IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.

SCCM Documentation

From Tanium Knowledge Base
Jump to navigation Jump to search

Introduction: Core SCCM Content

Systems administrators can use the Tanium Microsoft System Center Configuration Manager (SCCM) Content to provide useful inventory and state information for a wide variety of endpoint management, security, and risk reduction use cases. Tanium SCCM Content answers questions such as:

  • What is the Health of the SCCM Client?
  • What is the compliance status for each DCM baseline?
  • What is the role of the SCCM Server?
  • When was the last software update and what was the source of that update?
  • What are all the SCCM Client Components and what are their states?

The Tanium platform is well-suited to gathering this sort of information, and the SCCM Content solution is intended to bootstrap the most critical questions.

Release Notes

The release notes for this version are at Release Notes SCCM Support (Version 3.3)

Download Location

This content is available on the Solutions manifest of any licensed Tanium installation and is included by default in all Tanium Cloud instances.

Questions

The saved questions in Tanium SCCM Content can be used as Drill-Downs or browsed through Interact dashboards.

SCCM - Assign Discovered Site Code

Get Computer Name from machines where SCCM Client Running contains Yes

SCCM - AutoAssignment Enabled

Get Computer Name and SCCM AutoAssignment Enabled from all machines

SCCM - Available Programs

Get Computer Name and SCCM Available Programs from all machines

SCCM - Change Site Code

Get SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Client Cache Location

Get Computer Name and SCCM Client Cache Location from all machines

SCCM - Client Cache Over 75_ Full

Get Computer Name and SCCM Cache Percent Used from machines where all SCCM Cache Percent Used > 75

SCCM - Client Cache Size

Get SCCM Cache Size from all machines

SCCM - Client Components

Get SCCM Client Components from all machines

SCCM - Client Health Summary

Get SCCM Client Health from all machines with SCCM Client Running contains Yes

SCCM - Client ID

Get Computer Name and SCCM Client ID from all machines

SCCM - Client Installed but Not Running

Get Computer Name and SCCM Client Running from machines where SCCM Client Installed contains Yes and SCCM Client Running contains no

SCCM - Client MSI Properties

Get Computer Name and SCCM Client MSI Properties from all machines

SCCM - Client Not Installed

Get Computer Name and SCCM Client Installed from machines where SCCM Client Installed contains no

SCCM - Client Version Distribution

Get SCCM Client Version and SCCM Site Code from all machines

SCCM - Computer Name and Client Version

Get Computer Name and SCCM Client Version from all machines

SCCM - Computers With Unhealthy SCCM WMI

Get Computer Name and SCCM WMI Health from machines where SCCM WMI Health contains Error

SCCM - DCM Status

Get SCCM DCM Status from all machines

SCCM - Fallback Status Points

Get SCCM Client Fallback Status Point from machines where SCCM Client Running contains Yes

SCCM - Force All Policy Refresh

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Branch DP Maintenance

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Client Repair

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Discovery Data Collection

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force File Collection

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Hardware Inventory Scan

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Machine Policy Update

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Software Inventory Scan

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Software Metering Usage Scan

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Software Update Compliance State Refresh

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Software Updates Deployment Evaluation

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Software Updates Scan

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force User Policy Update

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Force Windows Installer Source List Update

Get Computer Name and SCCM Site Code from machines where SCCM Client Running contains Yes

SCCM - Management Points

Get SCCM Management Point from machines where SCCM Client Running contains Yes

SCCM - No Client Communication in over a Day

Get Computer Name from machines where SCCM Client Communication Days Old > 1

SCCM - Proxy Management Points

Get SCCM Proxy Management Point from all machines

SCCM - Restart Agent Service [Use Drill-Down to Target]

Get Running Service contains SMS Agent Host from machines where Running Service contains SMS Agent Host

SCCM - Server Roles

Get SCCM Server Roles from all machines with SCCM Server Roles contains Yes

SCCM - Software Updates Scan Age

Get SCCM Software Updates Scan Age from all machines with SCCM Client Running contains Yes

SCCM - Software Updates Scan Source

Get SCCM Software Updates Scan Source from all machines with SCCM Client Running contains Yes

SCCM - Start Agent Service [Use Drill-Down to Target]

Get Stopped Service contains SMS Agent Host from machines where Stopped Service contains SMS Agent Host

SCCM - Stop Agent Service [Use Drill-Down to Target]

Get Running Service contains SMS Agent Host from machines where Running Service contains SMS Agent Host

SCCM - WMI Health Overview

Get SCCM WMI Health from all machines

SCCM Clients Communicating Via Internet

Get Computer Name and SCCM Internet Client from machines where all SCCM Internet Client contains Yes

SCCM Clients With Unhealthy WMI

Get Computer Name and any SCCM WMI Health does not contain OK from all machines

SCCM Clients with Mandatory Assignments Pending

Get Computer Name and SCCM Mandatory Assignment Pending contains Yes from all machines

SCCM Management Point

Get Computer Name and SCCM Management Point from all machines

SCCM Site Codes

Get Computer Name and SCCM Site Code from all machines

Packages

SCCM - Assign Discovered Site Code

This action forces a client back into autodiscovery and assigns it site based on its location.

SCCM - Change Fallback Status Point

This action will set the Fallback Status Point if the SCCM service is installed

SCCM - Change Management Point

This action takes a parameter and changes the management point to what is passed in

SCCM - Change Server Locator Point

This action will set the Server Locator Point if the SCCM service is installed

SCCM - Change Site Code

This action takes a parameter and changes the site code to that value

SCCM - Force All Policy Refresh

This action forces a policy refresh and, as a result, will update DDR

SCCM - Force Branch DP Maintenance

This action forces a client to perform branch DP maintenance

SCCM - Force Client Repair

This action will force the SCCM client to repair itself

SCCM - Force Client Uninstall

This action will force the SCCM client to uninstall itself

SCCM - Force Discovery Data Collection

This action forces a client to do a Discovery Data Collection Cycle

SCCM - Force File Collection

This action forces a client to collect files and send them upward

SCCM - Force Hardware Inventory Scan

This action forces a client to do HW inventory

SCCM - Force Machine Policy Update

This action forces a client to update machine policy

SCCM - Force Software Inventory Scan

This action forces a client to do SW inventory

SCCM - Force Software Metering Usage Scan

This action forces a client to update Software Metering usage

SCCM - Force Software Update Compliance State Refresh

This action forces a client to recreate and resend its updates compliance stateThis is useful when the client is misreporting its update compliance.

SCCM - Force Software Updates Deployment Evaluation

This action forces a client to check for which updates are deployed to it

SCCM - Force Software Updates Scan

This action forces a client to scan for updates

SCCM - Force User Policy Update

This action forces a client to update user policy

SCCM - Force Windows Installer Source List Update

This action forces a client to perform a windows installer source list update

Sensors

SCCM AutoAssignment Enabled

Checks if automatic site assignment is enabled

SCCM Available Programs

The list of available program advertisements.

SCCM Cache Percent Used

The percentage of used cache.

SCCM Cache Size

Returns the SCCM agent's configured (not current cache usage) cache size in MB

SCCM Client Cache Location

The location of the client's cache.

SCCM Client Communication Days Old

The number of days since last time the policy log file was updated.

SCCM Client Components

A listing of client components and their state.

SCCM Client Fallback Status Point

The configured fallback status point.

SCCM Client Health

Returns Healthy or Needs Attention for SCCM Client Health status, as well as a reason for not being healthy or those that Need Attention
Example: No|SCCM Client Not Running

SCCM Client ID

The client's ID (GUID).

SCCM Client Installed

Determines if the client service is installed.

SCCM Client MSI Properties

The Windows Installer parameters used the last time the client was successfully installed.

SCCM Client Running

Determines if the cliet service is running.

SCCM Client Version

Returns the version and a version description, if possible, of the SCCM client.
Example: 5.00.7958.1000|2012 R2

SCCM DCM Status

This sensor will return compliance status for each DCM baseline on the machine.
Example: My Baseline Name|Yes

SCCM Internet Client

Determines if the client is currently connected via Internet. It will report Always if the client is always on the Internet.

SCCM Management Point

The client's management point.

SCCM Mandatory Assignment Pending

Determines if a mandatory advertisement is pending.

SCCM Proxy Management Point

The client's proxy management point.

SCCM Server Roles

Determines if the server is acting as a Distribution Point, a Management Point, or a Software Update Point.

SCCM Site Code

The client's assigned site code.

SCCM Software Updates Scan Age

Returns the number of days since the last SCCM Software Updates Scan

SCCM Software Updates Scan Source

Returns the WSUS Server and Content Version of the last SCCM Software Updates Scan

SCCM WMI Health

Checks the health of client WMI namespaces.