How close we can get to add remove programs monitoring via collection?

Heimdallr 46 Reputation points
2020-11-25T14:37:34.567+00:00

Hi,

I got a question that I was struggling to answer myself, if I want to monitor an application, let's say it's some Adobe, and make a collection that seeks the app name in add remove programs, how close to real time monitoring am I with this task and how can I improve it?

If I understand correctly - HW Inventory which is set to 7 Hours will gather the data for me once per 7h, so is it enough for this task to lets say, assure that I am getting the data whether Adobe is missing on any device that talks back in mentioned 7h ? Or am I missing anything here? I just get different numbers from SCCM and Nexthink

One thing I found out would be good to set, if I'm correct here is: Set the collection to incremental updates once per hour, so when HW Inventory hits in, it will have collection incrementally adds/removes members

Microsoft Configuration Manager
0 comments
Accepted answer
  1. SunnyNiu-MSFT 1,696 Reputation points
    2020-11-26T09:27:29.927+00:00

    @Heimdallr
    As Garth Jones mentioned that Every 7 hours for inventory is unreasonable. And as above mentioned, if you want to get real-time results when there is an APP (such as Adobe) installed or removed in any device, we can query the results through CMPivot.
    1)In the Configuration Manager console, go to Assets and Compliance>Overview>Device Collections.
    2)Select the All Systems collection.
    3)In the ribbon, click Start CMPivot>Query, Enter the query: InstalledSoftware | where ProductName like '%Adobe%', You can get results similar to the following. If need, you can export the results.
    43032-5.png

    If the response is helpful, please click "Accept Answer"and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,241 Reputation points MVP
    2020-11-25T17:05:34.227+00:00

    Collection membership is inventory based so it will never be real time. It all depends on what is your end goal here. If you are looking to check on compliance then you can deploy a compliance baseline and use that to create collections for administrative purposes. If you want real time data then you can leverage cmpivot to query against a collection.

    0 comments
  2. Aravinth Mathan 321 Reputation points
    2020-11-25T18:25:31.93+00:00

    Nexthink as far as I know does a real time query, similar option in SCCM would be cmpivot as Rahul correctly pointed.

    0 comments
  3. Garth Jones 2,071 Reputation points
    2020-11-25T20:30:39.867+00:00

    Every 7 hours for inventory is a bit much, once a day is what is generally recommend. https://www.enhansoft.com/configuration-manager-inventory-cycle-recommendations.

    What exactly is you end goal? Why real-time?

    if this is for audit purposes what is wrong with using the built-in report and send them out once a day?