Let’s learn who modified App Deployment from ConfigMgr. You can find out who created, modified, deleted the configuration manager Applications.
Who Created Deployment of Application
Use SQL Management studio to understand who Created Deployment of Application.
/* Who created a deployment of application*/
select * from vStatusMessagesWithStrings where MessageID = 30226
Who Modified App Deployment
Use SQL Management studio to understand who Modified Deployment of Application.
/* Who modified the deployment of application*/ select * from vStatusMessagesWithStrings where MessageID = 30227
Who Deleted Deployment of Application
Use SQL Management studio to understand who Deleted Deployment of Application.
/* 'Who deleted the deployment of application'*/
select * from vStatusMessagesWithStrings where MessageID = 30228
Resources
- Six status message queries are listed under the Administrative Security category.
- YouTube video ConfigMgr Audit Report here.
- Track Who Deleted Modified Changed SCCM Settings
- ConfigMgr six status message queries