SCCM DCM CI for SQL Infra

Question

Need to get a SCCM DCM CI created to check following configuration on SQL Server infra.
Determine the list of users/groups in sysadmin role
Any group/user in the sysadmin role also a member of the Administrators group for the host server. (IF So, Non Compliant)
BUILTIN\Administrators present on the host, and is it a member of Sysadmins

Answer 1

This can be done using PowerShell (or any other script you prefer).
Just return a "Compliant" or "Non-Compliant" depending on the result.
I don't have examples for the specific scenarios, but this is how it works:
If (Test-Whatever = $True){
Write-Host "Compliant" }
Else {
Write-Host "Non-Compliant" }
Under Compliance rules you configure like this:
"The value returned by the specified script: Equals "Compliant".
Ronni Pedersen | Microsoft MVP - ConfigMgr | Blogs:
www.ronnipedersen.com/ and www.SCUG.dk/ | Twitter
@ronnipedersen