Show Menu
Cheatography
  1. Home >
  2. Software >

SCCM Client Log files Cheat Sheet (DRAFT) by

In Configuration Manager, client and site server components record process information in individual log files. You can use the information in these log files to help you troubleshoot issues that might occur.

This is a draft cheat sheet. It is a work in progress and is not finished yet.

Applic­ation management

   
AppInt­ent­Eva­l.log
Records details about the current and intended state of applic­ations, their applic­abi­lity, whether requir­ements were met, deployment types, and depend­encies.
AppDis­cov­ery.log
Records details about the discovery or detection of applic­ations on client computers.
AppEnf­orc­e.log
Records details about enforc­ement actions (install and uninstall) taken for applic­ations on the client.
AppGro­upH­and­ler.log
Records detection and enforc­ement inform­ation for applic­ation groups
Ccmsdk­pro­vid­er.log
Records the activities of the applic­ation management SDK.
Settin­gsA­gen­t.log
Enforc­ement of specific applic­ations, records orches­tration of applic­ation group evalua­tion, and details of co-man­agement policies.
Softwa­reC­ent­erS­yst­emT­ask­s.log
Records activities related to Software Center prereq­uisite component valida­tion.

Packages and programs

   
execmg­r.log
Records details about packages and task sequences that run.

Asset Intell­igence

   
AssetA­dvi­sor.log
Records the activities of Asset Intell­igence inventory actions.

Client notifi­cation

   
BgbHtt­pPr­oxy.log
Records the activities of the notifi­cation HTTP proxy as it relays the messages of clients using HTTP to and from the notifi­cation server.
CcmNot­ifi­cat­ion­Age­nt.log
Records the activities of the notifi­cation agent, such as client­-server commun­ication and inform­ation about tasks received and dispatched to other client agents.

Compliance settings and company resource access

   
CIAgen­t.log
Records details about the process of remedi­ation and compliance for compliance settings, software updates, and applic­ation manage­ment.
CITask­Man­age­r.log
Records inform­ation about config­uration item task schedu­ling.
DCMAge­nt.log
Records high-level inform­ation about the evalua­tion, conflict reporting, and remedi­ation of config­uration items and applic­ations.
DCMRep­ort­ing.log
Records inform­ation about reporting policy platform results into state messages for config­uration items.
DcmWmi­Pro­vid­er.log
Records inform­ation about reading config­uration item synclets from WMI.

Discovery

   
Invent­ory­Age­nt.log
Records activities of hardware inventory, software inventory, and heartbeat discovery actions on the client.

Endpoint analytics

   
Sensor­Wmi­Pro­vid­er.log
Records the activity of the WMI provider for the endpoint analytics sensor.
Sensor­End­poi­nt.log
Records the execution of endpoint analytics policy and upload of client data to the site server.
Sensor­Man­age­dPr­ovi­der.log
Records the gathering and processing of events and inform­ation for endpoint analytics.

Endpoint Protection

   
Endpoi­ntP­rot­ect­ion­Age­nt.log
Records details about the instal­lation of the Endpoint Protection client and the applic­ation of antima­lware policy to that client.

Metering

   
mtrmgr.log
Monitors all software metering processes.
SWMTRR­epo­rtG­en.log
Generates a use data report that is collected by the metering agent. This data is logged in Mtrmgr.log.

OS deployment

   
CAS.log
Records details when distri­bution points are found for referenced content.
ccmset­up.log
Records ccmsetup tasks for client setup, client upgrade, and client removal. Can be used to troubl­eshoot client instal­lation problems.
Setupa­ct.log
Records details about Windows Sysprep and setup logs.
Setupa­pi.log
Records details about Windows Sysprep and setup logs.
Setupe­rr.log
Records details about Windows Sysprep and setup logs.
smpisa­pi.log
Records details about the client state capture and restore actions, and threshold inform­ation.
Smsts.log
Records task sequence activi­ties.
TSAgen­t.log
Records the outcome of task sequence depend­encies before starting a task sequence.
loadst­ate.log
Records details about the User State Migration Tool (USMT) and restoring user state data.
scanst­ate.log
Records details about the User State Migration Tool (USMT) and capturing user state data.

Power management

   
pwrmgm­t.log
Records details about power management activities on the client computer, including monitoring and the enforc­ement of settings by the Power Management Client Agent.

Software updates

   
Altern­ate­Han­dle­r.log
Records details when the client calls the Office click-­to-run COM interface to download and install Microsoft 365 Apps for enterprise client updates. It's similar to use of WuaHandler when it calls the Windows Update Agent API to download and install Windows updates.
ccmper­f.log
Records activities related to the mainte­nance and capture of data related to client perfor­mance counters.
DeltaD­own­loa­d.log
Records inform­ation about the download of express updates and updates downloaded using Delivery Optimi­zation.
Policy­Eva­lua­tor.log
Records details about the evaluation of policies on client computers, including policies from software updates.
Reboot­Coo­rdi­nat­or.log
Records details about the coordi­nation of system restarts on client computers after software update instal­lat­ions.
ScanAg­ent.log
Records details about scan requests for software updates, the WSUS location, and related actions.
SdmAge­nt.log
Records details about the tracking of remedi­ation and compli­ance. However, the software updates log file, Update­sha­ndl­er.log, provides more inform­ative details about installing the software updates that are required for compli­ance. This log file is shared with compliance settings.
Servic­eWi­ndo­wMa­nag­er.log
Records details about the evaluation of mainte­nance windows.
SmsWus­Han­dle­r.log
Records details about the scan process for the Inventory Tool for Microsoft Updates.
StateM­ess­age.log
Records details about software update state messages that are created and sent to the management point.
Update­sDe­plo­yme­nt.log
Records details about deploy­ments on the client, including software update activa­tion, evalua­tion, and enforc­ement. Verbose logging shows additional inform­ation about the intera­ction with the client user interface.
Update­sHa­ndl­er.log
Records details about software update compliance scanning and about the download and instal­lation of software updates on the client.
Update­sSt­ore.log
Records details about compliance status for the software updates that were assessed during the compliance scan cycle.
WUAHan­dle­r.log
Records details about the Windows Update Agent on the client when it searches for software updates.

Windows servicing

   
CBS.log
Records servicing failures related to changes for Windows Updates or roles and features.
DISM.log
Records all actions using DISM. If necessary, DISM.log will point to CBS.log for more details.
setupa­ct.log
Primary log file for most errors that occur during the Windows instal­lation process. The log file is located in the %windi­r%$­Win­dow­s.~­BT­\sou­rce­s\p­anther folder.

Windows Update Agent

   
Window­sUp­dat­e.log
Records details about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assess­ment, and whether there are updates to the agent compon­ents.