Let’s learn Who Modified ConfigMgr Task Sequence Deployment. You can find out who created, modified, deleted the configuration manager packages, and Task Sequences.
More details about six status message queries are listed under the Administrative Security category. I have uploaded a YouTube video here to explain the process of audit reporting.
Related Post – Who Deleted Updated Modified SCCM Collection & Who Deleted ConfigMgr Task Sequence
Who Created Task Sequence Deployment
Use SQL Management studio to understand who created Task Sequence Deployment.
/* 'Who created Task Sequence Deployment'*/ select * from vStatusMessagesWithStrings where MessageID = 30006
Who Modified ConfigMgr Task Sequence Deployment Properties
Use SQL Management studio to understand who modified Task Sequence Deployment.
/* 'Who Modified the deployment properties'*/ select * from vStatusMessagesWithStrings where MessageID = 30007
Who Deleted Task Sequence Deployment
Use SQL Management studio to understand who Deleted Task Sequence Deployment.
/* 'Who deleted the Task Sequence deployment '*/ select * from vStatusMessagesWithStrings where MessageID = 30008
HTMD Forum Question
Let’s be one of the real-world examples of the use of SCCM audit reports from the HTMD forum. More details https://forum.howtomanagedevices.com/endpointmanager/configuration-manager/sccm-audit-logs/