How to Create SCCM Configuration Items Configuration Baselines

Let’s learn how to create SCCM Configuration Items and Configuration Baselines in ConfigMgr. Requirements and how to create a guide of configuration items and baselines in SCCM are explained below. A configuration item is a container in ConfigMgr that stores specific information.

Configuration Items are widely used in the SCCM world for identifying Software Updates, application models, etc.… In this post, I will cover the information that we configure depends on the configuration item type. Configuration items can include the following information:

  • Detection method information
  • Settings
  • Compliance rules
  • Supported platforms

Note: In this post, I will refer to Configuration Items as CI and Configuration Baselines as CB.

Patch My PC

Introduction

The Configuration Item and Baseline can be used to check compliance settings for users and devices. In a larger environment migrating from one Windows 10 version to another, we may be required to check the compliance settings of OS versions, driver versions, applications versions, user information, etc. If we found any noncompliance devices or users, we can use CI and CB for remediation.

What are Configuration Items in ConfigMgr

Using CI we can handle device settings. CI’s are not deployed directly to the collections but can be deployed via CB. The Configuration Items in ConfigMgr contain any of the following types which can be used in CB.

  • Active Directory Query
  • Assembly
  • File System
  • IIS Metabase
  • Registry Key
  • Registry Value
  • Script
  • SQL Query
  • WQL Query
  • XPath Query

What are Configuration Baselines in ConfigMgr

Configuration Baselines in ConfigMgr is a collection of CI’s and CB’s. CB can be included at least one or more CI’s to be deployed to device and user collections. Also below items are can be part of CB.

  • Configuration Items
  • Software Updates
  • Configuration Baselines

How to create custom Configuration Items in ConfigMgr

Open Configuration Manager Console. Go to Asset and Compliance -> Compliance Settings -> Configuration Items -> click ‘Create Configuration Item

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Create Configuration Items How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Provide the name of CI and select the option below and click ‘Next‘.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Item Name – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Select the operating system version for which you want to create the CI and click ‘Next‘.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Item Windows Version – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Click on New to create new settings.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Item Settings – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Provide settings Name and select settings type according to the requirement. Here I’m going to check the version of the OS through WQL, so I have selected ‘WQL Query‘ as below.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Items General Settings – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Click on the ‘Compliance Rules‘ tab and press New to create a new rule. You can also create compliance rules as the next step as well.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Item Compliance Rule – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Give the Name of the compliance rule and provide the build number of the Win10 20H2 version on the ‘For the following values‘ section and press ‘Ok‘ to finalize.

How to Create SCCM Configuration Items Configuration Baselines 1
Configuration Items compliance rule name

NOTE: You can add a custom PowerShell script to remediate if the CI is non-compliant and can generate the noncompliance report as well by selecting ‘Remediate noncompliant rules when supported‘ & ‘Report noncompliance if this setting instance is not found. In this scenario, I’m using a simple WQL query to detect the OS version.

As next step press ‘Apply‘ -> ‘Ok

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Press Next -> Next -> Close to complete.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Items – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

How to create Configuration Baselines

Now, in this section, we will learn how to create ConfigMgr Configuration Baseline.

Open Configuration Manager Console. Go to Asset and Compliance -> Compliance Settings -> Configuration Baselines -> click ‘Create Configuration Baseline

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Create Configuration Baseline- How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Provide configuration baselines ‘Name‘.

Then click on ‘Add‘ and select ‘Configuration Items‘.

How to Create SCCM Configuration Items Configuration Baselines 2
Configuration Baseline Name – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Select the configuration items you created and press ‘Add‘ -> ‘Ok‘.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Baselines – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Now configuration items will be added to the configuration baseline. Press ‘Ok‘ to finalize.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Baselines – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Baselines – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

How to deploy Configuration Baselines

Select the Configuration Baseline you created, Right-click -> Deploy

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
CB Deployment – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Click on ‘Browse‘ to select the collection for deployment. Also, you can customize the scheduled time as per requirement.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
CB to select collection – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

Click ‘Ok‘ to finalize.

How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr
Configuration Baselines – How to Create SCCM Configuration Items Configuration Baselines | ConfigMgr

You can see reporting of CB in another blog post.

Video

Video Tutorial – SCCM Configuration Item Baseline Explained by👏Deepak Rai ✔Configuration ✔Remediation ConfigMgr

Resources

Author

Debabrata Pati has more than 7+ years of experience in IT. Skilled in MEMCM, Azure, and Powershell. More than five (5) years of experience in MEMCM (SCCM) administration, OSD, and Troubleshooting for the environment with more than 100K client devices.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.