Let’s analyze the ConfigMgr client logs from the Windows 10 device. It’s important to understand the log file structure from the client-side for the initial troubleshooting of SCCM Tenant attach.
Location of the client logs files – C:\Windows\CCM\Logs
Related post about Logs 👉 SCCM Logs Files | 5 Log File Reading Tips | ConfigMgr
Toast Notification Logs
When you have trouble getting toast notification from the client side, you can refer to the following location from Windows 10 ConfigMgr Client.
|SCToastNotification__<domain>@<username>_1.log||Toast Notification – Toast Notification Related Activities are stored here.|
Endpoint Analytics Logs
You can refer to the following log files related to endpoint analytics from the Windows 10 client device.
|SystemTempLockdown.log||Endpoint Analytics – Records system temp lock down configuration details|
|SensorWmiProvider.log||Endpoint Analytics – Records the activity of the WMI provider for the endpoint analytics sensor.|
|SensorEndpoint.log||Endpoint Analytics – Records the execution of endpoint analytics policy and upload of client data to the site server.|
|SensorManagedProvider.Log||Endpoint Analytics – Records the gathering and processing of events and information for endpoint analytics.|
|SystemPerf.log||Endpoint Analytics – System Performance details are recorded endpoint|
Software Center Logs
This section of the guide shall help you to understand the log files related to Software Center related tasks.
|SoftwareCenterSystemTasks.log||Software Center – Records activities related to Software Center prerequisite component validation|
|SCClient_<domain>@<username>_1.log [email protected]_2.log||Software Center – Records the activity in Software Center for the specified user on the client computer|
|SCClient_<domain>@<username>_1.log [email protected]_6.log||Software Center – Records the activity in Software Center for the specified user on the client computer|
Office Related Logs
Office related logs are documented in this section and in the software update section below.
|OfficeAnalytics.log||Office – Office device inventory details|
Software Update Logs
This section of the guide shall help you to understand the log files related to Software Update related tasks.
|AlternateHandler.log||Software Updates – Microsoft 365 Apps for enterprise client updates|
|UpdatesStore.log||Software Updates – Records details about compliance status for the software updates that were assessed during the compliance scan cycle|
|ScanAgent.log||Software Updates – Records details about scan requests for software updates, the WSUS location, and related actions|
|UpdatesHandler.log||Software Updates – Records details about software update compliance scanning and about the download and installation|
|StateMessage.log||Software Updates – Records details about software update state messages that are created and sent to the MP|
|WUAHandler.log||Software Updates – Records details about the Windows Update Agent on the client when it searches for software updates|
|DeltaDownload.log||Software Updates – Records information about the download of express updates & updates downloaded using DO|
This section of the guide shall help you to understand the log files related to PowerShell script related tasks.
|Scripts.log||PowerShell Scripts – Run Script Related Activities are recorded here|
This section covers all the general categories of the logs.
|CertificateMaintenance.log||General – Maintains certificates for Active Directory Domain Services and MP|
|LocationServices.log||General – MP/SUP/DP Details – Records the client activity for locating management points, software update points, and distribution points.|
|UpdateTrustedSites.log||General – Record Details of trusted sites – Add Default Portal To Trusted Sites|
|Ccm32BitLauncher.log||General – Records actions for starting applications on the client marked run as 32 bit|
|CCMSDKProvider.log||General – Records activities for the client SDK interfaces|
|CcmSqlCE.log||General – Records activities for the SQL Server Compact Edition (CE) that the client uses|
|Scheduler.log||General – Records activities of scheduled tasks for all client operations|
|CcmExec.log||General – Records activities of the client and the SMS Agent Host service|
|CcmMessaging.log||General – Records activities related to communication between the client and MP|
|SmsClientMethodProvider.log||General – Records activity for sending client schedules|
|CcmRestart.log||General – Records client service restart activity|
|CcmEval.log||General – Records Configuration Manager client status evaluation activities|
|UpdatesDeployment.log||General – Records details about deployments on the client, including software update activation, evaluation, and enforcement|
|UserAffinity.log||General – Records details about user device affinity|
|CCMVDIProvider.log||General – Records information for clients in a virtual desktop infrastructure (VDI)|
|wedmtrace.log||General – Records operations related to write filters on Windows Embedded clients|
|StatusAgent.log||General – Records status messages that are created by the client components|
|ClientLocation.log||General – Records tasks that are related to client site assignment|
|CcmNotificationAgent.log||General – Records the activities of the notification agent|
|MaintenanceCoordinator.log||General – Records the activity for general maintenance tasks for the client|
|CcmEvalTask.log||General – Records the SCCM client status evaluation activities|
|Diagnostics.log||General – Records the status of client diagnostic actions|
|smscliui.log||General – Records use of the Configuration Manager client in Control Panel|
|UserAffinityProvider.log||General – Technical details from the component that tracks user device affinity|
|CertEnrollAgent.log||General – Windows Hello for Business client Activities|
Client Install/Repair Logs
This section of the guide shall help you to understand the log files related to Client Install/Repair script related tasks.
|ClientIDManagerStartup.log||Install – Creates and maintains the client GUID and identifies tasks during client registration and assignment|
|ClientServicing.log||Install – Records information for client deployment state messages during auto-upgrade and client piloting|
|CcmRepair.log||Install – Records the repair activities of the client agent|
This section of the guide shall help you to understand the log files related to Application related tasks.
|AppGroupHandler.log||Application – Records detection and enforcement information for application groups|
|DetailedAppInfo.log||Application – Collect application information for DetailedAppInfo WMI class|
|AppEnforce.log||Application – Enforcement actions|
|SettingsAgent.log||Application – Enforcement of specific applications, records orchestration of application group evaluation|
|SoftwareCatalogUpdateEndpoint.log||Application – Records activities for managing the URL for the Application Catalog shown in Software Center|
|SrcUpdateMgr.log||Application – Records activity for installed Windows Installer applications that are updated with current distribution point source locations|
|ExpressionSolver.log||Application – Records details about enhanced detection methods|
|execmgr.log||Application – Records details about packages and task sequences that run|
|AppIntentEval.log||Application – Records details about the current and intended state of applications|
|AppDiscovery.log||Application – Records details about the discovery or detection of applications on client computers.|
|VirtualApp.log||App-v – Records information specific to the evaluation of Application Virtualization (App-V) deployment types|
Content Related Logs
Check out the SCCM client content related logs in this section of the post.
|PeerDPAgent.log||Content – Peer Cache DP related information stored in this log|
|DataTransferService.log||Content – Records all BITS communication for policy or package access|
|FileBITS.log||Content – Records all SMB package access tasks|
|CAS.log||Content – Records details when distribution points are found for referenced content|
|CMBITSManager.log||Content – Records information for Background Intelligent Transfer Service (BITS) jobs on the device|
|ContentTransferManager.log||Content – Schedules the BITS or SMB to download or access packages|
Policy Related Logs
Check out the SCCM client Policy related logs in this section of the post.
|setuppolicyevaluator.log||Policy – Records configuration and inventory policy creation in WMI|
|PolicyEvaluator.log||Policy – Records details about the evaluation of policies on client computers|
|PolicyAgentProvider.log||Policy – Records policy changes|
|PolicyAgent.log||Policy (Content) – Records requests for policies made by using the Data Transfer Service|
Power Management Related Logs
Check out the ConfigMgr client Power Management related logs in this section of the post.
|pwrmgmt.log||Power Management – Records information about enabling or disabling and configuring the wake-up proxy client settings|
|PwrProvider.log||Power Management – Records the activities of the power management provider (PWRInvProvider) hosted in the WMI service|
Reboot Related Logs
This section tells us about the reboot related activities during the software updates.
|RebootCoordinator.log||Reboot – Records details about the coordination of system restarts on client computers|
Windows Analytics Log
Check out the ConfigMgr client Windows Analytics log in this section of the post.
|WindowsAnalytics.log||Windows Analytics – Records the details about Windows Analytics settings are enabled or Commercial ID is empty|
Endpoint Protection Logs
When you have trouble getting Endpoint Protection from the client-side, you can refer to the following location from Windows 10 ConfigMgr Client.
|EndpointProtectionAgent.log||Endpoint Protection – Records details about the installation of the Endpoint Protection client and the application|
|ExternalEventAgent.log||Endpoint Protection – Records the history of Endpoint Protection malware detection and events related to client status|
Check out the ConfigMgr client Desktop Analytics log in this section of the post.
|M365AHandler.log||Desktop Analytics – Information about the Desktop Analytics settings policy|
Compliance Related Logs
|DCMAgent.log||Compliance – Information about the evaluation, conflict reporting, and remediation|
|CIStateStore.log||Compliance – Records changes in state for configuration items|
|CIDownloader.log||Compliance – Records details about configuration item definition downloads|
|CIAgent.log||Compliance – Records details about the process of remediation and compliance|
|CIStore.log||Compliance – Records information about configuration items|
|DcmWmiProvider.log||Compliance – Records information about reading configuration item synclets from WMI|
|DCMReporting.log||Compliance – Records information about reporting policy platform results into state messages for CI|
|CITaskMgr.log||Compliance – Records tasks for each application and deployment type|
Co-Management Related Logs
Check out the ConfigMgr client Co-Management related log in this section of the post.
|CcmCloud.log||Co-Management – CCM_Cloud Client Config|
|DdrProvider.log||Co-Management – MDM enrolment details. Records Workloads are managed by SCCM|
|ComplRelayAgent.log||Co-Management – Records information for the co-management workload for compliance policies|
|CoManagementHandler.log||Co-Management – Use to troubleshoot co-management on the client|
More details about Asset Intelligence logs in this section of the post. This might help to troubleshoot further on the issues related to AI.
|AssetAdvisor.log||AI – Records the activities of Asset Intelligence inventory actions|
- SCCM Logs Files | 5 Log File Reading Tips | ConfigMgr
- Updated List of Log files from Microsoft https://docs.microsoft.com/en-us/configmgr/core/plan-design/hierarchy/log-files
- CMTrace SCCM log file reading tool
- SCCM Support Center Log Viewer