SCCM Log Files Updated List Client and Server

Let’s check the SCCM Log Files Updated List for Client and Server components. Get the latest or updated list of SCCM Logs. The Configuration Manager logs are essential to troubleshoot an issue and fix those.

Configuration Manager’s current branch and later versions of clients are installed with the built-in log reader tool CMTrace.exe. But there are newer or new SCCM Logs reading tools with the latest versions of SCCM.

Microsoft ConfigMgr Logs details are given in the last section of this post. Both the server and client-side SCCM logs file details are explained in this post. More details on Intune Logs Event IDs IME Logs Details For Windows Client Side Troubleshooting.

In this post, you will see the client-side and server-side SCCM logs. SCCM Logs are your best friend in Troubleshooting issues.

Patch My PC

SCCM logs are generated on the client and site server-side. The client and server components record process information in individual log files. The more detailed log files also can be produced by enabling debug or verbose mode.

SCCM Log Files Updated List Client and Server Fig. 1.1
SCCM Log Files Updated List Client and Server Fig. 1.1

SCCM Logs in Details

The SCCM log files are identified by .log or .lo_ file extensions. ConfigMgr writes to a .log file until that log reaches its maximum size.

Client-Server communication issues are very common in the SCCM world. Manier times, system admins resolve the issue after analyzing the SCCM Logs.

MEMCM’s processes are usually invisible to end-users. Software updates, Configuration Items, Applications, etc., are installed on your computer “in the background.”. The speed of the installation depends on the specifications of the computer.

Adaptiva

As an end-user, you don’t need to worry about SCCM Logs. The SCCM Logs are here to record the activities of each SCCM thread or component. App troubleshooting Deep Dive SCCM Application Model Troubleshooting – Client End and server-side blog are going to help you.

All SCCM Logs might get overwritten over time automatically. You have an option to increase the size of the SCCM logs if required from the components.

There are different types of logs available for SCCM. The different types of Clients, Site Servers (Primary, SQL, CAS, etc.), and site System Servers (DP, MP, SUP, etc.) SCCM Logs. The latest log files are updated in this post.

Once you enable Debug and Verbose logging for the client and Server SCCM logs, it provides additional information on error conditions. However, you need to be very careful when you enable these settings in production.

Future of SCCM Admins

HTMD Intune Training Course consists of 32 chapters of in-depth topics to help system admins achieve their next career goal. There are 11:57:40 hours of free Intune Training Course released by the How to Manage Devices (HTMD) community.

Future of SCCM Admins

SCCM Logs – Viewing Tools

When I started the SCCM (SMS) admin job, the SCCM logs reading tool was Trace32.exe. With SCCM 2012 and CB, the default SCCM logs reading tool CMTrace.exe became integrated with the products themselves. You don’t have to download it separately. More details Top SCCM Log File Viewer Options For Admins.

  • Trace32.exe (SMS/SCCM 2007)
  • CMTrace.exe (SCCM 2012 & CB)
  • CMLogViewer.exe (SCCM CB)

SCCM Logs Locations

The default client log file location is the %WINDIR%CCM/Logs folder. The SCCM server log files are located in the: Logs D:\Program Files\SMS_CCM\Logs and F:\Program Files\Microsoft Configuration Manager\Logs folder.

Some other log folders are specifically called out in each section like %Temp%, C:\Windows\ccmsetup\Logs, etc.

Tenant Attach SCCM Logs

You can find the SCCM tenant attached related log files from the following list. You can get a more detailed list of troubleshooting posts on tenant attach; troubleshooting is also available.

  • CMGatewayNotificationWorker.log
  • AdminService.log
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

SCCM Upgrade Log Files

You can check SCCM upgrade process log files from the primary site server. F:\Program Files\Microsoft Configuration Manager\Logs.

  • DMPDownloader.log for SCCM 2006 source file download issues.
  • ConfigMgrSetup.log for Redist Files Download Issue.
  • CMUpdate.log for all the upgrade-related activities.
  • If the update displays as Downloading and doesn’t change, review the hman.log and dmpdownloader.log for errors.
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

Implicit Uninstall SCCM Log

The new log file got introduced in the 2107 version of SCCM. This log is for getting track of implicit uninstall.

  • SMS_ImplicitUninstall.log – The location of the log file is at the Site Server. The component related to this log file is SMS_BUSINESS_APP_PROCESS_MANAGER_ImplicitUninstallWorker.

CMG Remote Control

You can check the Cloud Management Gateway remote control-related log files in the following location.

  • cmrcviewer.log under %temp% folder.

Let’s find out the application approval process-related logs if you have issues with the automatic approval process flow.

  • SMS_REST_PROVIDER.log
  • NotiCtrl.log

Out of Band Hotfix SCCM Logs

You can perform out-of-band hotfix installation-related troubleshooting from the following log file.

C:\Windows\Temp ==> CMRegisterUpdate.log

Secondary Server

Now it’s time to check the log files of the SCCM secondary site. Also, you can check the location of the log files, which will help troubleshoot issues with the secondary site installation.

  • Check the ConfigMgrPreReq.log on the primary server.
  • Once the prerequisite is completed successfully, Refer to the following logs on the new secondary server.smstvc.log for secondary server installation-related log on secondary server C:\.
    • SMS_BootStrap.log on secondary server C:\.
    • ConfigMgrSetupWizard.log is not useful for secondary server installation.
    • ConfigMgrSetup.log to validate the installation of the secondary server.
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

SCCM DP Logs

You can find the SCCM Distribution point-related SCCM logs in the following table. You can read more about the installation of the distribution points.

distmgr.logPackage Application distribution process
PkgXferMgr.logRecords the actions of the SMS_Executive component responsible for sending content from an SCCM primary site to a remote DP.
ConfigMgr DP Logs

Apart from DistMgr.log, you will need to refer to the following logs to get the DP installation and Configuration details. DP Installation and Configuration-related Log Files.

  • Hman.log – Primary Server – Example – New site system: MEM WIN11DJ.MEMCM.COM SMS Distribution Point
  • DistMgr.log – Primary or Secondary Server – All the details about the DP installation and Configuration.
  • SMSdpprov.log on remote DP (Windows 11 PC) – Location of the log Drive:\SMS_DP$\sms\logs.
  • SMSdpusage.log on remote DP – Monitor the usage of the DP. Location of the log Drive:\SMS_DP$\sms\logs.
  • SMSPXE.log on remote DP – Helps with PXE responder information.

SCCM MP Logs

You can now look at the SCCM management point-related SCCM logs to troubleshoot and install MP.

  1. MP log files at %ProgramFiles%\SMS_CCM\Logs\
  2. Or Here %windir%\ccm\logs.
mpcontrol.logRecords the availability of the management point every 10 minutes.
MP.MSI.logMore details log about MP installation
mpsetup.logInstallation of Management Point
ConfigMgr MP Logs

SCCM SUP Logs

You can find the Software Update Point-related SCCM logs in the following table. These log files help to troubleshoot and resolve issues about SUP.

SUPSetup.logInstallation Logs for SUP role
WCM.logRecords details about the SUP configuration
WSUSCtrl.logRecords details about the configuration, database connectivity, and health of the WSUS server for the site.
wsyncmgr.logRecords details about the software updates sync process.
ConfigMgr SUP Logs

SCCM Third-Party Patching Logs

The following list of SCCM logs helps you troubleshoot and resolve issues related to SCCM third party patching.

  • SMS_ISVUPDATES_SYNCAGENT.log
  • Wsyncmgr.log
  • WCM.log (C:\Program Files\Microsoft Configuration Manager\Logs)
  • PatchDownloader.log (%temp%)
SCCM logs SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server
AlternateHandler.logRecords details when the client calls the Office click-to-run COM interface to download and install Microsoft 365 Apps for enterprise client updates. It’s similar to the use of WuaHandler when it reaches the Windows Update Agent API to download and install Windows updates.Client
ccmperf.logRecords activities related to the maintenance and capture of data related to client performance counters.Client
DeltaDownload.logRecords information about the download of express updates and updates downloaded using Delivery Optimization.SCCM LogsClient
PatchDownloader.logRecords details about the process of downloading software updates from the update source to the download destination on the site server.When downloading updates manually, this log file is located in the %temp% directory of the user running the console on the machine you’re running the console. For Automatic Deployment Rules, this log file is located on the site server in %windir%\CCM\Logs, if the ConfigMgr client is installed on the site server.
PolicyEvaluator.logRecords details about the evaluation of policies on client computers, including policies from software updates.Client
RebootCoordinator.logRecords details about the coordination of system restart on client computers after software update installations.Client
ScanAgent.logRecords details about scan requests for software updates, the WSUS location, and related actions.SCCM LogsClient
SdmAgent.logRecords details about the tracking of remediation and compliance. However, the updates log file, Updateshandler.log, provides more informative details about installing the software updates required for submission. This log file is shared with compliance settings.Client
ServiceWindowManager.logRecords details about the evaluation of maintenance windows.Client
SMS_ISVUPDATES_SYNCAGENT.logLogfile for synchronization of third-party software updates.Top-level software update point in the Configuration Manager hierarchy.
SMS_OrchestrationGroup.logLogfile for orchestration groupsSite server
SmsWusHandler.logRecords details about the scan process for the Inventory Tool for Microsoft Updates.Client
StateMessage.logRecords details about software updates state messages created and sent to the management point.Client
SUPSetup.logRecords details about the software update point installation. Installation was successful when the software update point installation was completed and written to this log file.Site system server
UpdatesDeployment.logRecords details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface.Client
UpdatesHandler.logRecords details about software update compliance scanning and the download and installation of software updates on the client.Client
UpdatesStore.logRecords details about compliance status for the software updates assessed during the compliance scan cycle.Client
WCM.logRecords details about software update point configurations and connections to the WSUS server for subscribed update categories, classifications, and languages.Site server
WSUSCtrl.logRecords details about the configuration, database connectivity, and health of the WSUS server for the site.Site system server
wsyncmgr.logRecords details about the software update sync process.Site server
WUAHandler.logRecords details about the Windows Update Agent on the client when it searches for software updates.SCCM LogsClient
SCCM logs List of Logs in the Table

Wake on Lan SCCM logs

Log nameDescriptionComputer with log file
wolcmgr.logRecords details which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried.Site server
wolmgr.logRecords details about wake-up procedures, such as when to wake up deployments configured for Wake On LAN.Site server
All Credits to Microsoft Doc SCCM logs

Windows 10 or Windows 11 Servicing SCCM logs

You can have more details about Windows 10 (Windows 11) Deployment Upgrade Process Logs for SCCM Admins. The following SCCM logs will help you troubleshoot Windows 10 and Windows 11 servicing with SCCM.

Log nameDescriptionComputer with log file
CBS.logRecords servicing failures related to changes for Windows Updates or roles and features.Client
DISM.logRecords all actions using DISM. If necessary, DISM.log will point to CBS.log for more details.Client
setupact.logPrimary log file for most errors that occur during the Windows installation process. The log file is located in the %windir%$Windows.~BT\sources\panther folder.
All Credits to Microsoft

WUA Logs

The following tables come with Windows Update Agent-related SCCM logs.

Log nameDescriptionComputer with log file
WindowsUpdate.logRecords details when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components.Client
All Credits to Microsoft Doc

WSUS Logs

Well, if you want to find out the SCCM logs that are related to WSUS? The below table has two of those.

SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server
Log nameDescriptionComputer with log file
Change.logRecords details about WSUS server database information that has changed.WSUS server
SoftwareDistribution.logRecords details about the software updates synced from the configured update source to the WSUS server database.WSUS server

These log files are located in the %ProgramFiles%\Update Services\LogFiles folder.

ConfigMgr Metering Logs

Log nameDescriptionComputer with log file
mtrmgr.logMonitors all software metering processes.Site server
All Credits to Microsoft Doc

Server Side – SCCM Logs

SCCM Server-side logs to troubleshoot server-side issues.

Use the following logs located on the service connection point:

  • CMGatewaySyncUploadWorker.log
  • CMGatewayNotificationWorker.log

SCCM Logs FAQs

Let’s see the frequently asked questions related to the SCCM Clog files.

Where is the SCCM Server Logs Location?

DRIVE-Letter:\Program Files\Microsoft Configuration Manager\Logs

Where is the SCCM Client Logs Location?

Windows 10 Device – C:\Windows\CCM\Logs

What are the DP Logs?

distmgr.log & PkgXferMgr.log

What is the SCCM MP Logs?

mpcontrol.log, MP.MSI.log, and mpsetup.log

What are the SCCM SUP Logs?

SUPSetup.log, WCM.log, WSUSCtrl.log, and wsyncmgr.log

More SCCM Logs Details in one place

General SCCM log files are listed in the following table.

SCCM LogsDescription
adctrl.logRecords enrollment processing activity.
ADForestDisc.logRecords Active Directory Forest Discovery actions.
ADService.logRecords account creation and security group details in Active Directory.
adsgdis.logRecords Active Directory Group Discovery actions.
adsysdis.logRecords Active Directory System Discovery actions.
adusrdis.logRecords Active Directory User Discovery actions.
ccm.logRecords client push installation activities.
CertMgr.logRecords certificate activities for intrasite communication.
chmgr.logRecords activities of the client health manager. SCCM Logs help to identify health issues.
Cidm.logRecords changes to the client settings by the Client Install Data Manager (CIDM).
colleval.logRecords details when collections are created, changed, and deleted by the Collection Evaluator.
compmon.logRecords the status of component threads monitored for the site server.
compsumm.logRecords Component Status Summarizer tasks.
ComRegSetup.logRecords the initial installation of COM registration results for a site server.
dataldr.logRecords information about MIF files and hardware inventory processing in the SCCM database.
ddm.logRecords activities of the discovery data manager.
despool.logRecords incoming site-to-site communication transfers.
distmgr.logRecords details package creation, compression, delta replication, and information updates.
EPCtrlMgr.logRecords information about the syncing of malware threat information from the Endpoint Protection site system role server with the SCCM database.
EPMgr.logRecords the status of the Endpoint Protection site system role.
EPSetup.logProvides information about the installation of the Endpoint Protection site system role.
EnrollSrv.logRecords activities of the enrollment service process.
EnrollWeb.logRecords activities of the enrollment website process.
fspmgr.logRecords activities of the fallback status point site system role.
hman.logRecords information about site configuration changes and the publishing of site information in Active Directory Domain Services.
Inboxast.logRecords the files moved from the management point to the corresponding INBOXES folder on the site server.
inboxmgr.logRecords file transfer activities between inbox folders.
inboxmon.logRecords the processing of inbox files and performance counter updates.
invproc.logRecords the forwarding of MIF files from a secondary site to its parent site.
migmctrl.logRecords information for Migration actions that involve migration jobs, shared distribution points, and distribution point upgrades.
mpcontrol.logRecords the registration of the management point with Windows Internet Name Service (WINS). Records the availability of the management point every 10 minutes.
mpfdm.logRecords the management point component’s actions that move client files to the corresponding INBOXES folder on the site server.
mpMSI.logRecords details about the management point installation.
MPSetup.logRecords the management point installation wrapper process.
netdisc.logRecords Network Discovery actions.
NotiCtrl.logApplication request notifications.
ntsvrdis.logRecords the discovery activity of site system servers.
ObjreplmgrRecords the processing of object change notifications for replication.
offermgr.logRecord advertisement updates.
offersum.logRecords the summarization of deployment status messages.
OfflineServicingMgr.logRecords the activities of applying updates to operating system image files.
outboxmon.logRecords the processing of outbox files and performance counter updates.
PerfSetup.logRecords the results of the installation of performance counters.
PkgXferMgr.logRecords the actions of the SMS_Executive component that is responsible for sending content from a primary site to a remote distribution point.
policypv.logRecords are updated to the client policies to reflect client settings or deployment changes.
rcmctrl.logRecords the activities of database replication between sites in the hierarchy.
replmgr.logRecords the replication of files between the site server components and the Scheduler component.
ResourceExplorer.logRecords errors, warnings, and information about running Resource Explorer.
ruleengine.logRecords details automatic deployment rules for the identification, content download, and software update group and deployment creation.
schedule.logRecords details about the site-to-site job and file replication.
sender.logRecords the files that transfer by file-based replication between sites.
sinvproc.logRecords information about the processing of software inventory data to the site database.
sitecomp.logRecords details about the maintenance of the installed site components on all site system servers.
sitectrl.logRecords site setting changes made to site control objects in the database.
sitestat.logRecords the availability and disk space monitoring process of all site systems.
SMS_ISVUPDATES_SYNCAGENT.logLogfile for synchronization of third-party software updates starting in SCCM version 1806.
SMS_PhasedDeployment.logLogfile for phased deployments
SmsAdminUI.logRecords SCCM console activity. SCCM logs record activities related to the admin console?
SMSAWEBSVCSetup.logRecords the installation activities of the Application Catalog web service.
smsbkup.logRecords output from the site backup process.
smsdbmon.logRecords database changes.
SMSENROLLSRVSetup.logRecords the installation activities of the enrollment web service.
SMSENROLLWEBSetup.logRecords the installation activities of the enrollment website.
smsexec.logRecords the processing of all site server component threads.
SMSFSPSetup.logRecords messages generated by the installation of a fallback status point.
SMSPORTALWEBSetup.logRecords the installation activities of the Application Catalog website.
SMSProv.logRecords WMI provider access to the site database.
srsrpMSI.logRecords detailed results of the reporting point installation process from the MSI output.
srsrpsetup.logRecords results of the reporting point installation process.
statesys.logRecords the processing of state system messages.
statmgr.logRecords the writing of all status messages to the database.
swmproc.logRecords the processing of metering files and settings.
ConfigMgrPrereq.logRecords prerequisite component evaluation and installation activities.
ConfigMgrSetup.logRecords detailed output from the site server setup.
ConfigMgrSetupWizard.logRecords information related to activity in the Setup Wizard.
SMS_BOOTSTRAP.logRecords information about the progress of launching the secondary site installation process. Details of the actual setup process are contained in ConfigMgrSetup.log.
smstsvc.logRecords information about the installation, use, and removal of a Windows service used to test network connectivity and permissions between servers, using the server’s computer account that initiates the connection.
DWSSMSI.logRecords messages generated by the installation of a data warehouse service point.
DWSSSetup.logRecords messages generated by the installation of a data warehouse service point.
Microsoft.ConfigMgrDataWarehouse.logRecords information about data synchronization between the site and warehouse databases.
FspIsapiRecords details about communications to the fallback status point from mobile device legacy clients and client computers.
fspMSI.logRecords messages generated by the installation of a fallback status point.
fspmgr.logRecords activities of the fallback status point site system role.
CcmIsapi.logRecords client messaging activity on the endpoint.
MP_CliReg.logRecords the client registration activity processed by the management point.
MP_Ddr.logRecords the conversion of XML.ddr records from clients and then copies them to the site server.
MP_Framework.logRecords the activities of the core management point and client framework components.
MP_GetAuth.logRecords client authorization activity.
MP_GetPolicy.logRecords policy requests activity from client computers.
MP_Hinv.logRecords details about the conversion of XML hardware inventory records from clients and the copy of those files to the site server.
MP_Location.logRecords location requests and reply activity from clients.
MP_OOBMgr.logRecords the management point activities related to receiving an OTP from a client.
MP_Policy.logRecords policy communication.
MP_Relay.logRecords the transfer of files that are collected from the client.
MP_Retry.logRecords hardware inventory retry processes.
MP_Sinv.logRecords details about the conversion of XML software inventory records from clients and the copy of those files to the site server.
MP_SinvCollFile.logRecords details about file collection.
MP_Status.logRecords details about the conversion of XML.svf status message files from clients and the copy of those files to the site server.
mpcontrol.logRecords the registration of the management point with WINS. Records the availability of the management point every 10 minutes.
mpfdm.logRecords the management point component’s actions that move client files to the corresponding INBOXES folder on the site server.
mpMSI.logRecords details about the management point installation.
MPSetup.logRecords the management point installation wrapper process. SCCM logs help to check the MP setup details.
objreplmgr.logRecords details about the replication of software updates notification files from a parent site to child sites.
PatchDownloader.logRecords details about the process of downloading software updates from the update source to the download destination on the site server.
ruleengine.logRecords details automatic deployment rules for the identification, content download, and software update group and deployment creation.
SMS_ISVUPDATES_SYNCAGENT.logLogfile for synchronization of third-party software updates starting in SCCM version 1806.
SUPSetup.logRecords details about the software update point installation. Installation was successful when the software update point installation was completed and written to this log file.
WCM.logRecords details about the software update point configuration and connections to the WSUS server for subscribed update categories, classifications, and languages.
WSUSCtrl.logRecords details about the configuration, database connectivity, and health of the WSUS server for the site.
wsyncmgr.logRecords details about the software updates sync process.
WUSSyncXML.logRecords details about the Inventory Tool for the Microsoft Updates sync process.
AppIntentEval.logRecords details applications’ current and intended state, their applicability, whether requirements were met, deployment types, and dependencies.
AppDiscovery.logRecords details about the discovery or detection of applications on client computers.
AppEnforce.logRecords details about enforcement actions (install and uninstall) taken for applications on the client.
awebsctl.logRecords monitoring activities for the Application Catalog web service point site system role.
awebsvcMSI.logRecords detailed installation information for the Application Catalog web service point site system role.
Ccmsdkprovider.logRecords the activities of the application management SDK.
colleval.logRecords details when collections are created, changed, and deleted by the Collection Evaluator.
ConfigMgrSoftwareCatalog.logRecords the activity of the Application Catalog, which includes its use of Silverlight.
NotiCtrl.logApplication request notifications. SCCM logs help to get the details of the notification that client received.
portlctl.logRecords the monitoring activities for the Application Catalog website point site system role.
portlwebMSI.logRecords the MSI installation activity for the Application Catalog website role.
PrestageContent.logRecords details about the use of the ExtractContent.exe tool on a remote, prestaged distribution point. This tool extracts content that has been exported to a file.
ServicePortalWebService.logRecords the activity of the Application Catalog web service.
ServicePortalWebSite.logRecords the activity of the Application Catalog website.
SMSdpmon.logRecords details about the distribution point health monitoring scheduled task configured on a distribution point.
SoftwareCatalogUpdateEndpoint.logRecords activities for managing the URL for the Application Catalog shown in Software Center.
SoftwareCenterSystemTasks.logRecords activities related to Software Center prerequisite component validation.
colleval.logRecords details when collections are created, changed, and deleted by the Collection Evaluator.
execmgr.logRecords details about packages and task sequences that run. SCCM logs help to record SMS Agent Host service activities.
AssetAdvisor.logRecords the activities of Asset Intelligence inventory actions.
aikbmgr.logRecords details about the processing of XML files from the inbox for updating the Asset Intelligence catalog.
AIUpdateSvc.logRecords the interaction of the Asset Intelligence sync point with System Center Online (SCO), the online web service.
AIUSMSI.logRecords details about the installation of the Asset Intelligence sync point site system role.
AIUSSetup.logRecords details about the installation of the Asset Intelligence sync point site system role.
ManagedProvider.logRecords details about discovering software with an associated software identification tag. It also records activities related to hardware inventory.
MVLSImport.logRecords details about the processing of imported licensing files.
ConfigMgrSetup.logRecords information about setup and recovery tasks when SCCM recovers a site from backup.
Smsbkup.logRecords details about the site backup activity.
smssqlbkup.logRecords output from the site database backup process when SQL Server is installed on a server, not the site server.
Smswriter.logRecords information about the state of the SCCM VSS writer used by the backup process.
Crp.logRecords enrollment activities. SCCM logs related to enrollment activities are going to help us.
Crpctrl.logRecords the operational health of the certificate registration point.
Crpsetup.logRecords details about the installation and configuration of the certificate registration point.
Crpmsi.logRecords details about the installation and configuration of the certificate registration point.
NDESPlugin.logRecords challenge verification and certificate enrollment activities.
SCCM Log Files Updated List Client and Server

SCCM RBAC-related SCCM logs are available in the below table.

Log nameDescriptionComputer with log file
hman.logRecords information about site configuration changes and the publishing of site information to Active Directory Domain Services.Site server
SMSProv.logRecords WMI provider access to the site database.Computer with the SMS Provider
SCCM Logs

SCCM Configuration Manager Client Logs

Let’s analyze the ConfigMgr or SCCM client logs from the Windows 10 or Windows 11 device. It’s important to understand the log file structure from the client-side for the initial troubleshooting of the SCCM Tenant attach.

Location of the client logs files – C:\Windows\CCM\Logs

Toast Notification Logs

When you have trouble getting toast notification from the client-side, you can refer to the following location from Windows 10 ConfigMgr Client.

Log FileDescription
SCToastNotification__<domain>@<username>_1.log Toast Notification – Toast Notification Related Activities are stored here.
ConfigMgr Client Logs Details | SCCM
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

Endpoint Analytics Logs

You can refer to the following log files related to endpoint analytics from the Windows 10 client device.

Log FileDescription
SystemTempLockdown.logEndpoint Analytics – Records system temp lockdown configuration details
SensorWmiProvider.logEndpoint Analytics – Records the activity of the WMI provider for the endpoint analytics sensor.
SensorEndpoint.logEndpoint Analytics – Records the execution of endpoint analytics policy and uploads client data to the site server.
SensorManagedProvider.LogEndpoint Analytics – Records the gathering and processing of events and information for endpoint analytics.
SystemPerf.logEndpoint Analytics – System Performance details are recorded endpoint 
ConfigMgr Client Logs Details | SCCM
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server SCCM Log Files Updated List Client and Server

Software Center Logs

This guide section shall help you understand the log files related to Software Center associated tasks.

LogDescription
SoftwareCenterSystemTasks.logSoftware Center – Records activities related to Software Center prerequisite component validation
SCClient_<domain>@<username>_1.log SCClient_MEMCM@anoop_2.logSoftware Center – Records the activity in Software Center for the specified user on the client computer
SCClient_<domain>@<username>_1.log SCClient_MEMCM@anoop_6.logSoftware Center – Records the activity in Software Center for the specified user on the client computer
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

Office-related logs are documented in this section and the software update section below.

LogDescription
OfficeAnalytics.logOffice –  Office device inventory details
ConfigMgr Client Logs Details | SCCM
SCCM Log Files Updated List Client and Server

Software Update Logs

This guide section shall help you understand the log files related to Software Update related tasks.

LogDescription
AlternateHandler.logSoftware Updates – Microsoft 365 Apps for enterprise client updates
UpdatesStore.logSoftware Updates – Records details about compliance status for the software updates that were assessed during the compliance scan cycle
ScanAgent.logSoftware Updates – Records details about scan requests for software updates, the WSUS location, and related actions
UpdatesHandler.logSoftware Updates – Records details about software update compliance scanning and the download and installation
StateMessage.logSoftware Updates – Records details about software update state messages that are created and sent to the MP
WUAHandler.logSoftware Updates – Records details about the Windows Update Agent on the client when it searches for software updates
DeltaDownload.logSoftware Updates – Records information about the download of express updates & updates downloaded using DO
SCCM Log Files Updated List Client and Server

PowerShell ScriptSCCM Log Files Updated List Client and Server

This guide section shall help you understand the log files related to PowerShell script-related tasks.

LogDescription
Scripts.logPowerShell Scripts – Run Script Related Activities are recorded here
SCCM Log Files Updated List Client and Server
ConfigMgr Client Logs Details | SCCM
ConfigMgr Client Logs Details | SCCM

General SCCM Client Logs

This section covers all the general categories of the logs.

LogDescription
CertificateMaintenance.logGeneral – Maintains certificates for Active Directory Domain Services and MP.
LocationServices.logGeneral – MP/SUP/DP Details – Records the client activity for locating management points, software update points, and distribution points.
UpdateTrustedSites.logGeneral – Record Details of trusted sites – Add Default Portal To Trusted Sites.
Ccm32BitLauncher.logGeneral – Records actions for starting applications on the client, marked run as 32 bit.
CCMSDKProvider.logGeneral – Records activities for the client SDK interfaces
CcmSqlCE.logGeneral – Records activities for the SQL Server Compact Edition (CE) that the client uses
Scheduler.logGeneral – Records activities of scheduled tasks for all client operations
CcmExec.logGeneral – Records activities of the client and the SMS Agent Host service
CcmMessaging.logGeneral – Records activities related to communication between the client and MP
SmsClientMethodProvider.logGeneral – Records activity for sending client schedules
CcmRestart.logGeneral – Records client service restart activity
CcmEval.logGeneral – Records Configuration Manager client status evaluation activities
UpdatesDeployment.logGeneral – Records details about deployments on the client, including software update activation, evaluation, and enforcement
UserAffinity.logGeneral – Records details about user device affinity
CCMVDIProvider.logGeneral – Records information for clients in a virtual desktop infrastructure (VDI)
wedmtrace.logGeneral – Records operations related to writing filters on Windows Embedded clients
StatusAgent.logGeneral – Records status messages that are created by the client components
ClientLocation.logGeneral – Records tasks that are related to client site assignment
CcmNotificationAgent.logGeneral – Records the activities of the notification agent
MaintenanceCoordinator.logGeneral – Records the activity for general maintenance tasks for the client.
CcmEvalTask.logGeneral – Records the SCCM client status evaluation activities
Diagnostics.logGeneral – Records the status of client diagnostic actions
smscliui.logGeneral – Records use of the Configuration Manager client in the Control Panel
UserAffinityProvider.logGeneral – Technical details from the component that tracks user device affinity
CertEnrollAgent.logGeneral – Windows Hello for Business client Activities
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

Client Install/Repair Logs

This guide section shall help you understand the log files related to Client Install/Repair script-related tasks.

LogsDescription
ClientIDManagerStartup.logInstall – Creates and maintains the client GUID and identifies tasks during client registration and assignment
ClientServicing.logInstall – Records information for client deployment state messages during auto-upgrade and client piloting
CcmRepair.logInstall – Records the repair activities of the client agent
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

Application Logs

This section of the guide shall help you understand the log files related to Application related tasks.

LogDescription
AppGroupHandler.logApplication  – Records detection and enforcement information for application groups
DetailedAppInfo.logApplication – Collect application information for DetailedAppInfo WMI class
AppEnforce.logApplication – Enforcement actions
SettingsAgent.logApplication – Enforcement of specific applications, records orchestration of application group evaluation
SoftwareCatalogUpdateEndpoint.logApplication – Records activities for managing the URL for the Application Catalog shown in Software Center
SrcUpdateMgr.logApplication – Records activity for installed Windows Installer applications that are updated with current distribution point source locations
ExpressionSolver.logApplication – Records details about enhanced detection methods
execmgr.logApplication – Records details about packages and task sequences that run
AppIntentEval.logApplication – Records details about the current and intended state of applications
AppDiscovery.logApplication – Records details about discovering or detecting applications on client computers.
VirtualApp.logApp-v – Records information specific to the evaluation of Application Virtualization (App-V) deployment types
SCCM Log Files Updated List Client and Server

Check out the SCCM client content-related logs in this section of the post.

LogsDescription
PeerDPAgent.logContent – Peer Cache DP related information stored in this log
DataTransferService.logContent – Records all BITS communication for policy or package access
FileBITS.logContent – Records all SMB package access tasks
CAS.logContent – Records details when distribution points are found for referenced content
CMBITSManager.logContent – Records information for Background Intelligent Transfer Service (BITS) jobs on the device
ContentTransferManager.logContent – Schedules the BITS or SMB to download or access packages
PeerDPAgent – Content Related Logs
PeerDPAgent - Content Related Logs
PeerDPAgent – Content Related Logs

Check out the SCCM client Policy related logs in this post section.

LogDescription
setuppolicyevaluator.logPolicy – Records configuration and inventory policy creation in WMI
PolicyEvaluator.logPolicy – Records details about the evaluation of policies on client computers
PolicyAgentProvider.logPolicy – Records policy changes
PolicyAgent.logPolicy (Content) – Records requests for policies made by using the Data Transfer Service
SCCM Logs – Policy Related Troubleshooting
SCCM Log Files Updated List Client and Server
SCCM Log Files Updated List Client and Server

Check out the ConfigMgr client Power Management-related logs in this post section.

LogDescription
pwrmgmt.logPower Management – Records information about enabling or disabling and configuring the wake-up proxy client settings
PwrProvider.logPower Management – Records the activities of the power management provider (PWRInvProvider) hosted in the WMI service.

This section tells us about the reboot-related activities during the software updates.

LogDescriptions
RebootCoordinator.logReboot – Records details about the coordination of system restarts on client computers
SCCM Log Files Updated List Client and Server

Windows Analytics SCCM Client Log

Check out the ConfigMgr client Windows Analytics log in this post section.

LogsDescription
WindowsAnalytics.logWindows Analytics –  Records the details about Windows Analytics settings are enabled, or Commercial ID is empty.
SCCM Log Files Updated List Client and Server

Endpoint Protection Logs

When you have trouble getting Endpoint Protection from the client-side, you can refer to the following location from Windows 10 ConfigMgr Client.

LogsDescription
EndpointProtectionAgent.logEndpoint Protection – Records details about the installation of the Endpoint Protection client and the application
ExternalEventAgent.logEndpoint Protection – Records the history of Endpoint Protection malware detection and events related to client status.
SCCM Log Files Updated List Client and Server

Desktop Analytics

Check out the ConfigMgr client Desktop Analytics log in this post section.

LogDescription
M365AHandler.logDesktop Analytics – Information about the Desktop Analytics settings policy
SCCM Log Files Updated List Client and Server

Check out the ConfigMgr client Compliance and Baseline-related log in this post section.

LogsDescription
DCMAgent.logCompliance –  Information about the evaluation, conflict reporting, and remediation
CIStateStore.logCompliance – Records changes in state for configuration items
CIDownloader.logCompliance – Records details about configuration item definition downloads
CIAgent.logCompliance – Records details about the process of remediation and compliance
CIStore.logCompliance – Records information about configuration items
DcmWmiProvider.logCompliance – Records information about reading configuration item sync lets from WMI
DCMReporting.logCompliance – Records information about reporting policy platform results into state messages for CI
CITaskMgr.logCompliance – Records tasks for each application and deployment type
SCCM Log Files Updated List Client and Server

Check out the ConfigMgr client Co-Management related to logging in to this post section.

LogDescription
CcmCloud.logCo-Management – CCM_Cloud Client Config
DdrProvider.logCo-Management – MDM enrolment details. SCCM manages records Workloads
ComplRelayAgent.logCo-Management – Records information for the co-management workload for compliance policies
CoManagementHandler.logCo-Management – Use to troubleshoot co-management on the client
SCCM Log Files Updated List Client and Server

Asset Intelligence

More details about Asset Intelligence logs are in this section of the post. This might help to troubleshoot further the issues related to AI.

LogDescription
AssetAdvisor.logAI – Records the activities of Asset Intelligence inventory actions
SCCM Log Files Updated List Client and Server

Resources

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

7 thoughts on “SCCM Log Files Updated List Client and Server”

  1. Hi Anoop, I need a clarification where I am unable to access the C$ of the client machines in most of the machines across the environment(Gets access Denied error). Any suggestions are much appreciated.

    Thank you in Advance!

    Reply

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.