Server showing non compliant for a no longer targeted Configuration Item

Hi all,
I have a server that was removed from a collection which had a DCM baseline targeted to it. It is still showing non compliant for Configuration items that were targeted at the old collection. (which is correct, it isn't compliant but it isn't supposed
to be). I am trying to create a collection based on non compliant items but this server keeps showing up where it shouldn't be. is there anyway to 'flush' all the compliance information and let the client rebuild it?
thanks
-cornasdf
http://cornasdf.blogspot.com

The collection is based on a WQL query that basically says, where the configuration item name = x and state <> compliant.
I have several of these where the servers that are non compliant fall into a collection that has an advertisement that remediates them.
The difficulty here is that I have a collection of BackEnd servers, based on IP Subnet. That collection has a DCM Baseline targeted at it that checks for non compliance on specific items. When building
some new servers, we connected to hte wrong network for a couple of days, so they were in the included in BackEnd Servers collection which handed out the baseline. We disconnected that link and the servers have fallen out of that collection. The
baseline no longer shows in teh control panel app.
But in my compliance collections, it still shows up as non compliant for that Conf Item.
I have a work around in place. actually two. The first was to just delete the client and let it reinstall. That worked but seems heavy handed. Secondarily, i narrowed my query by collection,
ie the query for non compliance now is limited to the collection where I apply the baseline. this is somewhat limiting for future instances (and shouldn't be necessary).
it seems like a bad enough design flaw that I assumed I must be missing something pretty obvious. if I remove a server from a collection w/ a baseline, it shouldn't still be non compliant for things non longer targeted to it.
-cornasdf
http://cornasdf.blogspot.com

Similar Messages

Machine shows Non compliant in SCCM 2012R2 Configuration Manager

We are using 2012 sccm R2 and one of our client machine shows non compliant in the reports. When we check the machine , we found that all the required and approved patches are downloaded . So it should be a compliant machine .
SCCm Clinet is ACtive and we are able to run the cycles from the machine too. Would like to know what all steps that we need to perform for solving the issue.
Server OS 2008 R2
Thanks
Madhu Madhavan

if client having wmi issues pertaining to configmgr,then it will not (most cases) send the inventory .check the inventoryagent.log .To fix WMI issues.you can try the script http://eskonr.com/2009/03/how-to-troubleshoot-the-systems-which-has-wmi-issues-rebuild-wmi-repository/
if you are sure that,client is functioning normal and the issue is only with software update compliance,you can try refresh the compliance state using script https://msdn.microsoft.com/en-us/library/cc146437.aspx.
Eswar Koneti | Configmgr blog:
www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: Eskonr

Client reporting non-compliant for unknown reasons

I have a single workstation MBAM test environment, and for whatever reason I cannot get this workstation to appear as compliant with policy. According to the reports, the OS drive (the only drive) is non-compliant, however all of the settings seem
to match. I don't see any errors in the event logs. Can anyone see anything I might be missing?

Gaurav, the client settings were matching the policy. I took nearly all configurations out of the policy to make sure I wasn't missing something.
slaplace, the hotfix looks like it might take care of it. I changed the policy to only require AES 128 bit w/ Diffuser (while the client was encrypted AES 256 bit w/ Diffuser), and the client came back as compliant. I will set policy back to
256 w/ Diffuser and verify the client comes back non-compliant again, then will apply the hotfix and see if that fixes it.
Will let you all know how it works.
EDIT: Applying the hotfix to the client fixed it. The client now reports compliant using 256 bit w/ diffuser. Thanks everyone.

Notification for workitems that affect particular configuration items

Is there any way to setup a notification that emails out if more than a certain amount of workitems affecting a configuration item are created in a specific time frame. For example I would like to create a notification when 3 or more workitems affecting
a particular configuration item or a set of configuration items are created within a week. Is this possible?

There are a bunch of different options to do this, but they're all kinda complex custom workflows. if you're familar with the authoring tool, Powershell, Orchestrator, the OM SDK, etc, then you should be able to do this.
the best option that occurs to me off the top of my head is adding a workflow or runbook that
reacts to the creation of an AffectsConfigItem relationship, looks at all of the other relationships that target that CI, and sends a notification if there are more then three in the last 7 days.

FCS Antimalware Engine Deployment Status shows non-compliant

We have Forefront Client Security as the enterprise antivirus solution. We see that all the computers are updated with the latest virus definition files through WSUS with no issues. When I generate the compliance report, (deployment summary) I find that
the pie charts for spyware deployment status and the antivirus deployment status show normal counts.
However, I see that the Antimalware Engine isn't updated. The current version, per the report is 1.1.9901.0, but we have over 1800 computers running version 1.1.10802.0.
I'm new to Forefront, and would like to know what the procedure is to update the engine version on all the 1800+ computers with minimum administrative effort. :)
As an example, please find the version details of one of the clients below:
Client Version: 1.5.1937.0
Engine Version: 1.1.10802.0
Antivirus definition: 1.179.857.0
Antispyware definition: 1.179.857.0
Support
For more information on the program, visit the Microsoft information page at http://go.microsoft.com/fwlink/?LinkId=64530.
Any help would be greatly appreciated. Thank you in advance!

Hi,
Does other Client Security components report with correct version numbers and only Antimalware Engine is incorrect?
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How can I get report of only non compliant clients via Fileshare or to admin mailbox each day?

I need to figure out how to get a daily report of non compliant clients in SCCM2012 to admin email or fileshare.
Is there any built-in report that returns only non compliant clients I could use to accomplish this,
and create alert subscription or exchange server connector to receive the message / file once a day ?
Do I need to use SQL Server Reporting Services for this ? New to SCCM and getting confused with all those reports,
sorry ;-)

Yes you need SSRS for this.
This will help.
http://be.enhansoft.com/post/2013/08/27/How-to-Set-up-a-Windows-File-Share-Subscription.aspx
http://be.enhansoft.com/post/2013/08/14/How-to-Set-up-an-Email-Subscription-in-SSRS.aspx
Non compliant for what?
http://www.enhansoft.com/

LMS 4.1 shows "No records" for all devices

Hello everyone,
One of our end clients noticed that there is a "No records" message when choosing to show syslog messages for all devices that are configured on his LMS.
Under "LMS - Admin > System > Server Monitoring > Processes" I can see that the "SyslogAnalyzer" and "SyslogCollector" are showing as "Running normally"
Also see attached screenshot:
I would really appreciate your advise on this issue.

hello Daniel,
you are getting syslogs but they are getting filtered .
go to >>
Admin > Network > Notification and Action Settings > Syslog Message Filters
and change the filter settings . Try >> KEEP and Enabled combination. after changing settings check the syslogs collector status , Keep an Eye on the Forwarded column, you should see counts in it instead of zero .
you might need to play with filter settings to get this worked.
This is how Filters works:
Scenario 1:
All filters are disabled. Mode:Keep (Like in Our case with
Disabled the LINKUPDOWN and Mode is Keep .so all the messages for that
LINKUP DOWN will be only Forward)
All messages will be forwarded.
Scenario 2:
All filters are disabled. Mode:Drop
All messages will be filtered.
Scenario 3:
Atleast one filter is enabled. Mode:Keep
Only those syslog messages that satisfy the enabled filters will be
forwarded and all others will be filtered.
Scenario 4:
Atleast one filter is enabled. Mode:Drop
Only those syslog messages that satisfy the enabled filters will be filtered
and all others will be forwarded
Thanks-
Afroz
[Do rate the useful post]

ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant

ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant.
- For old version 1.1.4 it can be reported for non-compliant, How can I generate report for this?
Thanks
Kosin Usuwanthim

It used to be in there (id 226635 is the last one with it); should I clean it up a bit and put it back with a bit more of a disclaimer?

DHCP configuration for non-compliant clients

So your question isn't for a live situation, but because you are studying for a test?

hello!
i have a question about network policy server..
that is , how to configure DHCP server to lease IP address to non-compliant client??
specifically for access to remediation servers
thank you..
This topic first appeared in the Spiceworks Community

I've been using samsung for a long time and I just changed into an iPhone 5s and the most important thing I need is my calendar appointments , but in the notification center it doesn't show my events for tomorrow , will there be an updated or this soon?

I've been using samsung for a long time and I just changed into an iPhone 5s and the most important thing I need is my calendar appointments , but in the notification center it doesn't show my events for tomorrow and it doesn't even show more than 1 event , will there be an updated or this soon? Or should I just shift back to samsung?????

Go to settings/notification centre and make sure today vie and calendar day view are both on

OS 10.3 - Hub shows huge "message deleted" sign for a very long time

I genereally really like the 10.3 OS update, but there has been a change to the hub which is puzzling me:
When, for example, I open my email account in the hub, I get the option to show trash bins next to all messages so I can delete them more easily. Great!
If I do that, however, I get a huge sign "message deleted / retrieve message" (or something similar, my OS is in German) - and it covers one third of the display for a very long time (four seconds or so), making the feature super slow instead of fast. Because, if I want to delete the next message, I will have to wait for it to disappear. Otherwise I might retreive the deleted message and start from zero again. Most of the time I cannot even see the next message which I would like to delete as the pop up is covering two to three messages entirely.
The problem would be solved if a) the pop up sign were significantly smaller or b) it would not show up for such a long time.
Is there any fix to this issue?

Hi,
I know what you mean but I think for the moment it can ot be changed. JSanders has opened a feature request post.
http://supportforums.blackberry.com/t5/BlackBerry-10-OS-Device-Software/Feature-Requests-beyond-Blac...
I recommend you put this item there. Hopefully someone from BB reads it and changes it for the future.
Alex
Please feel free to hit "Like" if my post was helpful :-) Thank You!

HT3258 What is correct update or upgrade for Mac OSX v 10.5.8? Also can't use sites without updates on firefox & safari. Auto update shows none available?

What is correct update or upgrade for Mac OSX v 10.5.8? Also can't use sites without updates on firefox & safari. Auto update shows none available?

Click here.
(89934)

Calendar has been non-functional for hours, with small screen saying "Moving calendars to server account..." Help?

Calendar on Mavericks MacPro has been non-functional for hours, with small screen saying "Moving calendars to server account..." How can I restore its function?

Sorry. I found some other advice that solved the problem ere I saw your response.
The advice was:
Go to Finder. Holding "Option" key, find Library in "Go" pull down menu. In Library. Select Calendars. To desktop, drag all files with the word "cache." Then go to Preferences (still in Library) and drag to desktop "com.apple.ical.plist". Restart. Now Calendar is working perfectly, and rechecking under Library, the caches files and the com.apple.ical.plist that were dragged to the desktop have reappeared in Calendars and Preferences.
All is well. Many thanks for your reply! Sorry that I did not get to check it out.

My iPad is showing 315 unread messages on one of my email accounts. There are none on the server(comcast), none show on iPhone or PC. How do I get rid of this notification.

My iPad is showing 315 unread messages on one of my email accounts. There are none on the server(comcast), none show on iPhone or PC. How do I get rid of this notification.

IPad4, sorry

I imported events from iphoto into aperture and aperture is showing 2 photos for each picture, one original and one edited although none of the photos from iphoto had been edited. Any idea why this has happened and what I need to do to prevent this.

I imported several events for iPhoto into Aperture3 and in Aperture it shows two photos for each photo imported, one original and one edited although none of the photos imported were edited. Why has this happened and what do I need to do to prevent this in future. I have only recently got Aperture and am trying to learn as I go along using the Focal Press guide. Thanks for any help.

Ir. Bob wrote:
A photo that was rotated in iPhoto will also show up as iPhoto edited.
This is not what I found to be the case in a recent experiment using iPhoto11- I did repeat it to be sure.
https://discussions.apple.com/message/15586837#15586837
Quickly, what I found is that only the ones I did actual adjustments on brought over two images. Images that were simply rotated, had "quick fixes" or "Effects" did not bring in two images. More importantly, among the ones with adjustments that did bring in two images, the ones with the keyword "iPhoto Edited" appear to be nothing more than iPhoto's 6MB JPEG Previews. The master was a 25MB RAW image.
I don't know why some users are experiencing doubles on everything, but I recommend caution in deciding which ones to remove or you may find yourself deleting masters and keeping previews.
DLS

Server showing non compliant for a no longer targeted Configuration Item

Similar Messages

Maybe you are looking for