FIX SCCM Client Issues Using Automation Client Health

Computers running the SCCM client are the clients of SCCM server infra. When the SCCM clients are unhealthy or report problems accessing SCCM server infra, your SCCM infra is not providing much value.

This post will share the process of fixing SCCM client issues affecting client assignment, deployment, status, and management.

[Related Topic – Newbies SCCM Education and Training Posts]

What is the SCCM Client Health?

The first step is to understand what client health is! SCCM Client Health refers to the state of the core client components. When the SCCM core client components and dependant Windows components are not active and functioning, the SCCM client is NOT healthy.

The core components will vary depending on the features (or agents) enabled for your SCCM infra.

The Client is Health = Windows, and SCCM Core Client Components are ACTIVE & FUNCTIONING.

SCCM Client Health Issues Assessment? 

The SCCM client health assessment is intended to analyze SCCM client functionality. This assessment helps you to identify unhealthy clients.

This process also helps understand the cause of the client’s health issues in your environment.

The SCCM client health issues assessment is a continuous process. The following high-level aspects can be reviewed for assessing your client’s health. Following is the best place to identify the unhealthy client in your SCCM environment.

• SCCM Admin Console Navigate to Monitoring –> Client Status. Following are the options you can try to assess the SCCM client’s Health issues.
• \Monitoring\Overview\Client Status\Client Activity
• \Monitoring\Overview\Client Status\Client Check
• \Monitoring\Overview\Client Status\Production Client Deployment
• \Monitoring\Overview\Client Status\Pre-production Client Deployment
• \Monitoring\Overview\Client Status\Client Health Dashboard
• Administration workspace and click on Management Insights – All Insights – Non-CB Client Versions: Lists all clients whose versions aren’t a current branch (CB) build.

Client Health Assessment = Identify Unhealthy SCCM Clients 

[Related Topic – Newbies SCCM Education and Training Posts]

Identify SCCM Client Issues

You have identified the unhealthy clients, and now it’s time to identify issues. I would recommend segregating or grouping unhealthy clients based on topics. This method will help you to fix the problems systematically.

I have listed down the most common issues I found in different environments. I recommend creating collections for the following issue and adding devices to the respective groups depending on the subject. These collections would help to track the client issues in a better way.

It’s not easy to identify & segregate the clients as per the issues. But I would recommend using client status node and SCCM SQL reports to segregate the unhealthy SCCM clients. I’m sure SCCM reports will help you to find out and help to fix SCCM client health issues.

1. SCCM Client Version does not match the site version – Management Insights
2. Multiple/Older SCCM Client Versions found in the hierarchy – Management Insights
3. Clients reporting no or outdated Hardware Inventory – SSRS Reports/WQL Query
4. Clients reporting no or outdated Software Inventory (Still Using??) – SSRS Reports/WQL Query
5. Clients reporting no or outdated Heartbeat Discovery – SSRS Reports/WQL Query
6. Clients reporting no or outdated software update scan status – SSRS Reports/WQL Query
7. Obsolete Clients – Clients reporting more than one record (Hardware ID) – SSRS Reports/WQL Query
8. Non-Clients – Clients Discovered but not Installed – Admin Console/WQL Query
9. Duplicate GUIDs – Client GUIDs that are not unique – SSRS Reports/WQL Query
10. MAC address(es) shared by many devices – SSRS Reports/WQL Query
11. The older version of Windows Update Agent is found on clients – SSRS Reports/WQL Query
12. Clients found with duplicate names (non-obsolete) – SSRS Reports/WQL Query
13. Server Service is not Running – CMPivot?
14. WMI Issues – Scripts 
15. Communication issues between client and server segment – Scripts
16. Client issues because of Antivirus software – Scripts

Other Causes – Fix SCCM Client Issues

SCCM site server policies, Firewall ports, Security Policies, and Antivirus Software can be a reason for unhealthy or not reporting SCCM clients.

Using aggressive client policies, hardware, or software inventory schedules within your infra is not recommended. These components could cause issues with your client’s health.

I have highlighted some of the policy configuration and maintenance tasks related issues. I think this list can be used as a checklist to understand whether these are causing problems with client health in your SCCM environment.

1. Client policy polling intervals more frequently.
2. Hardware Inventory is scheduled more frequently.
3. Client policy polling intervals more frequently.
4. Hardware Inventory is scheduled more frequently.
5. Client Policy for Content Cache
6. SCCM Maintenance Cleanup Tasks are running to delete unwanted objects?
7. Active Directory Discovery is configured properly?
8. Active Directory Cleanup is happening or not?

[Related Topic – Newbies SCCM Education and Training Posts]

CCMEval Tool – Built-in Tool to Fix SCCM Client Issues

The client health evaluation tool – ccmeval.exe – gets installed on all SCCM clients. The SCCM Client, Health evaluation engine, is an executable file named ccmeval.exe.

This client health evaluation tool is installed with the SCCM client and runs on computers. The install process creates a scheduled task named “Configuration Manager Health Evaluation.”

The client health evaluation tool – ccmeval.exe – helps maintain the client health of SCCM clients. FIX SCCM Client Issues.

In my experience, this tool will be able to resolve 20-30% of client issues without any manual intervention. Following thirty(29) tasks are included in SCCM 1802 health evaluation(ccmeval.exe) tool:-

1. Verify WMI service exists
2. Verify/Remediate WMI service startup type
3. Verify/Remediate WMI service status
4. WMI Repository Read/Write Test
5. Verify/Remediate client WMI provider
6. WMI Repository Integrity Test
7. Verify BITS exists
8. Verify/Remediate BITS startup type
9. Verify/Remediate client prerequisites
10. Verify/Remediate client installation
11. Verify SMS Agent Host service exists
12. Verify/Remediate SMS Agent Host service startup type
13. Verify/Remediate SMS Agent Host service status
14. WMI Event Sink Test
15. Microsoft Policy Platform WMI Integrity Test
16. Verify/Remediate Microsoft Policy Platform Service Existence
17. Verify/Remediate Microsoft Policy Platform service startup type
18. Verify/Remediate Antimalware service startup type
19. Verify/Remediate Antimalware service status
20. Verify/Remediate Antimalware service startup type for Windows 10 or up
21. Verify/Remediate Antimalware service status for Windows 10 or up
22. Verify/Remediate Network Inspection service startup type
23. Verify/Remediate Network Inspection service startup type for Windows 10 or up
24. Verify/Remediate Windows Update service startup type
25. Verify/Remediate Configuration Manager Remote Control service startup type
26. Verify/Remediate Configuration Manager Remote Control service startup type
27. Verify/Remediate Configuration Manager Proxy service startup type
28. Verify/Remediate Configuration Manager Proxy service status
29. Verify/Remediate SQL CE database is healthy 

FIX SCCM Client Issues?

This phase is the hardest part of the client health issues assessment. This is the time to identify fixes or resolutions for identified issues. There is no easy way to determine the solution to each problem.

I have listed down 16 common issues in the above part of this post. This segregation helps to identify and systematically fix the client’s problems.

Microsoft has documentation (refer to the Resources section) to troubleshoot many SCCM client issues. Select one or two machines from each category of topics & troubleshoot and identify the fix.

[Related Topic – Newbies SCCM Education and Training Posts]

I would recommend using collections to deploy the fixes. You need to create a different set of collections for each fix. This method will help you to target and fix devices in that collection. These collections will help you from reporting perspective as well.

There are community tools like ConfigMgr Client Health to automatically fix the SCCM client health issues. However, it’s essential to understand what you are selecting before deploying community tools.

Best Practices to keep FIX SCCM Client Issues

• Make sure all the Windows updates/fixes are installed
• Make sure all the SCCM clients are running with the latest version
• Analyze the Security and Antivirus policies
• Migrate to Windows 10 – Much stable WMI and Windows core components
• Use Automation and Community Tools to monitor and fix the client’s health issues continuously
• DO NOT run automation scripts without understanding the issue
• DO NOT reinstall the client without understanding and troubleshooting the issue
• DO NOT rebuild the WMI repository without any troubleshooting

Resources

How to check Client Status in SCCM