Compliance Settings - compliance counts inaccurate (roughly double the number they should be)

I'm deploying some fairly simple configuration baselines - most with a single CI in it; some remediate, some do not.

In all cases, the Compliance count (as found on the Assets and Compliance/Compliance Settings/Configuration Baselines page in the SCCM console) is roughly double the number it should be.

The same numbers can be found in the report: Compliance And Settings Management \ Summary Compliance by configuration baseline. In that report, however, you can drill into the individual baselines, which takes you to "List of assets by compliance state for a configuration baseline". I find that if I add up all of the assets from this report, the number is accurate.

We have about 4000 people in one of these CI baseline deployments, and it's showing about 8000 are compliant. We don't even have anywhere near that many clients. In another one, we have about 150 users and it's showing 280 compliant. 

It just seems that the summarization data is somehow inflated, and completely inaccurate. Anyone know how that is calculated, or have you seen this before?

February 13th, 2014 10:05pm

Following some leads on my own research...

The summarization process lives in WMI, of course, like everything else. It's apparently in root\sms\site_[SiteCode]:SMS_SummaryTask, executing the method: RequestExecution.

The "TaskCommand" on the SMS_SummaryTask shows that it's actually executing the stored procedure: spTaskDCMComplianceSummary.

That stored procedure loops through all the configuration baselines, and executes the stored procedure spDCM_SummarizeBaseline for each of them.

That stored procedure ends up running a query that looks like this:

select SiteNumber, CI_ID, SummaryType, CountTargeted, CountCompliant, FailureCount, ActivatedCount, CountNoncompliant, EnforcedCount, Severity, LastSummaryTime from CI_ComplianceSummary where CI_ID=@bl_ciid 

I set the @bl_ciid and ran that select query. I got results that look like this:

SiteNumber	CI_ID	SummaryType	CountTargeted	CountCompliant	FailureCount	ActivatedCount	CountNoncompliant	EnforcedCount	Severity	LastSummaryTime
1	16795052	1	0	153	2	0	0	4	3	2014-02-13 23:33:31.633
1	16795052	2	0	141	2	0	0	4	3	2014-02-13 23:33:31.637

The number for this configuration baseline in the summary page is 294. That just so happens to be these two things added together (153+141). 

Does anyone know what these two things are? SummaryType = 1, SummaryType =2 ? It seems like the summarization process is adding them together, when it should not be.

Free Windows Admin Tool Kit Click here and download it now
February 13th, 2014 11:51pm

From the comments on that stored procedure it appears that SummaryType = 1 is for machine based summary and SummaryType = 2 is for user based summary

So... It's evaluating for users and machines? But I'm only deploying it to users... and why on earth would it add these together?

February 14th, 2014 12:24am

Does anyone else have this issue as well? Or do your compliance summaries show correct counts?
Free Windows Admin Tool Kit Click here and download it now
February 28th, 2014 8:15pm

Yes, I know this is an old post, but Im trying to clean them up. Did you solve this problem, if so what was the solution?

March 7th, 2015 12:02pm

No solution. I had planned to rewrite the reports and just ignore the built in SCCM reports, but haven't had the time to do so. The percentages in the reports are a reasonable approximation, so it works ok for getting a general idea of compliance, even with the aforementioned problems.
Free Windows Admin Tool Kit Click here and download it now
March 7th, 2015 12:28pm

No solution. I had planned to rewrite the reports and just ignore the built in SCCM reports, but haven't had the time to do so. The percentages in the reports are a reasonable approximation, so it works ok for getting a general idea of compliance, even with the aforementioned problems.
March 7th, 2015 4:27pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics