Me and a colleague are trying to figure out a way we could view the status of each configuration item in a configuration baseline deployed to a PC. We are trying to develop a custom tool using powershell that will show if a machine is compliant for a specific baseline. If it isn't we want to be able to see which configurations items are the problem. Here is a very basic abstract example of our posh code.

$ClientComputer = $env:COMPUTERNAME
$Baselines = Get-WmiObject -ComputerName $ClientComputer -Namespace 'root\ccm\dcm' -Class SMS_DesiredConfiguration
ForEach($b in $Baselines)
{
    Write-Host $b.DisplayName "last status =" $b.LastComplianceStatus "on date" $b.LastEvalTime    
}

The real thing is incorported into a listview etc. This just shows the concept. I have fired up wbem and can see a mthod in the SMS_DesiredConfiguration class called GetUserReport, can anyone tell me if this method does what it says on the tin and what parameters it needs? Documentation for this is hard to come by.

Thanks

This is because we have desktop admins who aren't SCCM admins and who need their hands holding through viewing reports on SCCM and expect anything like that to be handled by my team, we were trying to empower the desktop technicians to be able to look at and determine things on their own. Plus its kind of a cool learning experience for me and my colleague as we both get to play about with powershell and grow our own skills a little.

This is the second iteration of this tool which allows our admins to do a lot using PS remoting and WMI etc. Not all of the functionality is SCCM related but some of it is using local WMI classes to give the desktop admins more information. This approach allows our non SCCM admins to view compliance as the client sees it rather than as the server sees it in real time. The trouble we are having is when a client reports non-compliant the only way to see what items in the baseline are non-compliant is as you say to run the reports in SCCM or to remote desktop and inspect the report generated through the configmgr control panel application. I was hoping there would be some way to do this locally on the client so we could incorporate it into our tool.

If not then I guess a training sessions is required to show our desktop technicians the reports and what everything means.

Thanks

not really required to train the desktop technicians on this reports. You can create custom SSRS reports using SQL and provide access to desktop team who can run the reports to check the compliance levels or you can also send these reports to email via subscription.SSRS gives you nice way of representing the data and also can created linked reports to drill down to specific PC with additional information like last compliance check,inventory data,who logged on recently etc.Though all this information can be presented using powershell but SSRS can run without any errors compared to powershell.

why dont you look at default report to know the status for specific baseline ? 

look with category name in report --Compliance and Settings Management