Team blog of MCS @ Middle East and Africa

This blog is created by Microsoft MEA HQ near shoring team, and it aims to share knowledge with the IT community.With its infrastructure and development sides,It brings to you the proven best practices and real world experiences from Subject Matter Experts
Follow Us On Twitter! Subscribe To Our Blog! Contact Us

Step by Step: How to Audit Configuration Manager 2007 Activities

Step by Step: How to Audit Configuration Manager 2007 Activities

  • Comments 2
  • Likes

In most of large System Center Configuration Manager 2007 environment different Administrators can manage the IT environment using their Administrative accounts through System Center Configuration Manager 2007 Console that is locally installed on their PCs, while the IT manager want to audit and track different Configuration Manager activities done by which of Configuration Manager Administrator and in which time,

This post describe the step by step to show IT manager or CIO how to know what are each Configuration Manager Administrator activities in Configuration Manager,

Simply I will use one of the Status Message Queries called “All Audit Status Message for a Specific User”, and Steps are as the following:

1. Open System Center Configuration Manager Console.

2. Expand Site System Configuration Manager, then Site Database (…), then System Status, then Status Message Queries.

3. From the available Status Messages Queries, select “All Audit Status Message for a Specific User”.

clip_image002

4. From Actions Panel, click Show Messages.

5. In All Audit Status Messages for a Specific User window specific the user name that you want to do audit against in Property Value.

clip_image004

6. The in the same window specify time and date by click on Time, and then select date and time for example 1 week ago, and then click ok.

clip_image006

7. Then you will find all Audit status message related to the specified user name within the time period you select as below.

clip_image008

8. You can find more details when double click on each message as below.

clip_image010

Then IT Manager and/or CIO can easily Audit on his Configurations Manager Administrator activities that they do on Configuration Manager within specified period of time that can be hours or weeks or months or years as well.

 

Related Posts:

System Center Configuration Manager 2007 R3 Delta Discovery: http://blogs.technet.com/b/meamcs/archive/2011/01/23/system-center-configuration-manager-2007-r3-delta-discovery.aspx

System Center Configuration Manager 2007 R3 Dynamic Collection: http://blogs.technet.com/b/meamcs/archive/2011/01/23/system-center-configuration-manager-2007-r3-dynamic-collection.aspx 

"Configuration Manager 2007 R3 Power Management Overview" Part 1 can found here: http://blogs.technet.com/b/meamcs/archive/2011/01/09/system-center-configuration-manager-2007-r3-power-management-part1-overview.aspx

"Update Client for Configuration Manager 2007 R3 Power Management" Part 2 can be found here: http://blogs.technet.com/b/meamcs/archive/2011/01/11/system-center-configuration-manager-2007-r3-power-management-part-2-update-clients-for-power-management.aspx

Comments
  • Hi, where can I find the "Description" value in SQL database?

    I would like to create a custom report for this because built-in report does not show descritpiton of every status message.

    Thanks!

  • By default, what is the retention period of the auditing log i can view for a specific user? is it 1 year? is this setting configurable? where can i find it?

    Many thanks.

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment