SCCM SQL Query for the Finter Print/IR/TPM version

Boopathi S 3,806 Reputation points
2022-05-13T16:14:27.787+00:00

Hello

Please help to get below information from SCCM using SQ Query
Computes list with Finger print enabled / IR Enabled/web cam device
Computers list with TPM Version

Microsoft Security | Intune | Configuration Manager | Other
0 comments No comments
{count} vote

2 answers

Sort by: Most helpful
  1. Garth 5,801 Reputation points
    2022-05-16T12:40:29.707+00:00

    Most of what you are asking for is NOT inventoried by CM. You will need to do that first BEFORE you can write a report/query.

    As for TPM, there are Lots of example queries if you Bing it.

    2 people found this answer helpful.
    0 comments No comments

  2. Amandayou-MSFT 11,156 Reputation points
    2022-05-16T07:38:51.457+00:00

    Hi @Boopathi S

    These information may not use only one method to get the result.

    Computers list with TPM Version, we could use CMPivot query to find TPM Status, here is the query:

    TPM | where IsEnabled_InitialValue == true and IsActivated_InitialValue == true  
    

    Web cam device, we could use SQL query to test:

        select cs.name0 [Computer name],  
        cs.username0 [Last loggedin User],  
        os.Caption0 [OS],os.InstallDate0 [OS Installed Date],  
        cs.Manufacturer0,cs.Model0 ,  
        WS.LastHWScan [Reported Date to SCCM]  
        from v_GS_COMPUTER_SYSTEM cs,v_GS_SYSTEM_ENCLOSURE se,v_GS_OPERATING_SYSTEM OS,  v_GS_WORKSTATION_STATUS WS  
        where cs.ResourceID=se.ResourceID and  
        cs.ResourceID=OS.ResourceID and  
        cs.ResourceID=WS.ResourceID and  
        se.ResourceID in (select ResourceID from v_GS_SYSTEM_DEVICES where Name0  like '%camera%' or Name0 like '%webcam%')  
        and SE.ChassisTypes0 in ( '8','9','10','11','12','14','18','21')  
        group by cs.Name0,cs.UserName0,cs.Manufacturer0,cs.Model0,OS.Caption0,OS.InstallDate0,WS.LastHWScan  
    

    Note: There reports are created for for Dell and Lenovo models only.Webcam name differs from manufacture to manufacture,so if you have other models like hp,ThinkPad etc,you should look at resource explorer—>hardware –>system devices for the webcam name.

    Computes list with Finger print enabled
    We could refer to this command:

    Get-CimInstance -ClassName Win32_PnPEntity |Where-Object -Property "Class" -Like "Biometric"  
    

    If we run this command on one client, here is the screenshot:

    202137-5162.png

    We could modify the command, and navigate to Device collection --> right click run script --> input the modified command

    202186-516.png

    About IR Enabled, it may difficult to get it, we will research further. Once there is the result, we will update it.


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.