SCCM 2012

Hi All,

Can someone tell me where/how I can find who has been adding devices (workstations) to a particular collection in SCCM 2012?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

In a manner of speaking yes.

Open the Monitoring workspace, expand the System Status section and click on the Status Message Queries node.
Search for a query called Collections Created, Modified, or Deleted.

You can specify how far back to query.  This will then show you what collections were changed in that timeframe and who did what.  However, it wont show specifics such as "John added user Fred to Collection A", it will just say something like "Collection A had its membership modified by John on Friday"

You may be able to find more specific information if you actually delve into the logs on the site server, but I haven't yet needed to dig that far so I cannot confirm this.

But based on your original question, the above should hopefully provide you with the information you need.

(there is a more specific version of that query in the same location, called All Status Messages for a Specific Collection at a Specific Site, but you will need to enter the id of the collection you wish to query plus a few other specifics. But it wont give much more info than the first query, its just a bit more targeted.)


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Applications

From novice to tech pro — start learning today.