Let’s learn who Modified ConfigMgr Modified ConfigMgr Client Settings. You can find who created, modified, deleted the configuration manager client settings from this post.
TL;DR
Who Created ConfigMgr Client Settings
Use SQL Management studio to understand who Created ConfigMgr Client Settings.
/*Who created client settings */
select * from vStatusMessagesWithStrings where MessageID = 40300
Who Modified ConfigMgr Client Settings
/* Who created client settings*/
select * from vStatusMessagesWithStrings where MessageID = 40301
Who Deleted ConfigMgr Client Settings
/* 'Who deleted the deployment of application'*/
select * from vStatusMessagesWithStrings where MessageID = 40302
Who Created Client Settings Assignment
/* Who created client settings assignment */
select * from vStatusMessagesWithStrings where MessageID = 40303
Who Deleted Client Settings Assignment
/* Who Deleted client settings assignment */
select * from vStatusMessagesWithStrings where MessageID = 40305
Why do we need to use sql queries when it can easily identified using audit messages
Yes of course … use those queries if that is easy for you. It’s already mentioned in the different post