SCCM Log Files Updated List Client and Server

Let’s check the SCCM Log Files Updated List for Client and Server components. Get the latest or updated list of SCCM Logs. The Configuration Manager logs are essential to troubleshoot and fix an issue.

Configuration Manager can record process information in log files for client and site server components. These log files help troubleshoot any issues that may arise. Configuration Manager automatically enables logging for client and server components.

Configuration Manager’s current branch and later versions of clients are installed with the built-in log reader tool CMTrace.exe. However, there are newer or newer SCCM Log reading tools with the latest versions of SCCM.

The last section of this post provides details about Microsoft ConfigMgr Logs and explains the details of both the server-side and client-side SCCM log files.

Patch My PC
Index
SCCM Log Files Updated List Client and Server
SCCM Logs in Details
Future of SCCM Admins
SCCM Logs – Viewing Tools
SCCM Logs Locations
Tenant Attach SCCM Logs
SCCM Upgrade Log Files
Implicit Uninstall SCCM Log
CMG Remote Control
SCCM Application Approval Process Related Logs
Out of Band Hotfix SCCM Logs
Secondary Server
SCCM DP Logs
SCCM MP Logs
SCCM SUP Logs
SCCM Third-Party Patching Logs
Software Update Logs – Patching Related Issues
Wake on Lan SCCM Logs
Windows 10 or Windows 11 Servicing SCCM Logs
WUA Logs
WSUS Logs
ConfigMgr Metering Logs
Server Side – SCCM Logs
SCCM Logs FAQs
More SCCM Logs Details in One Place
RBAC Related Issues – SCCM Logs
SCCM Configuration Manager Client Logs
Toast Notification Logs
Endpoint Analytics Logs
Software Center Logs
Office 365 Related Logs
Software Update Logs
PowerShell Script – SCCM Log Files Updated List Client and Server
General SCCM Client Logs
Client Install/Repair Logs
Application Logs
Content Related Logs
Policy Related Logs
Power Management-Related Logs
Reboot Related Logs – SCCM Log Files Updated List Client and Server
Windows Analytics SCCM Client Log
Endpoint Protection Logs
Desktop Analytics
Compliance Related Logs
Co-Management Related Logs
Asset Intelligence
SCCM Log Files Updated List Client and Server – Table 1

SCCM Log Files Updated List Client and Server

SCCM logs are generated on the client and site server sides. The client and server components record process information in individual log files. Enabling debugging or using verbose also produces more detailed log files.

More details on Intune Logs Event IDs IME Logs Details For Windows Client Side Troubleshooting.

Adaptiva

This post includes the client-side and server-side SCCM logs. SCCM Logs are your best friend when troubleshooting issues.

SCCM Log Files Updated List Client and Server -Fig.1
SCCM Log Files Updated List Client and Server -Fig.1

SCCM Logs in Details

The SCCM log files are identified by .log or .lo_ file extensions. ConfigMgr writes to a .log file until that log reaches its maximum size. Client-server communication issues are very common in the SCCM world. Usually, system admins resolve the issue after analyzing the SCCM Logs.

MEMCM’s processes are usually invisible to end-users. Software updates, Configuration Items, Applications, etc., are installed on your computer “in the background.” The speed of the installation depends on the computer’s specifications.

As an end-user, you don’t need to worry about SCCM Logs. The SCCM Logs record the activities of each SCCM thread or component. The app troubleshooting Deep Dive SCCM Application Model Troubleshooting—Client End and server-side blog will help you.

All SCCM Logs might be overwritten automatically over time. If the components require it, you have an option to increase the size of the SCCM logs.

There are different types of logs available for SCCM. The various types of Clients, Site Servers (Primary, SQL, CAS, etc.), and site System Servers (DP, MP, SUP, etc.) SCCM Logs. The latest log files are updated in this post.

Once you enable Debug and Verbose logging for the client and Server SCCM logs, it provides additional information on error conditions. However, you need to be very careful when you enable these settings in production.

Future of SCCM Admins

The HTMD Intune Training Course consists of 32 chapters on in-depth topics that help system admins achieve their next career goal. There are 11:57:40 hours of free Intune Training Course released by the How to Manage Devices (HTMD) community.

SCCM Log Files Updated List Client and Server Video-1

SCCM Logs – Viewing Tools

When I started the SCCM (SMS) admin job, the SCCM logs reading tool was Trace32.exe. With SCCM 2012 and CB, the default SCCM logs reading tool CMTrace.exe integrated with the products. You don’t have to download it separately. More details Top SCCM Log File Viewer Options for Admins.

  • Trace32.exe (SMS/SCCM 2007)
  • CMTrace.exe (SCCM 2012 & CB)
  • CMLogViewer.exe (SCCM CB)

SCCM Logs Locations

The default client log file location is the %WINDIR%CCM/Logs folder. The SCCM server log files are in the Logs D:\Program Files\SMS_CCM\Logs and F:\Program Files\Microsoft Configuration Manager\Logs folder.

Some other log folders are specifically called out in each section, like %Temp%, C:\Windows\ccmsetup\Logs, etc.

Tenant Attach SCCM Logs

The SCCM tenant attached related log files from the following list. You can get a more detailed list of troubleshooting posts on the tenant attachment; troubleshooting is also available.

  • CMGatewayNotificationWorker.log
  • AdminService.log
SCCM Log Files Updated List Client and Server -Fig.2
SCCM Log Files Updated List Client and Server -Fig.2

SCCM Upgrade Log Files

You can check the SCCM upgrade process log files from the primary site server. F:\Program Files\Microsoft Configuration Manager\Logs.

  • DMPDownloader.log for SCCM 2006 source file download issues.
  • ConfigMgrSetup.log for Redist Files Download Issue.
  • CMUpdate.log for all the upgrade-related activities.
  • If the update displays as Downloading and doesn’t change, review the hman.log and dmpdownloader.log for errors
SCCM Log Files Updated List Client and Server -Fig.3
SCCM Log Files Updated List Client and Server -Fig.3

Implicit Uninstall SCCM Log

The 2107 version of SCCM introduced a new log file. This log is for tracking implicit uninstalls.

  • SMS_ImplicitUninstall.log—This log file is located on the Site Server. The component related to it is SMS_BUSINESS_APP_PROCESS_MANAGER_ImplicitUninstallWorker.

CMG Remote Control

You can check the Cloud Management Gateway remote control-related log files in the following location.

  • cmrcviewer.log under %temp% folder.

Let’s find out the application approval process-related logs if you have issues with the automatic approval process flow.

  • SMS_REST_PROVIDER.log
  • NotiCtrl.log

Out of Band Hotfix SCCM Logs

You can perform out-of-band hotfix installation-related troubleshooting from the following log file.

C:\Windows\Temp ==> CMRegisterUpdate.log

Secondary Server

Now, it’s time to check the log files of the SCCM secondary site. Also, you can check the location of the log files, which will help troubleshoot issues with the secondary site installation.

  • Check the ConfigMgrPreReq.log on the primary server.
  • Once the prerequisite is completed successfully, Refer to the following logs on the new secondary server.smstvc.log for secondary server installation-related log on secondary server C:\.
    • SMS_BootStrap.log on secondary server C:\.
    • ConfigMgrSetupWizard.log is not helpful for secondary server installation.
    • ConfigMgrSetup.log will be used to validate the installation of the secondary server.
SCCM Log Files Updated List Client and Server -Fig.4
SCCM Log Files Updated List Client and Server -Fig.4

SCCM DP Logs

The SCCM Distribution point-related SCCM logs are in the following table. You can read more about the installation of the distribution points.

DP LogsDistribution Points
distmgr.logPackage Application distribution process
PkgXferMgr.logRecords the actions of the SMS_Executive component responsible for sending content from an SCCM primary site to a remote DP.
SCCM Log Files Updated List Client and Server -Table 2

Apart from DistMgr.log, you will need to refer to the following logs to get the DP installation and Configuration details. DP Installation and Configuration-related Log Files.

  • Hman.log – Primary Server – Example – New site system: MEM WIN11DJ.MEMCM.COM SMS Distribution Point
  • DistMgr.log – Primary or Secondary Server – All the details about the DP installation and Configuration.
  • SMSdpprov.log on remote DP (Windows 11 PC) – Location of the log Drive:\SMS_DP$\sms\logs.
  • SMSdpusage.log on remote DP – Monitor the usage of the DP—location of the log Drive:\SMS_DP$\sms\logs.
  • SMSPXE.log on remote DP – Helps with PXE responder information.

SCCM MP Logs

You can now look at the SCCM management point-related SCCM logs to troubleshoot and install MP.

  1. MP log files at %ProgramFiles%\SMS_CCM\Logs\
  2. Or Here %windir%\ccm\logs.
MP LogsDistribution Points
mpcontrol.logRecords the availability of the management point every 10 minutes.
MP.MSI.logMore details log about MP installation
mpsetup.logInstallation of Management Point
SCCM Log Files Updated List Client and Server -Table 3

SCCM SUP Logs

The Software Update Point-related SCCM logs are in the following table. These log files help troubleshoot and resolve SUP issues.

SUP LogsDistribution Points
SUPSetup.logInstallation Logs for SUP role
WCM.logRecords details about the SUP configuration
WSUSCtrl.logRecords details about the configuration, database connectivity, and health of the WSUS server for the site.
wsyncmgr.logRecords details about the software updates sync process.
SCCM Log Files Updated List Client and Server -Table 4

SCCM Third-Party Patching Logs

The following list of SCCM logs helps you troubleshoot and resolve issues related to SCCM third-party patching.

  • SMS_ISVUPDATES_SYNCAGENT.log
  • Wsyncmgr.log
  • WCM.log (C:\Program Files\Microsoft Configuration Manager\Logs)
  • PatchDownloader.log (%temp%)
SCCM Log Files Updated List Client and Server -Fig.5
SCCM Log Files Updated List Client and Server -Fig.5

Let’s discuss the software update logs and patching-related issues. The table below helps you show different software update logs, log details and log file locations.

Software Update LogsDetailsClient/Server
AlternateHandler.logThis record records details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface.Client
ccmperf.logRecords activities related to the maintenance and capture of data related to client performance counters.Client
DeltaDownload.logRecords information about the download of express updates and updates downloaded using Delivery Optimization.SCCM LogsClient
PatchDownloader.logRecords details about the process of downloading software updates from the update source to the download destination on the site server.When downloading updates manually, this log file is located in the %temp% directory of the user running the console on the machine you’re running the console. For Automatic Deployment Rules, this log file is located on the site server in %windir%\CCM\Logs, if the ConfigMgr client is installed on the site server.
PolicyEvaluator.logRecords details about the evaluation of policies on client computers, including policies from software updates.Client
RebootCoordinator.logRecords details about the coordination of system restart on client computers after software update installations.Client
ScanAgent.logRecords details about scan requests for software updates, the WSUS location, and related actions.SCCM LogsClient
SdmAgent.logRecords details about software update compliance scanning and downloading and installing software updates on the client.Client
ServiceWindowManager.logRecords details about the evaluation of maintenance windows.Client
SMS_ISVUPDATES_SYNCAGENT.logLogfile for synchronization of third-party software updates.Top-level software update point in the Configuration Manager hierarchy.
SMS_OrchestrationGroup.logLogfile for orchestration groupsSite server
SmsWusHandler.logRecords details about the scan process for the Inventory Tool for Microsoft Updates.Client
StateMessage.logRecords details about software updates state messages created and sent to the management point.Client
SUPSetup.logRecords details about the software update point installation. Installation was successful when the software update point installation was completed and written to this log file.Site system server
UpdatesDeployment.logRecords details about software update compliance scanning and downloading and installing software updates on the client.Client
UpdatesHandler.logRecords details about software update compliance scanning and the download and installation of software updates on the client.Client
UpdatesStore.logRecords details about compliance status for the software updates assessed during the compliance scan cycle.Client
WCM.logRecords details about software update point configurations and connections to the WSUS server for subscribed update categories, classifications, and languages.Site server
WSUSCtrl.logThis record details the process of downloading software updates from the update source to the download destination on the site server.Site system server
wsyncmgr.logRecords details about the software update sync process.Site server
WUAHandler.logRecords details about the Windows Update Agent on the client when it searches for software updates.SCCM LogsClient
SCCM Log Files Updated List Client and Server -Table 5

Wake on Lan SCCM Logs

The table below helps you to see the Wake on Lan SCCM Logs with 2 different names, such as wolcmgr.log and wolmgr.log.

Log nameDescriptionComputer with log file
wolcmgr.logRecords details which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried.Site server
wolmgr.logRecords details about wake-up procedures, such as when to wake up deployments configured for Wake On LAN.Site server
SCCM Log Files Updated List Client and Server -Table 6

Windows 10 or Windows 11 Servicing SCCM Logs

More details about Windows 10 (Windows 11) Deployment Upgrade Process Logs for SCCM Admins are available. The following SCCM logs will help you troubleshoot Windows 10 and 11 servicing with SCCM.

Log nameDescriptionComputer with log file
CBS.logRecords servicing failures related to changes for Windows Updates or roles and features.Client
DISM.logRecords all actions using DISM. If necessary, DISM.log will point to CBS.log for more details.Client
setupact.logPrimary log file for most errors that occur during the Windows installation process. The log file is located in the %windir%$Windows.~BT\sources\panther folder.
SCCM Log Files Updated List Client and Server -Table 7

WUA Logs

The following tables come with Windows Update Agent-related SCCM logs.

Log nameDescriptionComputer with log file
WindowsUpdate.logRecords details when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components.Client
SCCM Log Files Updated List Client and Server -Table 8

WSUS Logs

Well, if you want to find out the SCCM logs that are related to WSUS? The below table has two of those.

SCCM Log Files Updated List Client and Server -Fig.6
SCCM Log Files Updated List Client and Server -Fig.6
Log nameDescriptionComputer with log file
Change.logRecords details about WSUS server database information that has changed.WSUS server
SoftwareDistribution.logRecords details about the software updates synced from the configured update source to the WSUS server database.WSUS server
SCCM Log Files Updated List Client and Server -Table 9

These log files are located in the %ProgramFiles%\Update Services\LogFiles Folder.

ConfigMgr Metering Logs

Log nameDescriptionComputer with log file
mtrmgr.logMonitors all software metering processes.Site server
SCCM Log Files Updated List Client and Server -Table 10

Server Side – SCCM Logs

SCCM Server-side logs to troubleshoot server-side issues.

Use the following logs located on the service connection point:

  • CMGatewaySyncUploadWorker.log
  • CMGatewayNotificationWorker.log

SCCM Logs FAQs

Let’s see the frequently asked questions related to the SCCM Log files.

Where is the SCCM Server Logs Location?

DRIVE-Letter:\Program Files\Microsoft Configuration Manager\Logs

Where is the SCCM Client Logs Location?

Windows 10 Device – C:\Windows\CCM\Logs

What are the DP Logs?

distmgr.log & PkgXferMgr.log

What are the SCCM MP Logs?

mpcontrol.log, MP.MSI.log, and mpsetup.log

What are the SCCM SUP Logs?

SUPSetup.log, WCM.log, WSUSCtrl.log, and wsyncmgr.log

More SCCM Logs Details in One Place

General SCCM log files are listed in the following table.

SCCM LogsDescription
adctrl.logRecords enrollment processing activity.
ADForestDisc.logRecords Active Directory Forest Discovery actions.
ADService.logRecords account creation and security group details in Active Directory.
adsgdis.logRecords Active Directory Group Discovery actions.
adsysdis.logRecords Active Directory System Discovery actions.
adusrdis.logRecords Active Directory User Discovery actions.
ccm.logRecords client push installation activities.
CertMgr.logRecords certificate activities for intrasite communication.
chmgr.logRecords activities of the client health manager. SCCM Logs help to identify health issues.
Cidm.logRecords detail package creation, compression, delta replication, and information updates.
colleval.logRecords details when collections are created, changed, and deleted by the Collection Evaluator.
compmon.logRecords the status of component threads monitored for the site server.
compsumm.logRecords Component Status Summarizer tasks.
ComRegSetup.logRecords the initial installation of COM registration results for a site server.
dataldr.logRecords information about MIF files and hardware inventory processing in the SCCM database.
ddm.logRecords activities of the discovery data manager.
despool.logRecords incoming site-to-site communication transfers.
distmgr.logRecords information for Migration actions involving migration jobs, shared distribution points, and upgrades.
EPCtrlMgr.logRecords information about site configuration changes and publishing site information in Active Directory Domain Services.
EPMgr.logRecords the status of the Endpoint Protection site system role.
EPSetup.logProvides information about the installation of the Endpoint Protection site system role.
EnrollSrv.logRecords activities of the enrollment service process.
EnrollWeb.logRecords activities of the enrollment website process.
fspmgr.logRecords activities of the fallback status point site system role.
hman.logRecords the files that are transferred by file-based replication between sites.
Inboxast.logRecords the files moved from the management point to the corresponding INBOXES folder on the site server.
inboxmgr.logRecords file transfer activities between inbox folders.
inboxmon.logRecords the processing of inbox files and performance counter updates.
invproc.logRecords the forwarding of MIF files from a secondary site to its parent site.
migmctrl.logThis record records the actions of the SMS_Executive component, which is responsible for sending content from a primary site to a remote distribution point.
mpcontrol.logRecords the registration of the management point with Windows Internet Name Service (WINS). Records the availability of the management point every 10 minutes.
mpfdm.logRecords the management point component’s actions that move client files to the corresponding INBOXES folder on the site server.
mpMSI.logRecords details about the management point installation.
MPSetup.logRecords the management point installation wrapper process.
netdisc.logRecords Network Discovery actions.
NotiCtrl.logApplication request notifications.
ntsvrdis.logRecords the discovery activity of site system servers.
ObjreplmgrRecords the processing of object change notifications for replication.
offermgr.logRecord advertisement updates.
offersum.logRecords the summarization of deployment status messages.
OfflineServicingMgr.logRecords the activities of applying updates to operating system image files.
outboxmon.logRecords the processing of outbox files and performance counter updates.
PerfSetup.logRecords the results of the installation of performance counters.
PkgXferMgr.logRecords SCCM console activity. SCCM logs to record activities related to the admin console.
policypv.logRecords are updated to the client policies to reflect client settings or deployment changes.
rcmctrl.logRecords the activities of database replication between sites in the hierarchy.
replmgr.logRecords the replication of files between the site server components and the Scheduler component.
ResourceExplorer.logRecords errors, warnings, and information about running Resource Explorer.
ruleengine.logRecords details automatic deployment rules for the identification, content download, and software update group and deployment creation.
schedule.logRecords details about the site-to-site job and file replication.
sender.logRecords information about installing, using, and removing a Windows service used to test network connectivity and permissions between servers, using the server’s computer account that initiates the connection.
sinvproc.logRecords information about the processing of software inventory data to the site database.
sitecomp.logRecords details about the maintenance of the installed site components on all site system servers.
sitectrl.logRecords site setting changes made to site control objects in the database.
sitestat.logRecords the availability and disk space monitoring process of all site systems.
SMS_ISVUPDATES_SYNCAGENT.logLogfile for synchronization of third-party software updates starting in SCCM version 1806.
SMS_PhasedDeployment.logLogfile for phased deployments
SmsAdminUI.logThis record records information about the progress of launching the secondary site installation process. Details of the actual setup process are contained in ConfigMgrSetup.log.
SMSAWEBSVCSetup.logRecords the installation activities of the Application Catalog web service.
smsbkup.logRecords output from the site backup process.
smsdbmon.logRecords database changes.
SMSENROLLSRVSetup.logRecords the installation activities of the enrollment web service.
SMSENROLLWEBSetup.logRecords the installation activities of the enrollment website.
smsexec.logRecords the processing of all site server component threads.
SMSFSPSetup.logRecords messages generated by the installation of a fallback status point.
SMSPORTALWEBSetup.logRecords the installation activities of the Application Catalog website.
SMSProv.logRecords WMI provider access to the site database.
srsrpMSI.logRecords detailed results of the reporting point installation process from the MSI output.
srsrpsetup.logRecords results of the reporting point installation process.
statesys.logRecords the processing of state system messages.
statmgr.logRecords the writing of all status messages to the database.
swmproc.logRecords the processing of metering files and settings.
ConfigMgrPrereq.logRecords prerequisite component evaluation and installation activities.
ConfigMgrSetup.logRecords detailed output from the site server setup.
ConfigMgrSetupWizard.logRecords information related to activity in the Setup Wizard.
SMS_BOOTSTRAP.logRecords information about installing, using, and removing a Windows service used to test network connectivity and permissions between servers using the server’s computer account that initiates the connection.
smstsvc.logRecords details about the configuration, database connectivity, and health of the site’s WSUS server.
DWSSMSI.logRecords messages generated by the installation of a data warehouse service point.
DWSSSetup.logRecords messages generated by the installation of a data warehouse service point.
Microsoft.ConfigMgrDataWarehouse.logRecords information about data synchronization between the site and warehouse databases.
FspIsapiRecords details about communications to the fallback status point from mobile device legacy clients and client computers.
fspMSI.logRecords messages generated by the installation of a fallback status point.
fspmgr.logRecords activities of the fallback status point site system role.
CcmIsapi.logRecords client messaging activity on the endpoint.
MP_CliReg.logRecords the client registration activity processed by the management point.
MP_Ddr.logRecords the conversion of XML.ddr records from clients and then copies them to the site server.
MP_Framework.logRecords the activities of the core management point and client framework components.
MP_GetAuth.logRecords client authorization activity.
MP_GetPolicy.logRecords policy requests activity from client computers.
MP_Hinv.logRecords details about converting XML hardware inventory records from clients and copying those files to the site server.
MP_Location.logRecords location requests and reply activity from clients.
MP_OOBMgr.logRecords the management point activities related to receiving an OTP from a client.
MP_Policy.logRecords policy communication.
MP_Relay.logRecords the transfer of files that are collected from the client.
MP_Retry.logRecords hardware inventory retry processes.
MP_Sinv.logThis record details the conversion of XML software inventory records from clients and the copying of those files to the site server.
MP_SinvCollFile.logRecords details about file collection.
MP_Status.logRecords details about the replication of software update notification files from a parent site to child sites.
mpcontrol.logRecords the registration of the management point with WINS. Records the availability of the management point every 10 minutes.
mpfdm.logRecords the management point component’s actions that move client files to the corresponding INBOXES folder on the site server.
mpMSI.logRecords details about the management point installation.
MPSetup.logRecords the management point installation wrapper process. SCCM logs help to check the MP setup details.
objreplmgr.logRecords detail automatic deployment rules for the identification, content download, and software update group and deployment creation.
PatchDownloader.logRecords details about the process of downloading software updates from the update source to the download destination on the site server.
ruleengine.logRecords details automatic deployment rules for the identification, content download, and software update group and deployment creation.
SMS_ISVUPDATES_SYNCAGENT.logLogfile for synchronization of third-party software updates starting in SCCM version 1806.
SUPSetup.logRecords details about the software update point installation. Installation was successful when the software update point installation was completed and written to this log file.
WCM.logThis record records details about the software update point configuration and connections to the WSUS server for subscribed update categories, classifications, and languages.
WSUSCtrl.logThis record records details about using the ExtractContent.exe tool on a remote, prestaged distribution point. This tool extracts content that has been exported to a file.
wsyncmgr.logRecords details about the software updates sync process.
WUSSyncXML.logRecords details about the Inventory Tool for the Microsoft Updates sync process.
AppIntentEval.logRecords the Application Catalogue’s activity, including its use of Silverlight.
AppDiscovery.logRecords details about the discovery or detection of applications on client computers.
AppEnforce.logRecords details about enforcement actions (install and uninstall) taken for applications on the client.
awebsctl.logRecords monitoring activities for the Application Catalog web service point site system role.
awebsvcMSI.logRecords detailed installation information for the Application Catalog web service point site system role.
Ccmsdkprovider.logRecords the activities of the application management SDK.
colleval.logRecords details when collections are created, changed, and deleted by the Collection Evaluator.
ConfigMgrSoftwareCatalog.logRecords information about installing, using, and removing a Windows service used to test network connectivity and permissions between servers using the server’s computer account that initiates the connection.
NotiCtrl.logApplication request notifications. SCCM logs help get the details of the client’s notification.
portlctl.logRecords the monitoring activities for the Application Catalog website point site system role.
portlwebMSI.logRecords the MSI installation activity for the Application Catalog website role.
PrestageContent.logRecords activities for managing the URL for the Application Catalog shown in the Software Center.
ServicePortalWebService.logRecords the activity of the Application Catalog web service.
ServicePortalWebSite.logRecords the activity of the Application Catalog website.
SMSdpmon.logRecords details about the distribution point health monitoring scheduled task configured on a distribution point.
SoftwareCatalogUpdateEndpoint.logRecords details about the processing of XML files from the inbox for updating the Asset Intelligence catalogue.
SoftwareCenterSystemTasks.logRecords activities related to Software Center prerequisite component validation.
colleval.logRecords details when collections are created, changed, and deleted by the Collection Evaluator.
execmgr.logRecords details about packages and task sequences that run. SCCM logs help to record SMS Agent Host service activities.
AssetAdvisor.logRecords the activities of Asset Intelligence inventory actions.
aikbmgr.logRecords details about the processing of XML files from the inbox for updating the Asset Intelligence catalog.
AIUpdateSvc.logRecords details about installing the Asset Intelligence sync point site system role.
AIUSMSI.logRecords details about installing the Asset Intelligence sync point site system role.
AIUSSetup.logRecords details about the installation of the Asset Intelligence sync point site system role.
ManagedProvider.logIt records details about discovering software with an associated software identification tag and activities related to hardware inventory.
MVLSImport.logRecords details about the processing of imported licensing files.
ConfigMgrSetup.logRecords information about setup and recovery tasks when SCCM recovers a site from backup.
Smsbkup.logRecords details about the site backup activity.
smssqlbkup.logRecords output from the site database backup process when SQL Server is installed on a server, not the site server.
Smswriter.logRecords information about the state of the SCCM VSS writer used by the backup process.
Crp.logRecords enrollment activities. SCCM logs related to enrollment activities are going to help us.
Crpctrl.logRecords the operational health of the certificate registration point.
Crpsetup.logRecords details about the installation and configuration of the certificate registration point.
Crpmsi.logRecords details about the installation and configuration of the certificate registration point.
NDESPlugin.logRecords challenge verification and certificate enrollment activities.
SCCM Log Files Updated List Client and Server -Table 11

SCCM RBAC-related SCCM logs are available in the below table.

Log nameDescriptionComputer with log file
hman.logRecords information about site configuration changes and the publishing of site information to Active Directory Domain Services.Site server
SMSProv.logRecords WMI provider access to the site database.Computer with the SMS Provider
SCCM Log Files Updated List Client and Server -Table 12

SCCM Configuration Manager Client Logs

Let’s analyze the ConfigMgr or SCCM client logs from the Windows 10 or Windows 11 device. Understanding the log file structure from the client side is important for the initial troubleshooting of the SCCM Tenant attachment.

Location of the client logs files – C:\Windows\CCM\Logs

Toast Notification Logs

When you have trouble getting toast notifications from the client side, refer to the following location from the Windows 10 ConfigMgr Client.

Log FileDescription
SCToastNotification__<domain>@<username>_1.log Toast Notification – Toast Notification Related Activities are stored here.
SCCM Log Files Updated List Client and Server -Table 13
SCCM Log Files Updated List Client and Server -Fig.8
SCCM Log Files Updated List Client and Server -Fig.8

Endpoint Analytics Logs

You can refer to the following log files related to endpoint analytics from the Windows 10 client device.

Log FileDescription
SystemTempLockdown.logEndpoint Analytics – Records system temp lockdown configuration details
SensorWmiProvider.logEndpoint Analytics – Records the activity of the WMI provider for the endpoint analytics sensor.
SensorEndpoint.logEndpoint Analytics – Records the execution of endpoint analytics policy and uploads client data to the site server.
SensorManagedProvider.LogEndpoint Analytics – Records the gathering and processing of events and information for endpoint analytics.
SystemPerf.logEndpoint Analytics – System Performance details are recorded endpoint 
SCCM Log Files Updated List Client and Server -Table 14
SCCM Log Files Updated List Client and Server -Fig.9
SCCM Log Files Updated List Client and Server -Fig.9

Software Center Logs

This guide section shall help you understand the log files related to Software Center-associated tasks.

LogDescription
SoftwareCenterSystemTasks.logSoftware Center – Records activities related to Software Center prerequisite component validation
SCClient_<domain>@<username>_1.log SCClient_MEMCM@anoop_2.logSoftware Center – Records the activity in the Software Center for the specified user on the client computer
SCClient_<domain>@<username>_1.log SCClient_MEMCM@anoop_6.logSoftware Center – Records the activity in Software Center for the specified user on the client computer
SCCM Log Files Updated List Client and Server -Table 15
SCCM Log Files Updated List Client and Server -Fig.10
SCCM Log Files Updated List Client and Server -Fig.10

Office-related logs are documented in this section and the software update section below.

LogDescription
OfficeAnalytics.logOffice –  Office device inventory details
SCCM Log Files Updated List Client and Server -Table 16
SCCM Log Files Updated List Client and Server -Fig.11
SCCM Log Files Updated List Client and Server -Fig.11

Software Update Logs

This guide section shall help you understand the log files related to Software Update-related tasks.

LogDescription
AlternateHandler.logSoftware Updates – Microsoft 365 Apps for enterprise client updates
UpdatesStore.logSoftware Updates – Records details about compliance status for the software updates that were assessed during the compliance scan cycle
ScanAgent.logSoftware Updates – Records details about scan requests for software updates, the WSUS location, and related actions
UpdatesHandler.logSoftware Updates – Records details about software update compliance scanning and the download and installation
StateMessage.logSoftware Updates – Records details about software update state messages that are created and sent to the MP
WUAHandler.logSoftware Updates – Records details about the Windows Update Agent on the client when it searches for software updates
DeltaDownload.logSoftware Updates – Records information about the download of express updates & updates downloaded using DO
SCCM Log Files Updated List Client and Server -Table 17

PowerShell ScriptSCCM Log Files Updated List Client and Server

This guide section shall help you understand the log files related to PowerShell script-related tasks.

LogDescription
Scripts.logPowerShell Scripts – Run Script Related Activities are recorded here
SCCM Log Files Updated List Client and Server -Table 18
SCCM Log Files Updated List Client and Server -Fig.12
SCCM Log Files Updated List Client and Server -Fig.12

General SCCM Client Logs

This section covers all the general categories of the logs.

LogDescription
CertificateMaintenance.logGeneral – Maintains certificates for Active Directory Domain Services and MP.
LocationServices.logGeneral – Records actions for starting applications on the client, marked run as 32-bit.
UpdateTrustedSites.logGeneral – Record Details of trusted sites – Add Default Portal To Trusted Sites.
Ccm32BitLauncher.logGeneral – Records actions for starting applications on the client, marked run as 32 bit.
CCMSDKProvider.logGeneral – Records activities for the client SDK interfaces
CcmSqlCE.logGeneral – Records activities for the SQL Server Compact Edition (CE) that the client uses
Scheduler.logGeneral – Records activities of scheduled tasks for all client operations
CcmExec.logGeneral – Records activities of the client and the SMS Agent Host service
CcmMessaging.logGeneral – Records activities related to communication between the client and MP
SmsClientMethodProvider.logGeneral – Records activity for sending client schedules
CcmRestart.logGeneral – Records client service restart activity
CcmEval.logGeneral – Records Configuration Manager client status evaluation activities
UpdatesDeployment.logGeneral – Records details about deployments on the client, including software update activation, evaluation, and enforcement
UserAffinity.logGeneral – Records details about user device affinity
CCMVDIProvider.logGeneral – Records information for clients in a virtual desktop infrastructure (VDI)
wedmtrace.logGeneral – Records operations related to writing filters on Windows Embedded clients
StatusAgent.logGeneral – Records status messages that are created by the client components
ClientLocation.logGeneral – Records tasks that are related to client site assignment
CcmNotificationAgent.logGeneral – Records the activities of the notification agent
MaintenanceCoordinator.logGeneral – Records the activity for general maintenance tasks for the client.
CcmEvalTask.logGeneral – Records the SCCM client status evaluation activities
Diagnostics.logGeneral – Records the status of client diagnostic actions
smscliui.logGeneral – Records use of the Configuration Manager client in the Control Panel
UserAffinityProvider.logGeneral – Technical details from the component that tracks user device affinity
CertEnrollAgent.logGeneral – Windows Hello for Business client Activities
SCCM Log Files Updated List Client and Server -Table 19
SCCM Log Files Updated List Client and Server -Fig.13
SCCM Log Files Updated List Client and Server -Fig.13

Client Install/Repair Logs

This guide section shall help you understand the log files related to Client Install/Repair script-related tasks.

LogsDescription
ClientIDManagerStartup.logInstall – Creates and maintains the client GUID and identifies tasks during client registration and assignment
ClientServicing.logInstall – Records information for client deployment state messages during auto-upgrade and client piloting
CcmRepair.logInstall – Records the repair activities of the client agent
SCCM Log Files Updated List Client and Server -Table 20
SCCM Log Files Updated List Client and Server -Fig.14
SCCM Log Files Updated List Client and Server -Fig.14

Application Logs

This section of the guide shall help you understand the log files related to Application-related tasks.

LogDescription
AppGroupHandler.logApplication  – Records detection and enforcement information for application groups
DetailedAppInfo.logApplication – Collect application information for DetailedAppInfo WMI class
AppEnforce.logApplication – Enforcement actions
SettingsAgent.logApplication – Enforcement of specific applications, records orchestration of application group evaluation
SoftwareCatalogUpdateEndpoint.logApplication – Records activities for managing the URL for the Application Catalog shown in Software Center
SrcUpdateMgr.logApplication – Records activity for installed Windows Installer applications that are updated with current distribution point source locations
ExpressionSolver.logApplication – Records details about enhanced detection methods
execmgr.logApplication – Records details about packages and task sequences that run
AppIntentEval.logApplication – Records details about the current and intended state of applications
AppDiscovery.logApplication – Records details about discovering or detecting applications on client computers.
VirtualApp.logApp-v – Records information specific to the evaluation of Application Virtualization (App-V) deployment types
SCCM Log Files Updated List Client and Server -Table 21

Check out the SCCM client content-related logs in this section of the post.

LogsDescription
PeerDPAgent.logContent – Peer Cache DP related information stored in this log
DataTransferService.logContent – Records all BITS communication for policy or package access
FileBITS.logContent – Records all SMB package access tasks
CAS.logContent – Records details when distribution points are found for referenced content
CMBITSManager.logContent – Records information for Background Intelligent Transfer Service (BITS) jobs on the device
ContentTransferManager.logContent – Schedules the BITS or SMB to download or access packages
SCCM Log Files Updated List Client and Server -Table 22
SCCM Log Files Updated List Client and Server -Fig.15
SCCM Log Files Updated List Client and Server -Fig.15

Check out the SCCM client-related logs in this post section.

LogDescription
setuppolicyevaluator.logPolicy – Records configuration and inventory policy creation in WMI
PolicyEvaluator.logPolicy – Records details about the evaluation of policies on client computers
PolicyAgentProvider.logPolicy – Records policy changes
PolicyAgent.logPolicy (Content) – Records requests for policies made by using the Data Transfer Service
SCCM Log Files Updated List Client and Server -Table 23
SCCM Log Files Updated List Client and Server -Fig.16
SCCM Log Files Updated List Client and Server -Fig.16

Check out the ConfigMgr client Power Management-related logs in this post section.

LogDescription
pwrmgmt.logPower Management – Records information about enabling or disabling and configuring the wake-up proxy client settings
PwrProvider.logPower Management – Records the power management provider’s (PWRInvProvider) activities hosted in the WMI service.
SCCM Log Files Updated List Client and Server -Table 24

This section tells us about the reboot-related activities during the software updates.

LogDescriptions
RebootCoordinator.logReboot – Records details about the coordination of system restarts on client computers
SCCM Log Files Updated List Client and Server -Table 25

Windows Analytics SCCM Client Log

Check out the ConfigMgr client Windows Analytics log in this post section.

LogsDescription
WindowsAnalytics.logWindows Analytics –  Records the details about Windows Analytics settings are enabled, or Commercial ID is empty.
SCCM Log Files Updated List Client and Server -Table 26

Endpoint Protection Logs

When you have trouble getting Endpoint Protection from the client side, you can refer to the following location from Windows 10 ConfigMgr Client.

LogsDescription
EndpointProtectionAgent.logEndpoint Protection – Records details about the installation of the Endpoint Protection client and the application
ExternalEventAgent.logEndpoint Protection – Records the history of Endpoint Protection malware detection and events related to client status.
SCCM Log Files Updated List Client and Server -Table 27

Desktop Analytics

Check out the ConfigMgr client Desktop Analytics log in this post section.

LogDescription
M365AHandler.logDesktop Analytics – Information about the Desktop Analytics settings policy
SCCM Log Files Updated List Client and Server -Table 28

Check out the ConfigMgr client Compliance and Baseline-related log in this post section.

LogsDescription
DCMAgent.logCompliance –  Information about the evaluation, conflict reporting, and remediation
CIStateStore.logCompliance – Records changes in state for configuration items
CIDownloader.logCompliance – Records details about configuration item definition downloads
CIAgent.logCompliance – Records details about the process of remediation and compliance
CIStore.logCompliance – Records information about configuration items
DcmWmiProvider.logCompliance – Records information about reading configuration item sync lets from WMI
DCMReporting.logCompliance – Records information about reporting policy platform results into state messages for CI
CITaskMgr.logCompliance – Records tasks for each application and deployment type
SCCM Log Files Updated List Client and Server -Table 29

Check out the ConfigMgr client Co-Management related to logging in to this post section.

LogDescription
CcmCloud.logCo-Management – CCM_Cloud Client Config
DdrProvider.logCo-Management – MDM enrolment details. SCCM manages records Workloads
ComplRelayAgent.logCo-Management – Records information for the co-management workload for compliance policies
CoManagementHandler.logCo-Management – Use to troubleshoot co-management on the client
SCCM Log Files Updated List Client and Server -Table 30

Asset Intelligence

This section of the post provides more details about Asset Intelligence logs, which might help troubleshoot AI issues further.

LogDescription
AssetAdvisor.logAI – Records the activities of Asset Intelligence inventory actions
SCCM Log Files Updated List Client and Server -Table 31

Resources

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His primary focus is Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

9 thoughts on “SCCM Log Files Updated List Client and Server”

  1. Hi Anoop, I need a clarification where I am unable to access the C$ of the client machines in most of the machines across the environment(Gets access Denied error). Any suggestions are much appreciated.

    Thank you in Advance!

    Reply
  2. Thank you so much for keeping the list of SCCM log files updated! I was struggling to find the correct log file for a recurring issue and this post saved me a lot of time. The clear explanations and detailed descriptions of each log file were super helpful. Looking forward to more updates!

    Reply

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.