question

JS-0730 avatar image
0 Votes"
JS-0730 asked JS-0730 commented

SCCM Scripts Auditing

Hi,
Using SCCM Administration Console or PowerShell how can I determine who (user login) ran a specific script that is listed in "Script Status" history?
I can only see Operation ID, Script Name, CollectionID, etc...

Is it possible to retrieve the user that ran the script using PowerShell?

Thank you.

mem-cm-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

FionaYan-MSFT avatar image
0 Votes"
FionaYan-MSFT answered JS-0730 commented

@JS-0730

Thank you for posting in Microsoft Q&A forum.

I have done this in my lab and we could check the user name by showing the message on all status message.

  • Located this path on SCCM console: \Monitoring\Overview\System Status\Status Message Queries.
    74133-image.png

  • Select the date of running period like the image below:
    74161-image.png

  • Find the message ID of the script and then we could filter it.
    74134-3-4.png
    74171-image.png

  • Then, we could check the result from the description.
    74118-image.png


Have a good day!


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (60.4 KiB)
image.png (27.9 KiB)
3-4.png (223.1 KiB)
image.png (12.3 KiB)
image.png (16.5 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you.

0 Votes 0 ·

@JS-0730

Thank you very much for the update and we're glad the problem is solved now. If you have any questions in future, we warmly welcome you to post in this forum again.

Have a good day!

0 Votes 0 ·