• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 677
  • Last Modified:

SCCM logs - Last update/contact

Which of the many logs can I look at to see when an SCCM client last tried to do Software Updates?

I've tried to track this down and hit a lot of dead ends.

SCCM 2012, although the logs are still in %windir%\CCM\Logs
0
ServerNotFound
Asked:
ServerNotFound
  • 3
  • 2
1 Solution
 
Brad BouchardInformation Systems Security OfficerCommented:
By default, the SCCM Client checks in every 15 minutes to report it’s status back to SCCM, but only once per hour to get a policy update.
Per this:  http://public.madeinengland.co.nz/how-often-does-the-sccm-client-check-in/


So, the best place to look would be the WUAHandler.log
per this:  http://blogs.msdn.com/b/lxchen/archive/2009/04/03/a-list-of-sccm-log-files.aspx
0
 
Brad BouchardInformation Systems Security OfficerCommented:
There are also several supporting logs that could probably help out with the WUAHandler as well on that link I posted:

http://blogs.msdn.com/b/lxchen/archive/2009/04/03/a-list-of-sccm-log-files.aspx
0
 
ServerNotFoundAuthor Commented:
We are seeing TLS/SSL errors once every Monday morning on every server.  I am trying to find what log I can find this in.

It is happening to all of our servers in CM, but none not in CM.
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
ServerNotFoundAuthor Commented:
Thanks.  I am trying to find anything else that could be the same.


I saw that software deployment defaulted to Monday at 3am.  The UpdatesDeployment log file doesn't have much either.
0
 
Brad BouchardInformation Systems Security OfficerCommented:
I saw your other post about that Schannel error.  Let me do some looking/researching and I'll try to come up with something.  Typically Schannel on 2008 or 2003 meant that the server had a problem with its machine account password on the DC, but that isn't the case with your other question.

Anyway, like I said, give me a little bit and I'll see what I can come up with.
0
 
JJsPCsCommented:
We have same every 4th Friday.  Checked with network security group and they do a vulnerability check then - surprised, but at least we know
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now