Let’s check the SCCM Log Files Updated List for Client and Server components. Get the latest or updated list of SCCM Logs. The Configuration Manager logs are essential to troubleshoot and fix an issue.
Configuration Manager can record process information in log files for client and site server components. These log files help troubleshoot any issues that may arise. Configuration Manager automatically enables logging for client and server components.
Configuration Manager’s current branch and later versions of clients are installed with the built-in log reader tool CMTrace.exe. However, there are newer or newer SCCM Log reading tools with the latest versions of SCCM.
The last section of this post provides details about Microsoft ConfigMgr Logs and explains the details of both the server-side and client-side SCCM log files.
SCCM Log Files Updated List Client and Server
SCCM logs are generated on the client and site server sides. The client and server components record process information in individual log files. Enabling debugging or using verbose also produces more detailed log files.
More details on Intune Logs Event IDs IME Logs Details For Windows Client Side Troubleshooting.
This post includes the client-side and server-side SCCM logs. SCCM Logs are your best friend when troubleshooting issues.
SCCM Logs in Details
The SCCM log files are identified by .log or .lo_ file extensions. ConfigMgr writes to a .log file until that log reaches its maximum size. Client-server communication issues are very common in the SCCM world. Usually, system admins resolve the issue after analyzing the SCCM Logs.
MEMCM’s processes are usually invisible to end-users. Software updates, Configuration Items, Applications, etc., are installed on your computer “in the background.” The speed of the installation depends on the computer’s specifications.
As an end-user, you don’t need to worry about SCCM Logs. The SCCM Logs record the activities of each SCCM thread or component. The app troubleshooting Deep Dive SCCM Application Model Troubleshooting—Client End and server-side blog will help you.
All SCCM Logs might be overwritten automatically over time. If the components require it, you have an option to increase the size of the SCCM logs.
There are different types of logs available for SCCM. The various types of Clients, Site Servers (Primary, SQL, CAS, etc.), and site System Servers (DP, MP, SUP, etc.) SCCM Logs. The latest log files are updated in this post.
Once you enable Debug and Verbose logging for the client and Server SCCM logs, it provides additional information on error conditions. However, you need to be very careful when you enable these settings in production.
Future of SCCM Admins
The HTMD Intune Training Course consists of 32 chapters on in-depth topics that help system admins achieve their next career goal. There are 11:57:40 hours of free Intune Training Course released by the How to Manage Devices (HTMD) community.
SCCM Logs – Viewing Tools
When I started the SCCM (SMS) admin job, the SCCM logs reading tool was Trace32.exe. With SCCM 2012 and CB, the default SCCM logs reading tool CMTrace.exe integrated with the products. You don’t have to download it separately. More details Top SCCM Log File Viewer Options for Admins.
- Trace32.exe (SMS/SCCM 2007)
- CMTrace.exe (SCCM 2012 & CB)
- CMLogViewer.exe (SCCM CB)
SCCM Logs Locations
The default client log file location is the %WINDIR%CCM/Logs folder. The SCCM server log files are in the Logs D:\Program Files\SMS_CCM\Logs and F:\Program Files\Microsoft Configuration Manager\Logs folder.
Some other log folders are specifically called out in each section, like %Temp%, C:\Windows\ccmsetup\Logs, etc.
Tenant Attach SCCM Logs
The SCCM tenant attached related log files from the following list. You can get a more detailed list of troubleshooting posts on the tenant attachment; troubleshooting is also available.
- CMGatewayNotificationWorker.log
- AdminService.log
SCCM Upgrade Log Files
You can check the SCCM upgrade process log files from the primary site server. F:\Program Files\Microsoft Configuration Manager\Logs.
- DMPDownloader.log for SCCM 2006 source file download issues.
- ConfigMgrSetup.log for Redist Files Download Issue.
- CMUpdate.log for all the upgrade-related activities.
- If the update displays as Downloading and doesn’t change, review the hman.log and dmpdownloader.log for errors
Implicit Uninstall SCCM Log
The 2107 version of SCCM introduced a new log file. This log is for tracking implicit uninstalls.
- SMS_ImplicitUninstall.log—This log file is located on the Site Server. The component related to it is SMS_BUSINESS_APP_PROCESS_MANAGER_ImplicitUninstallWorker.
CMG Remote Control
You can check the Cloud Management Gateway remote control-related log files in the following location.
- cmrcviewer.log under %temp% folder.
SCCM Application Approval Process Related Logs
Let’s find out the application approval process-related logs if you have issues with the automatic approval process flow.
- SMS_REST_PROVIDER.log
- NotiCtrl.log
Out of Band Hotfix SCCM Logs
You can perform out-of-band hotfix installation-related troubleshooting from the following log file.
C:\Windows\Temp ==> CMRegisterUpdate.log
Secondary Server
Now, it’s time to check the log files of the SCCM secondary site. Also, you can check the location of the log files, which will help troubleshoot issues with the secondary site installation.
- Check the ConfigMgrPreReq.log on the primary server.
- Once the prerequisite is completed successfully, Refer to the following logs on the new secondary server.smstvc.log for secondary server installation-related log on secondary server C:\.
- SMS_BootStrap.log on secondary server C:\.
- ConfigMgrSetupWizard.log is not helpful for secondary server installation.
- ConfigMgrSetup.log will be used to validate the installation of the secondary server.
SCCM DP Logs
The SCCM Distribution point-related SCCM logs are in the following table. You can read more about the installation of the distribution points.
| DP Logs | Distribution Points |
|---|---|
| distmgr.log | Package Application distribution process |
| PkgXferMgr.log | Records the actions of the SMS_Executive component responsible for sending content from an SCCM primary site to a remote DP. |
Apart from DistMgr.log, you will need to refer to the following logs to get the DP installation and Configuration details. DP Installation and Configuration-related Log Files.
- Hman.log – Primary Server – Example – New site system: MEM WIN11DJ.MEMCM.COM SMS Distribution Point
- DistMgr.log – Primary or Secondary Server – All the details about the DP installation and Configuration.
- SMSdpprov.log on remote DP (Windows 11 PC) – Location of the log Drive:\SMS_DP$\sms\logs.
- SMSdpusage.log on remote DP – Monitor the usage of the DP—location of the log Drive:\SMS_DP$\sms\logs.
- SMSPXE.log on remote DP – Helps with PXE responder information.
SCCM MP Logs
You can now look at the SCCM management point-related SCCM logs to troubleshoot and install MP.
- MP log files at %ProgramFiles%\SMS_CCM\Logs\
- Or Here %windir%\ccm\logs.
| MP Logs | Distribution Points |
|---|---|
| mpcontrol.log | Records the availability of the management point every 10 minutes. |
| MP.MSI.log | More details log about MP installation |
| mpsetup.log | Installation of Management Point |
SCCM SUP Logs
The Software Update Point-related SCCM logs are in the following table. These log files help troubleshoot and resolve SUP issues.
| SUP Logs | Distribution Points |
|---|---|
| SUPSetup.log | Installation Logs for SUP role |
| WCM.log | Records details about the SUP configuration |
| WSUSCtrl.log | Records details about the configuration, database connectivity, and health of the WSUS server for the site. |
| wsyncmgr.log | Records details about the software updates sync process. |
SCCM Third-Party Patching Logs
The following list of SCCM logs helps you troubleshoot and resolve issues related to SCCM third-party patching.
- SMS_ISVUPDATES_SYNCAGENT.log
- Wsyncmgr.log
- WCM.log (C:\Program Files\Microsoft Configuration Manager\Logs)
- PatchDownloader.log (%temp%)
Software Update Logs – Patching Related Issues
Let’s discuss the software update logs and patching-related issues. The table below helps you show different software update logs, log details and log file locations.
| Software Update Logs | Details | Client/Server |
|---|---|---|
| AlternateHandler.log | This record records details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface. | Client |
| ccmperf.log | Records activities related to the maintenance and capture of data related to client performance counters. | Client |
| DeltaDownload.log | Records information about the download of express updates and updates downloaded using Delivery Optimization.SCCM Logs | Client |
| PatchDownloader.log | Records details about the process of downloading software updates from the update source to the download destination on the site server. | When downloading updates manually, this log file is located in the %temp% directory of the user running the console on the machine you’re running the console. For Automatic Deployment Rules, this log file is located on the site server in %windir%\CCM\Logs, if the ConfigMgr client is installed on the site server. |
| PolicyEvaluator.log | Records details about the evaluation of policies on client computers, including policies from software updates. | Client |
| RebootCoordinator.log | Records details about the coordination of system restart on client computers after software update installations. | Client |
| ScanAgent.log | Records details about scan requests for software updates, the WSUS location, and related actions.SCCM Logs | Client |
| SdmAgent.log | Records details about software update compliance scanning and downloading and installing software updates on the client. | Client |
| ServiceWindowManager.log | Records details about the evaluation of maintenance windows. | Client |
| SMS_ISVUPDATES_SYNCAGENT.log | Logfile for synchronization of third-party software updates. | Top-level software update point in the Configuration Manager hierarchy. |
| SMS_OrchestrationGroup.log | Logfile for orchestration groups | Site server |
| SmsWusHandler.log | Records details about the scan process for the Inventory Tool for Microsoft Updates. | Client |
| StateMessage.log | Records details about software updates state messages created and sent to the management point. | Client |
| SUPSetup.log | Records details about the software update point installation. Installation was successful when the software update point installation was completed and written to this log file. | Site system server |
| UpdatesDeployment.log | Records details about software update compliance scanning and downloading and installing software updates on the client. | Client |
| UpdatesHandler.log | Records details about software update compliance scanning and the download and installation of software updates on the client. | Client |
| UpdatesStore.log | Records details about compliance status for the software updates assessed during the compliance scan cycle. | Client |
| WCM.log | Records details about software update point configurations and connections to the WSUS server for subscribed update categories, classifications, and languages. | Site server |
| WSUSCtrl.log | This record details the process of downloading software updates from the update source to the download destination on the site server. | Site system server |
| wsyncmgr.log | Records details about the software update sync process. | Site server |
| WUAHandler.log | Records details about the Windows Update Agent on the client when it searches for software updates.SCCM Logs | Client |
Wake on Lan SCCM Logs
The table below helps you to see the Wake on Lan SCCM Logs with 2 different names, such as wolcmgr.log and wolmgr.log.
| Log name | Description | Computer with log file |
|---|---|---|
| wolcmgr.log | Records details which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried. | Site server |
| wolmgr.log | Records details about wake-up procedures, such as when to wake up deployments configured for Wake On LAN. | Site server |
Windows 10 or Windows 11 Servicing SCCM Logs
More details about Windows 10 (Windows 11) Deployment Upgrade Process Logs for SCCM Admins are available. The following SCCM logs will help you troubleshoot Windows 10 and 11 servicing with SCCM.
| Log name | Description | Computer with log file |
|---|---|---|
| CBS.log | Records servicing failures related to changes for Windows Updates or roles and features. | Client |
| DISM.log | Records all actions using DISM. If necessary, DISM.log will point to CBS.log for more details. | Client |
| setupact.log | Primary log file for most errors that occur during the Windows installation process. The log file is located in the %windir%$Windows.~BT\sources\panther folder. |
WUA Logs
The following tables come with Windows Update Agent-related SCCM logs.
| Log name | Description | Computer with log file |
|---|---|---|
| WindowsUpdate.log | Records details when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components. | Client |
WSUS Logs
Well, if you want to find out the SCCM logs that are related to WSUS? The below table has two of those.
| Log name | Description | Computer with log file |
|---|---|---|
| Change.log | Records details about WSUS server database information that has changed. | WSUS server |
| SoftwareDistribution.log | Records details about the software updates synced from the configured update source to the WSUS server database. | WSUS server |
These log files are located in the %ProgramFiles%\Update Services\LogFiles Folder.
ConfigMgr Metering Logs
| Log name | Description | Computer with log file |
|---|---|---|
| mtrmgr.log | Monitors all software metering processes. | Site server |
Server Side – SCCM Logs
SCCM Server-side logs to troubleshoot server-side issues.
Use the following logs located on the service connection point:
- CMGatewaySyncUploadWorker.log
- CMGatewayNotificationWorker.log
SCCM Logs FAQs
Let’s see the frequently asked questions related to the SCCM Log files.
Where is the SCCM Server Logs Location?
DRIVE-Letter:\Program Files\Microsoft Configuration Manager\Logs
Where is the SCCM Client Logs Location?
Windows 10 Device – C:\Windows\CCM\Logs
What are the DP Logs?
distmgr.log & PkgXferMgr.log
What are the SCCM MP Logs?
mpcontrol.log, MP.MSI.log, and mpsetup.log
What are the SCCM SUP Logs?
SUPSetup.log, WCM.log, WSUSCtrl.log, and wsyncmgr.log
More SCCM Logs Details in One Place
General SCCM log files are listed in the following table.
| SCCM Logs | Description |
|---|---|
| adctrl.log | Records enrollment processing activity. |
| ADForestDisc.log | Records Active Directory Forest Discovery actions. |
| ADService.log | Records account creation and security group details in Active Directory. |
| adsgdis.log | Records Active Directory Group Discovery actions. |
| adsysdis.log | Records Active Directory System Discovery actions. |
| adusrdis.log | Records Active Directory User Discovery actions. |
| ccm.log | Records client push installation activities. |
| CertMgr.log | Records certificate activities for intrasite communication. |
| chmgr.log | Records activities of the client health manager. SCCM Logs help to identify health issues. |
| Cidm.log | Records detail package creation, compression, delta replication, and information updates. |
| colleval.log | Records details when collections are created, changed, and deleted by the Collection Evaluator. |
| compmon.log | Records the status of component threads monitored for the site server. |
| compsumm.log | Records Component Status Summarizer tasks. |
| ComRegSetup.log | Records the initial installation of COM registration results for a site server. |
| dataldr.log | Records information about MIF files and hardware inventory processing in the SCCM database. |
| ddm.log | Records activities of the discovery data manager. |
| despool.log | Records incoming site-to-site communication transfers. |
| distmgr.log | Records information for Migration actions involving migration jobs, shared distribution points, and upgrades. |
| EPCtrlMgr.log | Records information about site configuration changes and publishing site information in Active Directory Domain Services. |
| EPMgr.log | Records the status of the Endpoint Protection site system role. |
| EPSetup.log | Provides information about the installation of the Endpoint Protection site system role. |
| EnrollSrv.log | Records activities of the enrollment service process. |
| EnrollWeb.log | Records activities of the enrollment website process. |
| fspmgr.log | Records activities of the fallback status point site system role. |
| hman.log | Records the files that are transferred by file-based replication between sites. |
| Inboxast.log | Records the files moved from the management point to the corresponding INBOXES folder on the site server. |
| inboxmgr.log | Records file transfer activities between inbox folders. |
| inboxmon.log | Records the processing of inbox files and performance counter updates. |
| invproc.log | Records the forwarding of MIF files from a secondary site to its parent site. |
| migmctrl.log | This record records the actions of the SMS_Executive component, which is responsible for sending content from a primary site to a remote distribution point. |
| mpcontrol.log | Records the registration of the management point with Windows Internet Name Service (WINS). Records the availability of the management point every 10 minutes. |
| mpfdm.log | Records the management point component’s actions that move client files to the corresponding INBOXES folder on the site server. |
| mpMSI.log | Records details about the management point installation. |
| MPSetup.log | Records the management point installation wrapper process. |
| netdisc.log | Records Network Discovery actions. |
| NotiCtrl.log | Application request notifications. |
| ntsvrdis.log | Records the discovery activity of site system servers. |
| Objreplmgr | Records the processing of object change notifications for replication. |
| offermgr.log | Record advertisement updates. |
| offersum.log | Records the summarization of deployment status messages. |
| OfflineServicingMgr.log | Records the activities of applying updates to operating system image files. |
| outboxmon.log | Records the processing of outbox files and performance counter updates. |
| PerfSetup.log | Records the results of the installation of performance counters. |
| PkgXferMgr.log | Records SCCM console activity. SCCM logs to record activities related to the admin console. |
| policypv.log | Records are updated to the client policies to reflect client settings or deployment changes. |
| rcmctrl.log | Records the activities of database replication between sites in the hierarchy. |
| replmgr.log | Records the replication of files between the site server components and the Scheduler component. |
| ResourceExplorer.log | Records errors, warnings, and information about running Resource Explorer. |
| ruleengine.log | Records details automatic deployment rules for the identification, content download, and software update group and deployment creation. |
| schedule.log | Records details about the site-to-site job and file replication. |
| sender.log | Records information about installing, using, and removing a Windows service used to test network connectivity and permissions between servers, using the server’s computer account that initiates the connection. |
| sinvproc.log | Records information about the processing of software inventory data to the site database. |
| sitecomp.log | Records details about the maintenance of the installed site components on all site system servers. |
| sitectrl.log | Records site setting changes made to site control objects in the database. |
| sitestat.log | Records the availability and disk space monitoring process of all site systems. |
| SMS_ISVUPDATES_SYNCAGENT.log | Logfile for synchronization of third-party software updates starting in SCCM version 1806. |
| SMS_PhasedDeployment.log | Logfile for phased deployments |
| SmsAdminUI.log | This record records information about the progress of launching the secondary site installation process. Details of the actual setup process are contained in ConfigMgrSetup.log. |
| SMSAWEBSVCSetup.log | Records the installation activities of the Application Catalog web service. |
| smsbkup.log | Records output from the site backup process. |
| smsdbmon.log | Records database changes. |
| SMSENROLLSRVSetup.log | Records the installation activities of the enrollment web service. |
| SMSENROLLWEBSetup.log | Records the installation activities of the enrollment website. |
| smsexec.log | Records the processing of all site server component threads. |
| SMSFSPSetup.log | Records messages generated by the installation of a fallback status point. |
| SMSPORTALWEBSetup.log | Records the installation activities of the Application Catalog website. |
| SMSProv.log | Records WMI provider access to the site database. |
| srsrpMSI.log | Records detailed results of the reporting point installation process from the MSI output. |
| srsrpsetup.log | Records results of the reporting point installation process. |
| statesys.log | Records the processing of state system messages. |
| statmgr.log | Records the writing of all status messages to the database. |
| swmproc.log | Records the processing of metering files and settings. |
| ConfigMgrPrereq.log | Records prerequisite component evaluation and installation activities. |
| ConfigMgrSetup.log | Records detailed output from the site server setup. |
| ConfigMgrSetupWizard.log | Records information related to activity in the Setup Wizard. |
| SMS_BOOTSTRAP.log | Records information about installing, using, and removing a Windows service used to test network connectivity and permissions between servers using the server’s computer account that initiates the connection. |
| smstsvc.log | Records details about the configuration, database connectivity, and health of the site’s WSUS server. |
| DWSSMSI.log | Records messages generated by the installation of a data warehouse service point. |
| DWSSSetup.log | Records messages generated by the installation of a data warehouse service point. |
| Microsoft.ConfigMgrDataWarehouse.log | Records information about data synchronization between the site and warehouse databases. |
| FspIsapi | Records details about communications to the fallback status point from mobile device legacy clients and client computers. |
| fspMSI.log | Records messages generated by the installation of a fallback status point. |
| fspmgr.log | Records activities of the fallback status point site system role. |
| CcmIsapi.log | Records client messaging activity on the endpoint. |
| MP_CliReg.log | Records the client registration activity processed by the management point. |
| MP_Ddr.log | Records the conversion of XML.ddr records from clients and then copies them to the site server. |
| MP_Framework.log | Records the activities of the core management point and client framework components. |
| MP_GetAuth.log | Records client authorization activity. |
| MP_GetPolicy.log | Records policy requests activity from client computers. |
| MP_Hinv.log | Records details about converting XML hardware inventory records from clients and copying those files to the site server. |
| MP_Location.log | Records location requests and reply activity from clients. |
| MP_OOBMgr.log | Records the management point activities related to receiving an OTP from a client. |
| MP_Policy.log | Records policy communication. |
| MP_Relay.log | Records the transfer of files that are collected from the client. |
| MP_Retry.log | Records hardware inventory retry processes. |
| MP_Sinv.log | This record details the conversion of XML software inventory records from clients and the copying of those files to the site server. |
| MP_SinvCollFile.log | Records details about file collection. |
| MP_Status.log | Records details about the replication of software update notification files from a parent site to child sites. |
| mpcontrol.log | Records the registration of the management point with WINS. Records the availability of the management point every 10 minutes. |
| mpfdm.log | Records the management point component’s actions that move client files to the corresponding INBOXES folder on the site server. |
| mpMSI.log | Records details about the management point installation. |
| MPSetup.log | Records the management point installation wrapper process. SCCM logs help to check the MP setup details. |
| objreplmgr.log | Records detail automatic deployment rules for the identification, content download, and software update group and deployment creation. |
| PatchDownloader.log | Records details about the process of downloading software updates from the update source to the download destination on the site server. |
| ruleengine.log | Records details automatic deployment rules for the identification, content download, and software update group and deployment creation. |
| SMS_ISVUPDATES_SYNCAGENT.log | Logfile for synchronization of third-party software updates starting in SCCM version 1806. |
| SUPSetup.log | Records details about the software update point installation. Installation was successful when the software update point installation was completed and written to this log file. |
| WCM.log | This record records details about the software update point configuration and connections to the WSUS server for subscribed update categories, classifications, and languages. |
| WSUSCtrl.log | This record records details about using the ExtractContent.exe tool on a remote, prestaged distribution point. This tool extracts content that has been exported to a file. |
| wsyncmgr.log | Records details about the software updates sync process. |
| WUSSyncXML.log | Records details about the Inventory Tool for the Microsoft Updates sync process. |
| AppIntentEval.log | Records the Application Catalogue’s activity, including its use of Silverlight. |
| AppDiscovery.log | Records details about the discovery or detection of applications on client computers. |
| AppEnforce.log | Records details about enforcement actions (install and uninstall) taken for applications on the client. |
| awebsctl.log | Records monitoring activities for the Application Catalog web service point site system role. |
| awebsvcMSI.log | Records detailed installation information for the Application Catalog web service point site system role. |
| Ccmsdkprovider.log | Records the activities of the application management SDK. |
| colleval.log | Records details when collections are created, changed, and deleted by the Collection Evaluator. |
| ConfigMgrSoftwareCatalog.log | Records information about installing, using, and removing a Windows service used to test network connectivity and permissions between servers using the server’s computer account that initiates the connection. |
| NotiCtrl.log | Application request notifications. SCCM logs help get the details of the client’s notification. |
| portlctl.log | Records the monitoring activities for the Application Catalog website point site system role. |
| portlwebMSI.log | Records the MSI installation activity for the Application Catalog website role. |
| PrestageContent.log | Records activities for managing the URL for the Application Catalog shown in the Software Center. |
| ServicePortalWebService.log | Records the activity of the Application Catalog web service. |
| ServicePortalWebSite.log | Records the activity of the Application Catalog website. |
| SMSdpmon.log | Records details about the distribution point health monitoring scheduled task configured on a distribution point. |
| SoftwareCatalogUpdateEndpoint.log | Records details about the processing of XML files from the inbox for updating the Asset Intelligence catalogue. |
| SoftwareCenterSystemTasks.log | Records activities related to Software Center prerequisite component validation. |
| colleval.log | Records details when collections are created, changed, and deleted by the Collection Evaluator. |
| execmgr.log | Records details about packages and task sequences that run. SCCM logs help to record SMS Agent Host service activities. |
| AssetAdvisor.log | Records the activities of Asset Intelligence inventory actions. |
| aikbmgr.log | Records details about the processing of XML files from the inbox for updating the Asset Intelligence catalog. |
| AIUpdateSvc.log | Records details about installing the Asset Intelligence sync point site system role. |
| AIUSMSI.log | Records details about installing the Asset Intelligence sync point site system role. |
| AIUSSetup.log | Records details about the installation of the Asset Intelligence sync point site system role. |
| ManagedProvider.log | It records details about discovering software with an associated software identification tag and activities related to hardware inventory. |
| MVLSImport.log | Records details about the processing of imported licensing files. |
| ConfigMgrSetup.log | Records information about setup and recovery tasks when SCCM recovers a site from backup. |
| Smsbkup.log | Records details about the site backup activity. |
| smssqlbkup.log | Records output from the site database backup process when SQL Server is installed on a server, not the site server. |
| Smswriter.log | Records information about the state of the SCCM VSS writer used by the backup process. |
| Crp.log | Records enrollment activities. SCCM logs related to enrollment activities are going to help us. |
| Crpctrl.log | Records the operational health of the certificate registration point. |
| Crpsetup.log | Records details about the installation and configuration of the certificate registration point. |
| Crpmsi.log | Records details about the installation and configuration of the certificate registration point. |
| NDESPlugin.log | Records challenge verification and certificate enrollment activities. |
RBAC Related Issues – SCCM Logs
SCCM RBAC-related SCCM logs are available in the below table.
| Log name | Description | Computer with log file |
|---|---|---|
| hman.log | Records information about site configuration changes and the publishing of site information to Active Directory Domain Services. | Site server |
| SMSProv.log | Records WMI provider access to the site database. | Computer with the SMS Provider |
SCCM Configuration Manager Client Logs
Let’s analyze the ConfigMgr or SCCM client logs from the Windows 10 or Windows 11 device. Understanding the log file structure from the client side is important for the initial troubleshooting of the SCCM Tenant attachment.
Location of the client logs files – C:\Windows\CCM\Logs
Toast Notification Logs
When you have trouble getting toast notifications from the client side, refer to the following location from the Windows 10 ConfigMgr Client.
| Log File | Description |
|---|---|
| SCToastNotification__<domain>@<username>_1.log | Toast Notification – Toast Notification Related Activities are stored here. |
Endpoint Analytics Logs
You can refer to the following log files related to endpoint analytics from the Windows 10 client device.
| Log File | Description |
|---|---|
| SystemTempLockdown.log | Endpoint Analytics – Records system temp lockdown configuration details |
| SensorWmiProvider.log | Endpoint Analytics – Records the activity of the WMI provider for the endpoint analytics sensor. |
| SensorEndpoint.log | Endpoint Analytics – Records the execution of endpoint analytics policy and uploads client data to the site server. |
| SensorManagedProvider.Log | Endpoint Analytics – Records the gathering and processing of events and information for endpoint analytics. |
| SystemPerf.log | Endpoint Analytics – System Performance details are recorded endpoint |
Software Center Logs
This guide section shall help you understand the log files related to Software Center-associated tasks.
| Log | Description |
|---|---|
| SoftwareCenterSystemTasks.log | Software Center – Records activities related to Software Center prerequisite component validation |
| SCClient_<domain>@<username>_1.log SCClient_MEMCM@anoop_2.log | Software Center – Records the activity in the Software Center for the specified user on the client computer |
| SCClient_<domain>@<username>_1.log SCClient_MEMCM@anoop_6.log | Software Center – Records the activity in Software Center for the specified user on the client computer |
Office 365 Related Logs
Office-related logs are documented in this section and the software update section below.
| Log | Description |
|---|---|
| OfficeAnalytics.log | Office – Office device inventory details |
Software Update Logs
This guide section shall help you understand the log files related to Software Update-related tasks.
| Log | Description |
|---|---|
| AlternateHandler.log | Software Updates – Microsoft 365 Apps for enterprise client updates |
| UpdatesStore.log | Software Updates – Records details about compliance status for the software updates that were assessed during the compliance scan cycle |
| ScanAgent.log | Software Updates – Records details about scan requests for software updates, the WSUS location, and related actions |
| UpdatesHandler.log | Software Updates – Records details about software update compliance scanning and the download and installation |
| StateMessage.log | Software Updates – Records details about software update state messages that are created and sent to the MP |
| WUAHandler.log | Software Updates – Records details about the Windows Update Agent on the client when it searches for software updates |
| DeltaDownload.log | Software Updates – Records information about the download of express updates & updates downloaded using DO |
PowerShell Script – SCCM Log Files Updated List Client and Server
This guide section shall help you understand the log files related to PowerShell script-related tasks.
| Log | Description |
|---|---|
| Scripts.log | PowerShell Scripts – Run Script Related Activities are recorded here |
General SCCM Client Logs
This section covers all the general categories of the logs.
| Log | Description |
|---|---|
| CertificateMaintenance.log | General – Maintains certificates for Active Directory Domain Services and MP. |
| LocationServices.log | General – Records actions for starting applications on the client, marked run as 32-bit. |
| UpdateTrustedSites.log | General – Record Details of trusted sites – Add Default Portal To Trusted Sites. |
| Ccm32BitLauncher.log | General – Records actions for starting applications on the client, marked run as 32 bit. |
| CCMSDKProvider.log | General – Records activities for the client SDK interfaces |
| CcmSqlCE.log | General – Records activities for the SQL Server Compact Edition (CE) that the client uses |
| Scheduler.log | General – Records activities of scheduled tasks for all client operations |
| CcmExec.log | General – Records activities of the client and the SMS Agent Host service |
| CcmMessaging.log | General – Records activities related to communication between the client and MP |
| SmsClientMethodProvider.log | General – Records activity for sending client schedules |
| CcmRestart.log | General – Records client service restart activity |
| CcmEval.log | General – Records Configuration Manager client status evaluation activities |
| UpdatesDeployment.log | General – Records details about deployments on the client, including software update activation, evaluation, and enforcement |
| UserAffinity.log | General – Records details about user device affinity |
| CCMVDIProvider.log | General – Records information for clients in a virtual desktop infrastructure (VDI) |
| wedmtrace.log | General – Records operations related to writing filters on Windows Embedded clients |
| StatusAgent.log | General – Records status messages that are created by the client components |
| ClientLocation.log | General – Records tasks that are related to client site assignment |
| CcmNotificationAgent.log | General – Records the activities of the notification agent |
| MaintenanceCoordinator.log | General – Records the activity for general maintenance tasks for the client. |
| CcmEvalTask.log | General – Records the SCCM client status evaluation activities |
| Diagnostics.log | General – Records the status of client diagnostic actions |
| smscliui.log | General – Records use of the Configuration Manager client in the Control Panel |
| UserAffinityProvider.log | General – Technical details from the component that tracks user device affinity |
| CertEnrollAgent.log | General – Windows Hello for Business client Activities |
Client Install/Repair Logs
This guide section shall help you understand the log files related to Client Install/Repair script-related tasks.
| Logs | Description |
|---|---|
| ClientIDManagerStartup.log | Install – Creates and maintains the client GUID and identifies tasks during client registration and assignment |
| ClientServicing.log | Install – Records information for client deployment state messages during auto-upgrade and client piloting |
| CcmRepair.log | Install – Records the repair activities of the client agent |
Application Logs
This section of the guide shall help you understand the log files related to Application-related tasks.
| Log | Description |
|---|---|
| AppGroupHandler.log | Application – Records detection and enforcement information for application groups |
| DetailedAppInfo.log | Application – Collect application information for DetailedAppInfo WMI class |
| AppEnforce.log | Application – Enforcement actions |
| SettingsAgent.log | Application – Enforcement of specific applications, records orchestration of application group evaluation |
| SoftwareCatalogUpdateEndpoint.log | Application – Records activities for managing the URL for the Application Catalog shown in Software Center |
| SrcUpdateMgr.log | Application – Records activity for installed Windows Installer applications that are updated with current distribution point source locations |
| ExpressionSolver.log | Application – Records details about enhanced detection methods |
| execmgr.log | Application – Records details about packages and task sequences that run |
| AppIntentEval.log | Application – Records details about the current and intended state of applications |
| AppDiscovery.log | Application – Records details about discovering or detecting applications on client computers. |
| VirtualApp.log | App-v – Records information specific to the evaluation of Application Virtualization (App-V) deployment types |
Content Related Logs
Check out the SCCM client content-related logs in this section of the post.
| Logs | Description |
|---|---|
| PeerDPAgent.log | Content – Peer Cache DP related information stored in this log |
| DataTransferService.log | Content – Records all BITS communication for policy or package access |
| FileBITS.log | Content – Records all SMB package access tasks |
| CAS.log | Content – Records details when distribution points are found for referenced content |
| CMBITSManager.log | Content – Records information for Background Intelligent Transfer Service (BITS) jobs on the device |
| ContentTransferManager.log | Content – Schedules the BITS or SMB to download or access packages |
Policy Related Logs
Check out the SCCM client-related logs in this post section.
| Log | Description |
|---|---|
| setuppolicyevaluator.log | Policy – Records configuration and inventory policy creation in WMI |
| PolicyEvaluator.log | Policy – Records details about the evaluation of policies on client computers |
| PolicyAgentProvider.log | Policy – Records policy changes |
| PolicyAgent.log | Policy (Content) – Records requests for policies made by using the Data Transfer Service |
Power Management-Related Logs
Check out the ConfigMgr client Power Management-related logs in this post section.
| Log | Description |
|---|---|
| pwrmgmt.log | Power Management – Records information about enabling or disabling and configuring the wake-up proxy client settings |
| PwrProvider.log | Power Management – Records the power management provider’s (PWRInvProvider) activities hosted in the WMI service. |
Reboot Related Logs – SCCM Log Files Updated List Client and Server
This section tells us about the reboot-related activities during the software updates.
| Log | Descriptions |
|---|---|
| RebootCoordinator.log | Reboot – Records details about the coordination of system restarts on client computers |
Windows Analytics SCCM Client Log
Check out the ConfigMgr client Windows Analytics log in this post section.
| Logs | Description |
|---|---|
| WindowsAnalytics.log | Windows Analytics – Records the details about Windows Analytics settings are enabled, or Commercial ID is empty. |
Endpoint Protection Logs
When you have trouble getting Endpoint Protection from the client side, you can refer to the following location from Windows 10 ConfigMgr Client.
| Logs | Description |
|---|---|
| EndpointProtectionAgent.log | Endpoint Protection – Records details about the installation of the Endpoint Protection client and the application |
| ExternalEventAgent.log | Endpoint Protection – Records the history of Endpoint Protection malware detection and events related to client status. |
Desktop Analytics
Check out the ConfigMgr client Desktop Analytics log in this post section.
| Log | Description |
|---|---|
| M365AHandler.log | Desktop Analytics – Information about the Desktop Analytics settings policy |
Compliance Related Logs
Check out the ConfigMgr client Compliance and Baseline-related log in this post section.
| Logs | Description |
|---|---|
| DCMAgent.log | Compliance – Information about the evaluation, conflict reporting, and remediation |
| CIStateStore.log | Compliance – Records changes in state for configuration items |
| CIDownloader.log | Compliance – Records details about configuration item definition downloads |
| CIAgent.log | Compliance – Records details about the process of remediation and compliance |
| CIStore.log | Compliance – Records information about configuration items |
| DcmWmiProvider.log | Compliance – Records information about reading configuration item sync lets from WMI |
| DCMReporting.log | Compliance – Records information about reporting policy platform results into state messages for CI |
| CITaskMgr.log | Compliance – Records tasks for each application and deployment type |
Co-Management Related Logs
Check out the ConfigMgr client Co-Management related to logging in to this post section.
| Log | Description |
|---|---|
| CcmCloud.log | Co-Management – CCM_Cloud Client Config |
| DdrProvider.log | Co-Management – MDM enrolment details. SCCM manages records Workloads |
| ComplRelayAgent.log | Co-Management – Records information for the co-management workload for compliance policies |
| CoManagementHandler.log | Co-Management – Use to troubleshoot co-management on the client |
Asset Intelligence
This section of the post provides more details about Asset Intelligence logs, which might help troubleshoot AI issues further.
| Log | Description |
|---|---|
| AssetAdvisor.log | AI – Records the activities of Asset Intelligence inventory actions |
Resources
- SCCM Logs Files | 5 Log File Reading Tips | ConfigMgr
- https://www.anoopcnair.com/configmgr-client-enable-verbose-logging-debug-logging-sccm/
We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.
Author
Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His primary focus is Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.
Very good information Sir. I was looking for this day before yesterday and today I saw you sharing this blog. Lucky me.
Thank you Deepak
Good Information Sir. Really it helps a lot.
If possible can you please share some information on Supersede
Supersede .. can you pls explain bit more?
Thank you Anoop!! Very helpful
Hi Anoop, I need a clarification where I am unable to access the C$ of the client machines in most of the machines across the environment(Gets access Denied error). Any suggestions are much appreciated.
Thank you in Advance!
Try https://forum.howtomanagedevices.com
Thank you so much for keeping the list of SCCM log files updated! I was struggling to find the correct log file for a recurring issue and this post saved me a lot of time. The clear explanations and detailed descriptions of each log file were super helpful. Looking forward to more updates!
Thanks for the updated list! I’ve been struggling to track down the correct log files for troubleshooting SCCM issues, this is a huge help.