Introduction SCCM (System Center Configuration Manager) is a powerful tool used by Microsoft Systems Engineers to manage and deploy software updates, configurations, and compliance settings in Windows environments. One of the key features of SCCM is the ability to run queries to gather information about the managed systems. In this article, we will focus on using SCCM queries to check the update compliance status of Windows machines.

Examples:

To check the update compliance status of Windows machines using SCCM queries, you can follow these steps:

1. Open the SCCM Console:

   • Launch the SCCM console on your system.
   • Navigate to the "Assets and Compliance" workspace.
   • Select "Device Collections" and choose the desired collection to run the query against.

2. Create a New Query:

   • Right-click on the selected collection and choose "Create Query".
   • Provide a name and description for the query.
   • Click on the "Edit Query Statement" button.

3. Build the Query Statement:

   • In the "Query Statement Properties" window, click on the "Criteria" tab.
   • Click on the "Add Clause" button to add a new clause.
   • Select "Software Updates" as the criteria type.
   • Choose "Compliance" as the property and set the operator to "Equals".
   • Enter "Compliant" or "Non-Compliant" as the value, depending on your requirement.
   • Click on the "OK" button to save the clause.

4. Run the Query:

   • Back in the "Query Statement Properties" window, click on the "OK" button to save the query.
   • Right-click on the query and choose "Run Query".
   • The results will display the machines that meet the specified compliance status.

By following the above steps, you can easily create and run SCCM queries to check the update compliance status of Windows machines. This information is crucial for ensuring that all systems are up to date with the latest software updates and security patches. Using SCCM queries, you can quickly identify non-compliant machines and take appropriate actions to remediate any issues.

Note: The provided query in the article is an example and can be customized to fit specific requirements. The query filters for machines where the last enforcement message ID is 9, which can be modified as per your needs.