How to Use SCCM ConfigMgr 2012 Tool Policy Spy exe

6

Policy Spy is System Center 2012 Configuration Manager Client Troubleshooting Tool. Policy Spy can be used for the troubleshooting of the policy system of SCCM / ConfigMgr Client.Have you ever played with PolicySpy.exe? If not, start using it !!!!

In this post, I ‘m trying to explore Policy Spy tool in some more details. How it can be used more effectively. The documentation provided with this toolkit is excellent (ToolkitHelp), however, I’ve seen lot of us never look into those documentations.

This is continuation of the my post about Client Spy.

Policy Spy is part of ConfigMgr 2012 Toolkit and can be downloaded from the This LINK

Before going into deep dive, I would like to remind you Policy Spy MUST be run as administrator.

image

Open Remote : If you want to run Policy Spy on a remote computer.

All the following features will be disabled when you’re viewing exported policy file.

Request Machine Assignments : If you want to trigger machine policy then select this option. Default machine policy polling interval is 60 minutes. This is useful when of troubleshooting and you want a machine to ask policy from management point immediately. Monitor PolicyAgent.log to get more details about the policy request and reply from Management Point.

Evaluate Machine Policy : If you want to trigger the MACHINE policy evaluation on a target computer the you can use this option. Once you have triggered the policy evaluation, you can go ahead look at the log file called PolicyEvaluator.log for further troubleshooting. It will help you to understand whether the policy is getting evaluated successfully or not.

Request User Assignments : If you want to trigger User policy for currently logged-on user then select this option. Default user policy polling interval is 60 minutes. This is useful at the time of troubleshooting. Monitor PolicyAgent.log to get more details about the policy request and reply from Management Point.

Evaluate User Policy : If you want to trigger the USER policy evaluation on a target computer the you can use this option. Once you have triggered the policy evaluation, you can go ahead look at the log file called PolicyEvaluator.log for further troubleshooting. It will help you to understand whether the policy is getting evaluated successfully or not.

Reset Policy : This option will remove all non-default policies and resets the policy cookies for the site. It then triggers a request for machine policy assignments.

Export Policy : If you want to export the policy details to do further troubleshooting or analysis then use this option. Exports the target computer system’s policy to an XML-format export file. This file can be viewed on any computer by selecting Open File on the Tools menu and opening the export file.

We are going to cover following topics in details.

Actual tab

Requested tab

Default tab

Events tab

Client Info Pane

Details Pane

Actual Tab

Have a look at the screenshots below? This tab will provide you the details of client agents policies details configured on the site level. Machine Policy Interval, Software Inventory, Hardware Inventory etc. Results are displayed in tree format with a root node for the Machine namespace and each user-specific namespace.

image

Expand the machine namespace will show you the classes (CCM_ClientActions) and you can expand the classes to see {00000000-0000-0000-0000-000000000001}- Class for hardware Inventory, {00000000-0000-0000-0000-000000000002} – Class for Software Inventory and
{00000000-0000-0000-0000-000000000003} – Class for Discovery Inventory.

image

Requested tab

This tab displays the policy assignments that were retrieved from the client’s assigned site. Results are displayed in tree format with a root node for the Machine namespace and each user-specific namespace. All following details in this section are taken from the ToolkitHelp document.

Results are displayed in tree format with a root node for the Machine namespace and each user-specific namespace. Expanding a namespace node displays the Configuration and Settings nodes.

image

a. Configuration node – displays a list of configuration classes derived from CCM_Policy_Config, which includes policy object, assignments, and others.

b. Settings node – Expanding the Settings node displays all active settings generated by policies. Settings are displayed under the Configuration node.

Note

Multiple instances can exist with the same names because these settings have not been merged into a final resultant set. Policy Spy displays instances under this node by using the RealKey properties instead of their true policy keys so they can be easily correlated to the resultant set displayed on the Actual tab.

Default tab

Default tab displays the same information that the Requested tab does as well as the contents of the DefaultMachine and DefaultUser namespaces.

image

Events Tabs

Events tab displays policy agent events as they happen. The view creates a WMI event subscription for all events derived from CCM_PolicyAgent_Event.

The view shows a maximum of 200 events and removes the oldest events from the top of the list, as required. If the last item in the list is selected, the list automatically scrolls down as new events are added. Otherwise, the view maintains its current position and you must scroll down or press the End key to view new events. This view is always empty when viewing an exported policy.

image

Client Info Pane

Client Info pane provides us the details about the client name, GUID, Client Version, Assigned Site Code and assigned MP also Resident MP. Form this pane, we can understand that the client is communicating with proper MP or it’s under global roaming etc.

image

Details Pane

The details pane displays the policy body of the current selection the MOF that displays.

If the body has not been downloaded by the client, Policy Spy displays a hyperlink so you can download the policy body directly from the client’s management point. Clicking the link causes Policy Spy to send an HTTP query to the management point.

If the policy body download succeeds, the hyperlink is replaced with the contents of the reply. Otherwise, the display is updated indicating that the request failed.

image

6 COMMENTS

LEAVE A REPLY

Please enter your comment!
Please enter your name here