ConfigMgr Client Logs Details | SCCM

0
SCCM Client Logs

Let’s analyze the ConfigMgr client logs from the Windows 10 device. It’s important to understand the log file structure from the client-side for the initial troubleshooting of SCCM Tenant attach.

Location of the client logs files – C:\Windows\CCM\Logs

Related post about Logs 👉 SCCM Logs Files | 5 Log File Reading Tips | ConfigMgr

Toast Notification Logs

When you have trouble getting toast notification from the client side, you can refer to the following location from Windows 10 ConfigMgr Client.

Log FileDescription
SCToastNotification__<domain>@<username>_1.log Toast Notification – Toast Notification Related Activities are stored here.
ConfigMgr Client Logs Details | SCCM
ConfigMgr Client Logs Details | SCCM 1
ConfigMgr Client Logs Details | SCCM

Endpoint Analytics Logs

You can refer to the following log files related to endpoint analytics from the Windows 10 client device.

Log FileDescription
SystemTempLockdown.logEndpoint Analytics – Records system temp lock down configuration details
SensorWmiProvider.logEndpoint Analytics – Records the activity of the WMI provider for the endpoint analytics sensor.
SensorEndpoint.logEndpoint Analytics – Records the execution of endpoint analytics policy and upload of client data to the site server.
SensorManagedProvider.LogEndpoint Analytics – Records the gathering and processing of events and information for endpoint analytics.
SystemPerf.logEndpoint Analytics – System Performance details are recorded endpoint 
ConfigMgr Client Logs Details | SCCM
ConfigMgr Client Logs Details | SCCM
ConfigMgr Client Logs Details | SCCM

Software Center Logs

This section of the guide shall help you to understand the log files related to Software Center related tasks.

LogDescription
SoftwareCenterSystemTasks.logSoftware Center – Records activities related to Software Center prerequisite component validation
SCClient_<domain>@<username>_1.log [email protected]_2.logSoftware Center – Records the activity in Software Center for the specified user on the client computer
SCClient_<domain>@<username>_1.log [email protected]_6.logSoftware Center – Records the activity in Software Center for the specified user on the client computer
ConfigMgr Client Logs Details | SCCM 2
ConfigMgr Client Logs Details | SCCM

Office Related Logs

Office related logs are documented in this section and in the software update section below.

LogDescription
OfficeAnalytics.logOffice –  Office device inventory details
ConfigMgr Client Logs Details | SCCM
ConfigMgr Client Logs Details | SCCM

Software Update Logs

This section of the guide shall help you to understand the log files related to Software Update related tasks.

LogDescription
AlternateHandler.logSoftware Updates – Microsoft 365 Apps for enterprise client updates
UpdatesStore.logSoftware Updates – Records details about compliance status for the software updates that were assessed during the compliance scan cycle
ScanAgent.logSoftware Updates – Records details about scan requests for software updates, the WSUS location, and related actions
UpdatesHandler.logSoftware Updates – Records details about software update compliance scanning and about the download and installation
StateMessage.logSoftware Updates – Records details about software update state messages that are created and sent to the MP
WUAHandler.logSoftware Updates – Records details about the Windows Update Agent on the client when it searches for software updates
DeltaDownload.logSoftware Updates – Records information about the download of express updates & updates downloaded using DO

PowerShell Script

This section of the guide shall help you to understand the log files related to PowerShell script related tasks.

LogDescription
Scripts.logPowerShell Scripts – Run Script Related Activities are recorded here
ConfigMgr Client Logs Details | SCCM
ConfigMgr Client Logs Details | SCCM

General

This section covers all the general categories of the logs.

LogDescription
CertificateMaintenance.logGeneral – Maintains certificates for Active Directory Domain Services and MP
LocationServices.logGeneral – MP/SUP/DP Details – Records the client activity for locating management points, software update points, and distribution points.
UpdateTrustedSites.logGeneral – Record Details of trusted sites – Add Default Portal To Trusted Sites
Ccm32BitLauncher.logGeneral – Records actions for starting applications on the client marked run as 32 bit
CCMSDKProvider.logGeneral – Records activities for the client SDK interfaces
CcmSqlCE.logGeneral – Records activities for the SQL Server Compact Edition (CE) that the client uses
Scheduler.logGeneral – Records activities of scheduled tasks for all client operations
CcmExec.logGeneral – Records activities of the client and the SMS Agent Host service
CcmMessaging.logGeneral – Records activities related to communication between the client and MP
SmsClientMethodProvider.logGeneral – Records activity for sending client schedules
CcmRestart.logGeneral – Records client service restart activity
CcmEval.logGeneral – Records Configuration Manager client status evaluation activities
UpdatesDeployment.logGeneral – Records details about deployments on the client, including software update activation, evaluation, and enforcement
UserAffinity.logGeneral – Records details about user device affinity
CCMVDIProvider.logGeneral – Records information for clients in a virtual desktop infrastructure (VDI)
wedmtrace.logGeneral – Records operations related to write filters on Windows Embedded clients
StatusAgent.logGeneral – Records status messages that are created by the client components
ClientLocation.logGeneral – Records tasks that are related to client site assignment
CcmNotificationAgent.logGeneral – Records the activities of the notification agent
MaintenanceCoordinator.logGeneral – Records the activity for general maintenance tasks for the client
CcmEvalTask.logGeneral – Records the SCCM client status evaluation activities
Diagnostics.logGeneral – Records the status of client diagnostic actions
smscliui.logGeneral – Records use of the Configuration Manager client in Control Panel
UserAffinityProvider.logGeneral – Technical details from the component that tracks user device affinity
CertEnrollAgent.logGeneral – Windows Hello for Business client Activities
ConfigMgr Client Logs Details | SCCM 3

Client Install/Repair Logs

This section of the guide shall help you to understand the log files related to Client Install/Repair script related tasks.

LogsDescription
ClientIDManagerStartup.logInstall – Creates and maintains the client GUID and identifies tasks during client registration and assignment
ClientServicing.logInstall – Records information for client deployment state messages during auto-upgrade and client piloting
CcmRepair.logInstall – Records the repair activities of the client agent
ConfigMgr Client Logs Details | SCCM 4

Application Logs

This section of the guide shall help you to understand the log files related to Application related tasks.

LogDescription
AppGroupHandler.logApplication  – Records detection and enforcement information for application groups
DetailedAppInfo.logApplication – Collect application information for DetailedAppInfo WMI class
AppEnforce.logApplication – Enforcement actions
SettingsAgent.logApplication – Enforcement of specific applications, records orchestration of application group evaluation
SoftwareCatalogUpdateEndpoint.logApplication – Records activities for managing the URL for the Application Catalog shown in Software Center
SrcUpdateMgr.logApplication – Records activity for installed Windows Installer applications that are updated with current distribution point source locations
ExpressionSolver.logApplication – Records details about enhanced detection methods
execmgr.logApplication – Records details about packages and task sequences that run
AppIntentEval.logApplication – Records details about the current and intended state of applications
AppDiscovery.logApplication – Records details about the discovery or detection of applications on client computers.
VirtualApp.logApp-v – Records information specific to the evaluation of Application Virtualization (App-V) deployment types

Content Related Logs

Check out the SCCM client content related logs in this section of the post.

LogsDescription
PeerDPAgent.logContent – Peer Cache DP related information stored in this log
DataTransferService.logContent – Records all BITS communication for policy or package access
FileBITS.logContent – Records all SMB package access tasks
CAS.logContent – Records details when distribution points are found for referenced content
CMBITSManager.logContent – Records information for Background Intelligent Transfer Service (BITS) jobs on the device
ContentTransferManager.logContent – Schedules the BITS or SMB to download or access packages
PeerDPAgent – Content Related Logs
PeerDPAgent - Content Related Logs
PeerDPAgent – Content Related Logs

Policy Related Logs

Check out the SCCM client Policy related logs in this section of the post.

LogDescription
setuppolicyevaluator.logPolicy – Records configuration and inventory policy creation in WMI
PolicyEvaluator.logPolicy – Records details about the evaluation of policies on client computers
PolicyAgentProvider.logPolicy – Records policy changes
PolicyAgent.logPolicy (Content) – Records requests for policies made by using the Data Transfer Service
ConfigMgr Client Logs Details | SCCM 5

Power Management Related Logs

Check out the ConfigMgr client Power Management related logs in this section of the post.

LogDescription
pwrmgmt.logPower Management – Records information about enabling or disabling and configuring the wake-up proxy client settings
PwrProvider.logPower Management – Records the activities of the power management provider (PWRInvProvider) hosted in the WMI service

Reboot Related Logs

This section tells us about the reboot related activities during the software updates.

LogDescriptions
RebootCoordinator.logReboot – Records details about the coordination of system restarts on client computers

Windows Analytics Log

Check out the ConfigMgr client Windows Analytics log in this section of the post.

LogsDescription
WindowsAnalytics.logWindows Analytics –  Records the details about Windows Analytics settings are enabled or Commercial ID is empty

Endpoint Protection Logs

When you have trouble getting Endpoint Protection from the client-side, you can refer to the following location from Windows 10 ConfigMgr Client.

LogsDescription
EndpointProtectionAgent.logEndpoint Protection – Records details about the installation of the Endpoint Protection client and the application
ExternalEventAgent.logEndpoint Protection – Records the history of Endpoint Protection malware detection and events related to client status

Desktop Analytics

Check out the ConfigMgr client Desktop Analytics log in this section of the post.

LogDescription
M365AHandler.logDesktop Analytics – Information about the Desktop Analytics settings policy

Compliance Related Logs

Check out the ConfigMgr client Compliance and Baseline related log in this section of the post.

LogsDescription
DCMAgent.logCompliance –  Information about the evaluation, conflict reporting, and remediation
CIStateStore.logCompliance – Records changes in state for configuration items
CIDownloader.logCompliance – Records details about configuration item definition downloads
CIAgent.logCompliance – Records details about the process of remediation and compliance
CIStore.logCompliance – Records information about configuration items
DcmWmiProvider.logCompliance – Records information about reading configuration item synclets from WMI
DCMReporting.logCompliance – Records information about reporting policy platform results into state messages for CI
CITaskMgr.logCompliance – Records tasks for each application and deployment type

Co-Management Related Logs

Check out the ConfigMgr client Co-Management related log in this section of the post.

LogDescription
CcmCloud.logCo-Management – CCM_Cloud Client Config
DdrProvider.logCo-Management – MDM enrolment details. Records Workloads are managed by SCCM
ComplRelayAgent.logCo-Management – Records information for the co-management workload for compliance policies
CoManagementHandler.logCo-Management – Use to troubleshoot co-management on the client

Asset Intelligence

More details about Asset Intelligence logs in this section of the post. This might help to troubleshoot further on the issues related to AI.

LogDescription
AssetAdvisor.logAI – Records the activities of Asset Intelligence inventory actions

Resources

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.