SCCM Collection Query

Nitin Singh 20 Reputation points
2023-04-17T03:02:42.04+00:00

Hi All,

Many machines in my environment are not installing latest Windows Update. One of the key finding is issue with Registry.Pol Files. After investigating, we could find that few of the machines are missing registry.pol files (like they dont exits or renamed to .old ). In few machines registry.pol exits but has not updated from months although machine is online and running gpupdate /force does not make difference until registry.pol is manually deleted and recreated.

I have created a Configuration Baseline in SCCM that removes the reigistry.pol (old files) and recreates a new registry.pol file.

I need your expert advice to create a query based collection that lists out all the devices where Registry.Pol in C:\Windows\System32\GroupPolicy\Machine is missing.

If also possible another condition can be applied - if registry.pol exits what is the last modified Date and size

Microsoft Security | Intune | Configuration Manager | Other
0 comments No comments
{count} votes

Answer accepted by question author
  1. AllenLiu-MSFT 49,436 Reputation points Microsoft External Staff
    2023-04-17T06:43:12.79+00:00

    Hi, @Nitin Singh Thank you for posting in Microsoft Q&A forum.

    Like you mentioned, we can create a configuration baseline to check the existence of reigistry.pol file, and create the device collection baseline on the deployment result:

    1

    We can also create a collection that registry.pol exits, and run CMPivot and run below command for this collection to get the last modified Date and size: File('c:\Windows\System32\GroupPolicy\Machine\Registry.pol') 2


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

    2 people found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.