Let’s learn who Modified ConfigMgr Modified ConfigMgr Client Settings. You can find who created, modified, deleted the configuration manager client settings from this post.
Who Created ConfigMgr Client Settings
Use SQL Management studio to understand who Created ConfigMgr Client Settings.
/*Who created client settings */
select * from vStatusMessagesWithStrings where MessageID = 40300


Who Modified ConfigMgr Client Settings
/* Who created client settings*/
select * from vStatusMessagesWithStrings where MessageID = 40301

Who Deleted ConfigMgr Client Settings
/* 'Who deleted the deployment of application'*/
select * from vStatusMessagesWithStrings where MessageID = 40302

Who Created Client Settings Assignment
/* Who created client settings assignment */
select * from vStatusMessagesWithStrings where MessageID = 40303

Who Deleted Client Settings Assignment
/* Who Deleted client settings assignment */
select * from vStatusMessagesWithStrings where MessageID = 40305

Why do we need to use sql queries when it can easily identified using audit messages
Yes of course … use those queries if that is easy for you. It’s already mentioned in the different post