Solved

SCCM logs - Last update/contact

Posted on 2014-04-01
6
605 Views
Last Modified: 2014-09-06
Which of the many logs can I look at to see when an SCCM client last tried to do Software Updates?

I've tried to track this down and hit a lot of dead ends.

SCCM 2012, although the logs are still in %windir%\CCM\Logs
0
Comment
Question by:ServerNotFound
  • 3
  • 2
6 Comments
 
LVL 17

Accepted Solution

by:
Brad Bouchard earned 500 total points
Comment Utility
By default, the SCCM Client checks in every 15 minutes to report it’s status back to SCCM, but only once per hour to get a policy update.
Per this:  http://public.madeinengland.co.nz/how-often-does-the-sccm-client-check-in/


So, the best place to look would be the WUAHandler.log
per this:  http://blogs.msdn.com/b/lxchen/archive/2009/04/03/a-list-of-sccm-log-files.aspx
0
 
LVL 17

Expert Comment

by:Brad Bouchard
Comment Utility
There are also several supporting logs that could probably help out with the WUAHandler as well on that link I posted:

http://blogs.msdn.com/b/lxchen/archive/2009/04/03/a-list-of-sccm-log-files.aspx
0
 

Author Comment

by:ServerNotFound
Comment Utility
We are seeing TLS/SSL errors once every Monday morning on every server.  I am trying to find what log I can find this in.

It is happening to all of our servers in CM, but none not in CM.
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 

Author Comment

by:ServerNotFound
Comment Utility
Thanks.  I am trying to find anything else that could be the same.


I saw that software deployment defaulted to Monday at 3am.  The UpdatesDeployment log file doesn't have much either.
0
 
LVL 17

Expert Comment

by:Brad Bouchard
Comment Utility
I saw your other post about that Schannel error.  Let me do some looking/researching and I'll try to come up with something.  Typically Schannel on 2008 or 2003 meant that the server had a problem with its machine account password on the DC, but that isn't the case with your other question.

Anyway, like I said, give me a little bit and I'll see what I can come up with.
0
 

Expert Comment

by:JJsPCs
Comment Utility
We have same every 4th Friday.  Checked with network security group and they do a vulnerability check then - surprised, but at least we know
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now