Hello Everyone!

I am trying to figure out who ( using which ID or user details)was distributed the content (either software update deployment package or package or application) to distribution point.

Some one occidentally distributed the content to distribution point . Its having huge size and its impacted the business. My team around 10 engineers are supporting the different  SCCM2012 functionality. 

Th

Hi Bhavani,

You can use the Status Message Queries buried within the Monitoring Node, under System Status and run the All Audit Status Messages from a Specific Site.

Regards,

Vinod

Thanks jones.

Package distributed to one of the secondary site DP. So we have verified all audit status messages for particular primary site but we didn't get the details like who target the content to specific Distribution point. Is there any way we can get this info.

Package distributed to one of the secondary site DP. So we have verified all audit status messages for particular primary site but we didn't get the details like who target the content to specific Distribution point. Is there any way we can get this info.

So let me be 100% clear.

You need to review the status message on the CAS and ALL Primary servers to determine at which site the action was taken and by whom. Just because the DP is at one site doesnt mean it was not triggered to be installed from a different Primary or CAS.

Primary sites are NOT security boundary in CM12.

Thanks Vinod and Jones.

I have verified the all audit status messages for respective primary site. I can see only following details. Still i didnt get the details who distributed the package to respective Distribution point.

User "xx\xx-abc" updated a package named " xx-2015-01 PKG " (xx010xx) to the site distribution points.

User "xx\xx-abc" added new distribution points to a package named " xxx-2015-01 PKG " (xx010xx). User "xx\xx-abc" created a package named " xx-2015-01 PKG " (xx010xx).

Note : Not able to view the status messages for specific to Secondary site server.

I have verified the all audit status messages for respective primary

Thanks Jones.

Yes. CAS and having 5 primary sites

Yes. CAS and having 5 primary

Thanks Jones.

I checked all primary sites - all audit status messages but we didn't get the required information.

Is there any way we can get the information of who distributed the content to the DP.

Thanks in Advance.

I checked all primary sites - all audit status messages but we didn't get the required information.

Thanks Torsten.

I have already checked the status using query " Package created,modified,deleted" . Using this query i got th details of who created the package,modified,deleted . But i need to find out who distributed the content to the distribution point.

Thanks in advance.

Well for a test I updated one of my packages and status message 30068, told me exactly who did it.

Status message 2300 tells you what the package is being updated.

SM 2376, 2311, 2342 and 2330, 2301, provide even more details.

Thanks Jones.

Even i have tried to distribute one of the package to the DP but i can see the only information " User "abc\xxxx" added new distribution points to a package named " Office 2013  " (xx0006E2)" in all audit status messages. I am not getting the Distribution Point Details.

Appreciate your help o

Thanks Jones.

Even i have tried to distribute one of the package to the DP but i can see the only information " User "abc\xxxx" added new distribution points to a package named " Office 2013  " (xx0006E2)" in all audit status messages. I am not getting the Distribution Point Details.

Appreciate your help o