Let’s learn who Modified ConfigMgr Modified ConfigMgr Client Settings. You can find who created, modified, deleted the configuration manager client settings from this post.
Who Created ConfigMgr Client Settings
Use SQL Management studio to understand who Created ConfigMgr Client Settings.
/*Who created client settings */
select * from vStatusMessagesWithStrings where MessageID = 40300
Who Modified ConfigMgr Client Settings
/* Who created client settings*/
select * from vStatusMessagesWithStrings where MessageID = 40301
Who Deleted ConfigMgr Client Settings
/* 'Who deleted the deployment of application'*/
select * from vStatusMessagesWithStrings where MessageID = 40302
Who Created Client Settings Assignment
/* Who created client settings assignment */
select * from vStatusMessagesWithStrings where MessageID = 40303
Who Deleted Client Settings Assignment
/* Who Deleted client settings assignment */
select * from vStatusMessagesWithStrings where MessageID = 40305
Resources
- Six status message queries are listed under the Administrative Security category.
- YouTube video ConfigMgr Audit Report here.
- Track Who Deleted Modified Changed SCCM Settings
- ConfigMgr six status message queries
Why do we need to use sql queries when it can easily identified using audit messages
Yes of course … use those queries if that is easy for you. It’s already mentioned in the different post