tjchan001 / updatereporting

MECM update reporting solution

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Original blog and documentation:

The original blog and documentation can be found HERE

Other blogs

All my other blogs can be found HERE and HERE

MEM/MECM/ConfigMgr patch compliance report solution

Update dashboard Simplified report dependencies

Changes

(The version number can be found in the lower left corner of the dashboard. No version number means v1.0)

2022-05-06 v3.8:

  1. Fixed a sub-report link problem for WSUS error and install error list

2022-04-04 v3.7:

  1. Added parameter to show data based on current or previous month. The previous month setting is only applicable if updates are deployed with a month delay and does not rely on historical data
  2. Changed the way compliance for update rollups are shown between first day of month and second Tuesday based on: jonasatgit#11
  3. Changed the "exclude future deployments" parameter to be able to filter out deployments in one of the following states: Deployed as available, deployment disabled, start time or deadline in the future
  4. Changed the column "Missing updated approved" to only show missing updates if the corresponding deployment has not been filtered out via the new exclude parameter. The "per device" report still shows all updates no matter the deployment selection
  5. Added the new deployment exclude parameter also to the "Per device deployments" report. The report will now exclude deployments based on the parameter.
  6. Added cumulative update prefix like "2022-04" to the dashboard for each rollup bar graph
  7. Added systems domain name column to each list report
  8. Added switch "TryOverwrite" to import script. If set, the script will try to overwrite existing report items. Might not work in every case. If successful subscriptions will also be kept.
  9. Added new filter to the "Per device" report called: "All missing Security and Critical updates deployed or not"
  10. Removed Security Update requirement in QFE query to improve QFE detection accuracy
  11. Fixed typo in "Per device" report based on: jonasatgit#9
  12. Fixes typo in import script
  13. Fixed sorting issue in "per device" report
  14. Fixed sorting issue in "per device deployments" report
  15. Fixed "uncompliant" typo in "compliance list" report via: jonasatgit#15
  16. Fixed typo in "compare update compliance" via: jonasatgit#14
  17. Fixed an issue with parameters not correctly handled between the dashboard and most of the sub-reports

2021-11-18 v3.6:

  1. Added "Cumulative Update for Microsoft server operating system" string for server 2022 updates

2021-07-02 v3.5:

  1. Changed the overall compliance state from "all approved and missing updates" + "a security update installation happend within one month" to "All deployments are compliant" + "either the last or the current cumulative update is installed" + "a security update installation happend within one month"
  2. Added help text to all report column headers
  3. Added Update install errors bar graph to dashboard (below WSUS scan errors)
  4. Changed filter for top 10 systems on dashboard to be more accurate
  5. Added top 10 update install errors to dashboard
  6. Added new report with details about install errors and WSUS scan errors
    1. Contains around 400 common windows update related errors with possible actions on how to fix them
  7. Added new parameter to exclude deployments containing Microsoft Defender and System Center Endpoint Protection updates
    1. Was previously part of the SQL query and not easily changeable nor visible to the report user
  8. Removed Server 2008 specific parts
  9. Added new filter to "per device" report called: "Missing updates with errors" and “All missing updates deployed or not”
  10. Added more details about errors to "per device" report
  11. Added update collection and maintenance window list to “per device” report
  12. Added column: “Earliest Deadline” to “per device” report
  13. Changed first sub-report name from “all uncompliant” to “compliance list”
  14. Changed default sort order from "count of missing updates" to "month since last update install"
  15. Changed "WSUS version" to "OS build version". Easier to determine actual OS version and patch level
  16. Changed "Defender Pattern Version" to "Defender Pattern Age" to be able to spot systems with older pattern more easily
  17. Added column "WSUS scan error" to system list
  18. Added column count of "Updates with install error" to system list
  19. Added column number of "Deployments non compliant" to system list
    1. Helps to determine any problems with deployments when all updates are installed, but deployments are still marked as uncompliant
  20. Added new report to list all update deployments and their states per device
  21. Made "Per device" and “compliance list" report visible to be able to schedule subscriptions without the dashboard
  22. Fixed several minor issues with each report
  23. Changed SQL query for deployed updates to work better in larger environments
  24. Changed import script to also handle SSRS folder path with spaces in it
  25. Changed import script to delete existing contents of "work" folder from a previous run
  26. Changed import script parameter name "Upload" to "DoNotUpload". Function is the same.
  27. Removed import script parameter "UseViewForDataset". (To much work to keep the view consistent with regular query)
  28. Added new import script parameters: "ForceLegacyCardinalitySQL2016SP1AndHigher" and "ForceLegacyCardinalityOlderThanSQL2016SP1" Read more about it here

2020-12-09 v2.1:

  1. Fixed language and QFE problem
  2. Added new parameter -ForceLegacyFormat,
  3. Fixed minor issues and linked all reports to the per device sub-report

2020-11-03 v1.0:

  1. Fixed wrong parameter name, updated repository with several fixes

About

MECM update reporting solution


Languages

Language:TSQL 59.2%Language:PowerShell 40.8%