Use SCCM CMPivot Query to Find Installed Patches in Days

In this post, you’ll learn how to use an SCCM CMPivot query to find installed patches in the last 30 days, 60 days, or 90 days on your computers. You can also determine the installed date of the updates and hotfix ID, along with other information.

With CMPivot tool, you can find out the list of devices that have received the updates through SCCM in the last x days. This will help you determine if a specific KB update is installed on the computer or missing. You can also run CMPivot queries from Intune to determine the patches installed on tenant-attached devices.


There are multiple ways to determine if the updates are installed on a computer:


  • Use a PowerShell script to list the patches installed on remote computers.
  • Manually check the updates installed on your Windows computer.
  • Run a CMPivot query to find the patches installed in the last 30/60/90 days.
  • Most organizations use SCCM to deploy Windows updates. ConfigMgr reports are also useful in determining the list of updates that were installed on the computers. However, to get real-time data on installed patches, CMPivot is the best choice.


Note: Make sure the devices are online before running the CMPivot query. Now, occasionally, users in various time zones prevent all the computers in the SCCM device collection from being online. The CMPivot query will make an effort to run on every device, but if a device is offline or cannot be reached, you will be informed in the query output.


https://familymurders.com/forum/viewtopic.php?t=21506

https://familymurders.com/forum/viewtopic.php?t=143615

https://familymurders.com/forum/viewtopic.php?t=135057

http://www.skillcoach.org/forums/topic/407911/a-step-by-step-guide-on-how-to-book-flight-tickets

http://www.skillcoach.org/forums/topic/405661/the-best-flight-search-websites-making-travel-planning-a-breeze

https://www.iwantbots.com/viewtopic.php?t=37705

https://www.iwantbots.com/viewtopic.php?t=37788

https://www.iwantbots.com/viewtopic.php?t=37720

http://yonghengro.gain.tw/viewthread.php?tid=355119&extra=

http://yonghengro.gain.tw/viewthread.php?tid=157848&extra=

http://forum2.extremum.org/viewtopic.php?f=5&t=24990

http://forum2.extremum.org/viewtopic.php?t=113007

http://forum2.extremum.org/viewtopic.php?f=5&t=75335

http://junlinro520.gain.tw/viewthread.php?tid=340009&extra=

http://junlinro520.gain.tw/viewthread.php?tid=356034&extra=

https://www.cs-bg.org/forum/viewtopic.php?t=692

https://www.cs-bg.org/forum/viewtopic.php?t=691


CMPivot Query to Find Installed Patches in the Last 30 Days


We will now launch the CMPivot tool and run a query to find the installed patches in X days. The “X” here can be any value of your choice. You can substitute X with the values such as 30 days, 60 days, 90 days, etc.

Launch the SCCM console and navigate to Assets and Compliance > Overview > Device Collections. Right-click a device collection and select Start CMPivot. Switch to the Query tab and enter the below CMPivot query to find installed patches in the last 30 days.


When you run the above query, the CMPivot query output shows the following details:


  • Computer Name
  • Caption
  • Description
  • FixComments
  • HotfixID
  • InstallDate
  • installed
  • InstalledOn
  • Name
  • ServicePackIneffect
  • Status


Note: Some columns are blank in the output because there are no details available with SCCM. But the most important details are the hotfix ID and installed date.


CMPivot Query to find installed patches in the last 60 days


Launch the SCCM console and navigate to Assets and Compliance > Overview > Device Collections. Right-click a device collection and select Start CMPivot. Switch to the Query tab and enter the below CMPivot query to find installed patches in the last 60 days.


CMPivot Query to find installed patches in the last 90 days


Launch the SCCM console and navigate to Assets and Compliance > Overview > Device Collections. Right-click a device collection and select Start CMPivot. Switch to the Query tab and enter the below CMPivot query to find installed patches in the last 90 days.


Run CMPivot Queries from Intune Admin Center (Tenant Attach)


In this post, you’ll learn how to run CMPivot queries from Intune admin center. Microsoft Intune makes it easy to run CMPivot queries on tenant-attached devices and assess the state of devices in your environment.

To run the CMPivot query on a device in Intune, you must first enable the tenant to attach. Tenant attach connects your Intune tenant to your on-premises SCCM environment. Once you have configured the tenant attachment, you view and manage devices directly from the Intune Admin Center. Take a look at the guide on enabling SCCM tenants to attach.

With Configuration Manager, CMPivot query can query the data in real-time on all currently connected devices in the selected collection. Microsoft has extended the CMPivot feature to Intune, where you can run the CMPivot queries on the tenant-attached devices. For example, your Helpdesk team can launch real-time cloud queries against a single ConfigMgr-managed device and return the results to the Intune admin center.

In this post, we’ll go over the prerequisites and permissions needed to run CMPivot queries from the Intune portal. If the prerequisites and account permissions are not in place, you will receive error 401 or 403 when running CMPivot queries from the Intune portal.


https://www.cs-bg.org/forum/viewtopic.php?t=690

https://scort.vip/forum/viewtopic.php?t=1911

https://scort.vip/forum/viewtopic.php?t=2273

https://scort.vip/forum/viewtopic.php?t=2626

https://www.forum.interstate420productions.com/viewtopic.php?t=33954

https://www.forum.interstate420productions.com/viewtopic.php?f=9&t=40000

https://www.forum.interstate420productions.com/viewtopic.php?t=11481

https://adaptation-sterea.envirometrics.gr/index.php?topic=73395.0

https://adaptation-sterea.envirometrics.gr/index.php?topic=45283.0

https://adaptation-sterea.envirometrics.gr/index.php?topic=45953.0

https://www.konev.cz/diskuse/rozbalena-lednice-ano-nebo-ne-2747/

https://ciclistiurbani.re-bike.it/forum/showthread.php?tid=8

https://gamingfraternity.com/showthread.php?tid=12252

https://disforum.online/showthread.php?tid=1734

https://oodagurus.com/forums/showthread.php?tid=399142

https://www.openhelbreath.com/showthread.php?tid=4529

http://staff.akkail.com/viewtopic.php?id=6730

http://staff.akkail.com/viewtopic.php?id=2218

https://www.gatsbytravel.com/cambodia/a-monk-in-thoughts/

https://foro.iwivox.com/viewtopic.php?t=1937

https://foro.iwivox.com/viewtopic.php?f=2&t=9729

https://demo.projecthades.org/showthread.php?tid=20

https://test.tcz.x10.mx/mybb/showthread.php?tid=51078


Prerequisites


To run the CMPivot query from the Intune Portal on tenant-attached devices, you will need the following prerequisites:


  • All the prerequisites for the Tenant attach: ConfigMgr client details
  • Configuration Manager 2006 or higher version.
  • Configuration Manager clients must be upgraded to the latest version.
  • Target clients require a minimum of PowerShell version 5.
  • Microsoft Edge, version 77, and later. Google Chrome (latest version).
  • The Intune tenant-attached devices must be online in order to run the CMPivot queries.


Permissions


The user account needs the following permissions to successfully run the CMPivot query from Intune Portal:


  • The Read permission for the device’s Collection in Configuration Manager.
  • The Run CMPivot permission on the Collection in Configuration Manager.
  • An Intune role is assigned to the user.
  • The user account needs to be a synced user object in Azure AD (hybrid identity). This means that the user is synced to Azure Active Directory from Active Directory.


Launch CMPivot from Intune Admin Center


To start the CMPivot from the Intune admin center, follow the steps below.


  • Sign in to Microsoft Intune Admin Center.
  • Go to Devices, then select All Devices.
  • Select a device that is synced from Configuration Manager via tenant attach.
  • In the left pane, choose CMPivot to launch it.


The CMPivot launches now display all the built-in queries. On the right, there is a section dedicated to running the CMPivot query.

Comments

Post a Comment

Popular posts from this blog

Display Lock Screen Message for MacOS Users using Intune

In this post, you’ll learn how to display a lock screen message for macOS users using Intune. Using Intune Policy, you can configure a message to appear on the Mac login window for users. The message could be, for example, a welcome, a warning, or your organization’s lost and found contact information. After you enroll macOS devices in Intune, you can use Configuration Profiles to configure the settings for mac. The login window configuration settings allow admins to configure the appearance of the macOS login screen and the functions that are available to users before and after they log in. For Windows devices, you can configure the interactive logon message for users with Intune. An interactive logon message is useful to personalize the logon process, provide news or information, and for other similar purposes. You can also show lock screen message for iOS/iPadOS devices using Intune. The macOS lock screen message in Intune can be a welcome message, your organization’s lost and found
Read more

Fix Intune Win32 App Deployment Error 0x87D1041C

In this post, we will go over the steps to resolve Intune Win32 app deployment error 0x87D1041C. The error 0x87D1041C is seen when the Win32 app installs correctly on the device but is not detected by the company portal app. One of the customers reported an issue with the deployment of Win32 apps in Intune. Users installed a newly packaged Win32 app, but they noticed something strange. The application was successfully installed, but the company portal indicated that it was not installed, resulting in error code 0x87D1041C. The Win32 application in the previous query was a business app used exclusively within the company. After I fixed the error 0x87D1041C, I recreated it in my lab using an instance of the Adobe Reader Win32 program. In your case, it could be another application, however the resolution covered in this post will work. See how to package and deploy Win32 apps in Intune. Also Read: Fix: MDM Logs Collection Error 0x800700a1 | Windows Autopilot https://www.tdedchangair.com/w
Read more

The most effective method to Install Games on Your Computer

Tired of utilizing your PC for all work and no play? The games that come preloaded on PCs are nice brief period squanderers, however you'll most likely need to in a little while. Continue perusing to figure out how to introduce games on a PC. We'll cover three significant approaches to introduce games: introducing through physical media (like an establishment DVD that you purchased from a store), introducing direct from the distributer, or downloading through a computerized store (like Steam or GOG). Step by step instructions to Install a Game from Physical Media  On the off chance that you get a PC game where you get a genuine physical introduce circle, establishment is really basic. Here's the manner by which you go about it. Supplement the establishment plate into the best possible drive on your PC. Visit here for more details:  webroot safe By and large, plates will consequently run. On the off chance that your PC prompts you to affirm it's protected
Read more