
- What are all the SCCM Client Components and what are their states?
The Tanium platform is well-suited to gathering this sort of information, and the SCCM Content solution is intended to bootstrap the most critical questions.
Release Notes
The release notes for this version are at Release Notes SCCM Support (Version 3.3)
Download Location
This content is available on the Solutions manifest of any licensed Tanium installation and is included by default in all Tanium Cloud instances.
Questions
The saved questions in Tanium SCCM Content can be used as Drill-Downs or browsed through Interact dashboards.
SCCM - Assign Discovered Site Code
Get Computer Name from machines where SCCM Client Running contains Yes
SCCM - AutoAssignment Enabled
Get Computer Name and SCCM AutoAssignment Enabled from all machines
SCCM - Available Programs
Get Computer Name and SCCM Available Programs from all machines
SCCM - Change Site Code
Get SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Client Cache Location
Get Computer Name and SCCM Client Cache Location from all machines
SCCM - Client Cache Over 75_ Full
Get Computer Name and SCCM Cache Percent Used from machines where all SCCM Cache Percent Used > 75
SCCM - Client Cache Size
Get SCCM Cache Size from all machines
SCCM - Client Components
Get SCCM Client Components from all machines
SCCM - Client Health Summary
Get SCCM Client Health from all machines with SCCM Client Running contains Yes
SCCM - Client ID
Get Computer Name and SCCM Client ID from all machines
SCCM - Client Installed but Not Running
Get Computer Name and SCCM Client Running from machines where SCCM Client Installed contains Yes and SCCM Client Running contains no
SCCM - Client MSI Properties
Get Computer Name and SCCM Client MSI Properties from all machines
SCCM - Client Not Installed
Get Computer Name and SCCM Client Installed from machines where SCCM Client Installed contains no
SCCM - Client Version Distribution
Get SCCM Client Version and SCCM Site Code from all machines
SCCM - Computer Name and Client Version
Get Computer Name and SCCM Client Version from all machines
SCCM - Computers With Unhealthy SCCM WMI
Get Computer Name and SCCM WMI Health from machines where SCCM WMI Health contains Error
SCCM - DCM Status
Get SCCM DCM Status from all machines
SCCM - Fallback Status Points
Get SCCM Client Fallback Status Point from machines where SCCM Client Running contains Yes
SCCM - Force All Policy Refresh
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Branch DP Maintenance
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Client Repair
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Discovery Data Collection
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force File Collection
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Hardware Inventory Scan
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Machine Policy Update
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Software Inventory Scan
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Software Metering Usage Scan
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Software Update Compliance State Refresh
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Software Updates Deployment Evaluation
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Software Updates Scan
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force User Policy Update
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Force Windows Installer Source List Update
Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes
SCCM - Management Points
Get SCCM Management Point from machines where SCCM Client Running contains Yes
SCCM - No Client Communication in over a Day
Get Computer Name from machines where SCCM Client Communication Days Old > 1
SCCM - Proxy Management Points
Get SCCM Proxy Management Point from all machines
SCCM - Restart Agent Service [Use Drill-Down to Target]
Get Running Service contains SMS Agent Host from machines where Running Service contains SMS Agent Host
SCCM - Server Roles
Get SCCM Server Roles from all machines with SCCM Server Roles contains Yes
SCCM - Software Updates Scan Age
Get SCCM Software Updates Scan Age from all machines with SCCM Client Running contains Yes
SCCM - Software Updates Scan Source
Get SCCM Software Updates Scan Source from all machines with SCCM Client Running contains Yes
SCCM - Start Agent Service [Use Drill-Down to Target]
Get Stopped Service contains SMS Agent Host from machines where Stopped Service contains SMS Agent Host
SCCM - Stop Agent Service [Use Drill-Down to Target]
Get Running Service contains SMS Agent Host from machines where Running Service contains SMS Agent Host
SCCM - WMI Health Overview
Get SCCM WMI Health from all machines
SCCM Clients Communicating Via Internet
Get Computer Name and SCCM Internet Client from machines where all SCCM Internet Client contains Yes
SCCM Clients With Unhealthy WMI
Get Computer Name and any SCCM WMI Health does not contain OK from all machines
SCCM Clients with Mandatory Assignments Pending
Get Computer Name and SCCM Mandatory Assignment Pending contains Yes from all machines
SCCM Management Point
Get Computer Name and SCCM Management Point from all machines
SCCM Site Codes
Get Computer Name and SCCM Site Code from all machines
Packages
SCCM - Assign Discovered Site Code
This action forces a client back into autodiscovery and assigns it site based on its location.
SCCM - Change Fallback Status Point
This action will set the Fallback Status Point if the SCCM service is installed
SCCM - Change Management Point
This action takes a parameter and changes the management point to what is passed in
SCCM - Change Server Locator Point
This action will set the Server Locator Point if the SCCM service is installed
SCCM - Change Site Code
This action takes a parameter and changes the site code to that value
SCCM - Force All Policy Refresh
This action forces a policy refresh and, as a result, will update DDR
SCCM - Force Branch DP Maintenance
This action forces a client to perform branch DP maintenance
SCCM - Force Client Repair
This action will force the SCCM client to repair itself
SCCM - Force Client Uninstall
This action will force the SCCM client to uninstall itself
SCCM - Force Discovery Data Collection
This action forces a client to do a Discovery Data Collection Cycle
SCCM - Force File Collection
This action forces a client to collect files and send them upward
SCCM - Force Hardware Inventory Scan
This action forces a client to do HW inventory
SCCM - Force Machine Policy Update
This action forces a client to update machine policy
SCCM - Force Software Inventory Scan
This action forces a client to do SW inventory
SCCM - Force Software Metering Usage Scan
This action forces a client to update Software Metering usage
SCCM - Force Software Update Compliance State Refresh
This action forces a client to recreate and resend its updates compliance stateThis is useful when the client is misreporting its update compliance.
SCCM - Force Software Updates Deployment Evaluation
This action forces a client to check for which updates are deployed to it
SCCM - Force Software Updates Scan
This action forces a client to scan for updates
SCCM - Force User Policy Update
This action forces a client to update user policy
SCCM - Force Windows Installer Source List Update
This action forces a client to perform a windows installer source list update
Sensors
SCCM AutoAssignment Enabled
Checks if automatic site assignment is enabled
SCCM Available Programs
The list of available program advertisements.
SCCM Cache Percent Used
The percentage of used cache.
SCCM Cache Size
Returns the SCCM agent's configured (not current cache usage) cache size in MB
SCCM Client Cache Location
The location of the client's cache.
SCCM Client Communication Days Old
The number of days since last time the policy log file was updated.
SCCM Client Components
A listing of client components and their state.
SCCM Client Fallback Status Point
The configured fallback status point.
SCCM Client Health
Returns Healthy or Needs Attention for SCCM Client Health status, as well as a reason for not being healthy or those that Need Attention
Example: No|SCCM Client Not Running
SCCM Client ID
The client's ID (GUID).
SCCM Client Installed
Determines if the client service is installed.
SCCM Client MSI Properties
The Windows Installer parameters used the last time the client was successfully installed.
SCCM Client Running
Determines if the cliet service is running.
SCCM Client Version
Returns the version and a version description, if possible, of the SCCM client.
Example: 5.00.7958.1000|2012 R2
SCCM DCM Status
This sensor will return compliance status for each DCM baseline on the machine.
Example: My Baseline Name|Yes
SCCM Internet Client
Determines if the client is currently connected via Internet. It will report Always if the client is always on the Internet.
SCCM Management Point
The client's management point.
SCCM Mandatory Assignment Pending
Determines if a mandatory advertisement is pending.
SCCM Proxy Management Point
The client's proxy management point.
SCCM Server Roles
Determines if the server is acting as a Distribution Point, a Management Point, or a Software Update Point.
SCCM Site Code
The client's assigned site code.
SCCM Software Updates Scan Age
Returns the number of days since the last SCCM Software Updates Scan
SCCM Software Updates Scan Source
Returns the WSUS Server and Content Version of the last SCCM Software Updates Scan
SCCM WMI Health
Checks the health of client WMI namespaces.