After you have deployed System Center 2012
Configuration Manager configuration baselines to computers in
your hierarchy, you can use one or more of the following procedures
to display the compliance status of the configuration baseline:
Note |
The validation criteria fields in compliance settings reports
(the equivalent on the client-side report is Constraints)
display the underlying Service Modeling Language (SML). This can
make it difficult for administrators who have authored the
configuration item in the Configuration Manager console to
understand what the validation criteria is if they do not have
knowledge of SML. In this case, use the Monitoring workspace
in the Configuration Manager console to view the properties of the
configuration item and its validation criteria. |
How to View Compliance Results in the
Configuration Manager Console
Use this procedure to view details about the compliance
of deployed configuration baselines in the Configuration Manager
console.
To view compliance results in the
Configuration Manager console
-
In the Configuration Manager console, click
Monitoring.
-
In the Monitoring workspace, click
Deployments.
-
In the Deployments list, select the
configuration baseline deployment for which you want to review
compliance information.
-
You can review summary information about the compliance
of the configuration baseline deployment on the main page. To view
more detailed information, select the configuration baseline
deployment, and then on the Home tab, in the
Deployment group, click View Status to open the
Deployment Status page.
The Deployment Status page contains the
following tabs:
- Compliant: Displays the compliance of
the configuration baseline based on the number of assets affected.
You can click a rule to create a temporary node under the
Users or Devices node that are in the Assets and
Compliance workspace, which contains all users or devices that
are compliant with this rule. The Asset Details pane
displays the users or devices that are compliant with the
configuration baseline. Double-click a user or device in the list
to display additional information.
Important |
A configuration item rule is not evaluated if it is not
detected or not applicable on a client computer; however, the rule
is returned as compliant. |
- Error: Displays a list of all errors
for the selected configuration baseline deployment based on number
of assets affected. You can click a rule to create a temporary node
under the Users or Devices node of the Assets and
Compliance workspace, which contains all users or devices that
generated errors with this rule. When you select a user or device,
the Asset Details pane displays the users or devices that
are affected by the selected issue. Double-click a user or device
in the list to display additional information about the issue.
- Non-Compliant: Displays a list of all
noncompliant rules within the configuration baseline based on
number of assets affected. You can click a rule to create a
temporary node under the Users or Devices node of the
Assets and Compliance workspace, which contains all users or
devices that are not compliant with this rule. When you select a
user or device, the Asset Details pane displays the users or
devices that are affected by the selected issue. Double-click a
user or device in the list to display further information about the
issue.
- Unknown: Displays a list of all users
and devices that did not report compliance for the selected
configuration baseline deployment together with the current client
status of devices.
-
On the Deployment Status page, you can review
detailed information about the compliance of the deployed
configuration baseline. A temporary node is created under the
Deployments node that helps you find this information again
quickly.
How to View Compliance Results by Using
Reports
Compliance settings in Configuration Manager includes a
number of built-in reports that let you monitor information about
configuration items, configuration baselines, and deployments.
These reports have the report category of Compliance and
Settings Management.
Important |
You must use a wildcard (%) character when you use the
parameters Device filter and User filter in the compliance
settings reports. |
For more information about how to configure Reporting
in Configuration Manager, see Reporting in
Configuration Manager
How to View Compliance Results on a
Configuration Manager Client
Use this procedure to view details about the compliance
of deployed configuration baselines on the Configuration Manager
client.
Note |
You cannot view information on the Configuration Manager client
if you are logged on with a domain Guest account. |
To view compliance results on a
Configuration Manager client
-
Navigate to Configuration Manager in Control
Panel of the client computer, and double-click it to open its
properties.
-
Click the Configurations tab, and view the list
of deployed configuration baselines.
-
View the Compliance State for each configuration
baseline:
Important |
The evaluation results are cached on the client for 15 minutes.
If you initiate a re-evaluation within the 15 minute period, the
compliance results are returned from this cache rather than a new
evaluation. Therefore, if you make a change on the client that
might affect the compliance evaluation results, wait until the 15
minutes have elapsed before initiating a re-evaluation. |
- Compliant: The client computer is in
compliance with the evaluated configuration baseline.
- Non-Compliant: The client computer is
out of compliance with the evaluated configuration baseline.
- Unknown: The client computer has not
yet evaluated the configuration baseline. If you want to initiate
evaluation outside the compliance evaluation schedule, select the
configuration baselines to evaluate, and then click
Evaluate.
Note |
If you have local administrator credentials on the client
computer, you can view details of each evaluated configuration
baseline to determine which configuration item is reporting a
noncompliant status. To do this, select the configuration baseline,
and then click View Report. |
-
Click OK.
How to Create Collections Based on
Configuration Baseline Compliance
Use the following procedure to create a Configuration
Manager collection based on devices with a specified compliance.
You can create collections based on the following compliance
states:
- Compliant
- Error
- Non-compliant
- Unknown
To create a collection based on
compliance state
-
In the Configuration Manager console, click Assets
and Compliance.
-
In the Assets and Compliance workspace, expand
Compliance Settings, and then click Configuration
Baselines.
-
In the Configuration Baselines list, select the
configuration baseline from which you want to create a
collection.
-
In the Deployment tab, in the Deployment
Group, click Create New Collection and then, in the
drop-down list, select the compliance level for which you want to
create a collection.
-
The Create User Collection Wizard or the
Create Device Collection Wizard opens, depending on whether
the configuration item is deployed to users or devices. The wizard
is automatically populated with the correct values to create the
collection; however, you can edit these values.
-
After you complete the wizard, the collection displays
in the User Collections or the Device Collections
node in the Assets and Compliance workspace.
See Also