May 3 2011

SCCM report for computers with a service STOPPED

In a recent case, I needed to run a report to work out which systems had a particular server (antivirus) installed but was in the STOPPED state. After modifying the sms_mof file:

[SMS_Report (TRUE) ]
string State;

and running a hardware inventory on all machines, I could then create a report with the following query:

Select Distinct
SYS.Netbios_Name0,
sys.AD_Site_Name0,
sys.User_Domain0,
sys.User_Name0,
SERV.DisplayName0,
SERV.State0
From
v_R_System SYS Join
v_GS_SERVICE SERV On SYS.ResourceID = SERV.ResourceID
Where
SERV.DisplayName0 = 'OfficeScanNT RealTime Scan' and SERV.State0 = 'Stopped'
Order By
SYS.Netbios_Name0

 
 



----------------------------------------------------------------------------
I use a maximum of one Google Ad per post to help offset some of my blog hosting costs.

----------------------------------------------------------------------------


Tags: , , , ,

Posted May 3, 2011 by danovich in category "SMS / SCCM

2 COMMENTS :

  1. By Ed on

    Is is possible to create a query with Stopped, Started, and Disabled in the same query?

    Reply

Leave a Reply