Compliance Settings - compliance counts inaccurate (roughly double the number they should be)

Question

I'm deploying some fairly simple configuration baselines - most with a single CI in it; some remediate, some do not.
In all cases, the Compliance count (as found on the Assets and Compliance/Compliance Settings/Configuration Baselines page in the SCCM console) is roughly double the number it should be.
The same numbers can be found in the report: Compliance And Settings Management \ Summary Compliance by configuration baseline. In that report, however, you can drill into the individual baselines, which takes you to "List of assets by compliance state
for a configuration baseline". I find that if I add up all of the assets from this report, the number is accurate.
We have about 4000 people in one of these CI baseline deployments, and it's showing about 8000 are compliant. We don't even have anywhere near that many clients. In another one, we have about 150 users and it's showing 280 compliant. 
It just seems that the summarization data is somehow inflated, and completely inaccurate. Anyone know how that is calculated, or have you seen this before?

Answer 1

Following some leads on my own research...
The summarization process lives in WMI, of course, like everything else. It's apparently in root\sms\site_[SiteCode]:SMS_SummaryTask, executing the method: RequestExecution.
The "TaskCommand" on the SMS_SummaryTask shows that it's actually executing the stored procedure: spTaskDCMComplianceSummary.
That stored procedure loops through all the configuration baselines, and executes the stored procedure spDCM_SummarizeBaseline for each of them.
That stored procedure ends up running a query that looks like this:
select SiteNumber, CI_ID, SummaryType, CountTargeted, CountCompliant, FailureCount, ActivatedCount, CountNoncompliant, EnforcedCount, Severity, LastSummaryTime from
CI_ComplianceSummary where CI_ID=@bl_ciid 
I set the @bl_ciid and ran that select query. I got results that look like this:
SiteNumber CI_ID SummaryType CountTargeted CountCompliant FailureCount ActivatedCount CountNoncompliant EnforcedCount Severity LastSummaryTime
1 16795052 1 0 153 2 0 0 4 3 2014-02-13 23:33:31.633
1 16795052 2 0 141 2 0 0 4 3 2014-02-13 23:33:31.637
The number for this configuration baseline in the summary page is 294. That just so happens to be these two things added together (153+141). 
Does anyone know what these two things are? SummaryType = 1, SummaryType =2 ? It seems like the summarization process is adding them together, when it should not be.