Updated on : 03/02/2015
Relevant to: SCCM 2007, SCCM 2012 (including R2 and R3 versions)
Log locations
SCCM logs are stored on different locations depending on OS architecture, client or server, version of SCCM and during different stages of a task sequence.
SCCM 2007 client log file locations:
x86 OS: C:\Windows\System32\CCM\Logs
x64 OS: C:\Windows\SysWOW64\CCM\Logs
Client install logs x86: C:\Windows\System32\CCMSetup
Client install logs x64: C:\Windows\SysWOW64\CCMSetup
TS – WindowsPE, before HDD format: X:\Windows\Temp\Smstslog
TS – WindowsPE, after HDD format: X:\Smsts\log
TS – Windows, prior to SCCM agent install: C:\_SMSTaskSequenceLogs\Smstslog
SCCM 2012 client log file locations:
All OS’s: C:\Windows\CCM\Logs
Client install logs: C:\Windows\CCMSetup\Logs
TS – WindowsPE, before HDD format: X:\Windows\Temp\Smstslog
TS – WindowsPE, after HDD format: X:\Smsts\log
TS – Windows, prior to SCCM agent install: C:\_SMSTaskSequenceLogs\Smstslog
SCCM 2007 & 2012 Server logs
Server Logs: <install location>\Logs (e.g. D:\Program Files\Microsoft Configuration Manager\Logs)
Management Point Logs: <Program files of install drive>\SMS_CCM\Logs (e.g. D:\Program Files\SMS_CCM\Logs)
Reading Logs
Logs can be opened with any text editor, however utilising the SMS/SCCM tools called Trace32.exe or CMTrace.exe can help with effectively monitoring these logs.
CMTrace is an updated and renamed version of Trace32.
Trace32 comes with the SMS Toolkit 2 (for reference) – http://www.microsoft.com/en-AU/download/details.aspx?id=18153
CMTrace comes with CM 2012 R2 Toolkit – http://www.microsoft.com/en-au/download/details.aspx?id=36213
Additionally, with SCCM 2012 R2/Windows PE 5, CMTrace.exe is built into the boot wim’s by default at
x64 – x:\sms\bin\x64\CMTrace.exe
x86 – x:\sms\bin\i386\CMTrace.exe
Using logs to troubleshoot common issues
Client not showing up in SCCM console
- Check the client is installed
- If you are physically at the machine, simply check that control panel | configuration manager exists
- If you are remote, check C:\Windows\CCM\Logs\Ccmsetup.log
- In a healthy install, you will see similar to:
- If you have a return code other than “0” – search the log for the issue
- If the client is installed, check ClientIDManagerStartup.log
- We use this log to determine if the client is able to register
- A healthy SCCM client will have these entries in the log
- Or
- If the client is sending a registration request, but is unable to register
- Search for the client in the SCCM console, add the “approved” column, if the client is not approved, approve it
- Check LocationServices.log
- You may see errors in this log that relate to
- Not publishing site location information in AD
- Not having a boundary setup for the AD site of IP subnet this client is in
- You may see errors in this log that relate to
You get the point. There are bucketloads of logs to check in SCCM – and knowing which one is the right one simply takes time and experience. However, that’s where google – and possible the list below of all log files, will be able to help you.
List of log files
A complete list of log files can be found at https://technet.microsoft.com/en-us/library/hh427342.aspx
However, for ease, I have dumped them into a single table – available below. Some of the data has been abbreviated to try and make it work in a table… but the abbreviations will make sense to SCCM admins – if not, I suggest you refer back to the TechNet doco link above.
| Log name | Type | Description | Log Location |
|---|---|---|---|
| CAS.log | Client operations | Content Access service. Maintains the local package cache on the client. | Client |
| Ccm32BitLauncher.log | Client operations | Records actions for starting applications on the client marked as "run as 32bit". | Client |
| CcmEval.log | Client operations | Records Configuration Manager client status evaluation activities and details for components that are required by the Configuration Manager client. | Client |
| CcmEvalTask.log | Client operations | Records the Configuration Manager client status evaluation activities that are initiated by the evaluation scheduled task. | Client |
| CcmExec.log | Client operations | Records activities of the client and the SMS Agent Host service. This log file also includes information about enabling and disabling wake-up proxy. | Client |
| CcmMessaging.log | Client operations | Records activities related to communications between the client and management points. | Client |
| CCMNotificationAgent.log | Client operations | Records activities related to client notification operations. | Client |
| Ccmperf.log | Client operations | Records activities related to the maintenance and capture of data related to client performance counters. | Client |
| CcmRestart.log | Client operations | Records client service restart activity. | Client |
| CCMSDKProvider.log | Client operations | Records activities for the client SDK interfaces. | Client |
| CertificateMaintenance.log | Client operations | Maintains certificates for Active Directory Domain Services and management points. | Client |
| CIDownloader.log | Client operations | Records details about configuration item definition downloads. | Client |
| CITaskMgr.log | Client operations | Records tasks that are initiated for each application and deployment type, such as content download or install or uninstall actions. | Client |
| ClientAuth.log | Client operations | Records the signing and authentication activity for the client. | Client |
| ClientIDManagerStartup.log | Client operations | Creates and maintains the client GUID and identifies tasks performed during client registration and assignment. | Client |
| ClientLocation.log | Client operations | Records tasks that are related to client site assignment. | Client |
| CMHttpsReadiness.log | Client operations | Records the results of running the Configuration Manager HTTPS Readiness Assessment Tool. This tool checks whether computers have a PKI client authentication certificate that can be used for Configuration Manager. | Client |
| CmRcService.log | Client operations | Records information for the remote control service. | Client |
| ContentTransferManager.log | Client operations | Schedules the Background Intelligent Transfer Service (BITS) or the Server Message Block (SMB) to download or to access packages. | Client |
| DataTransferService.log | Client operations | Records all BITS communication for policy or package access. | Client |
| EndpointProtectionAgent | Client operations | Records information about the installation of the Endpoint Protection client and the application of antimalware policy to that client. | Client |
| execmgr.log | Client operations | Records details about packages and task sequences that run on the client. | Client |
| ExpressionSolver.log | Client operations | Records details about enhanced detection methods that are used when verbose or debug logging is enabled. | Client |
| ExternalEventAgent.log | Client operations | Records the history of Endpoint Protection malware detection and events related to client status. | Client |
| FileBITS.log | Client operations | Records all SMB package access tasks. | Client |
| FileSystemFile.log | Client operations | Records the activity of the Windows Management Instrumentation (WMI) provider for software inventory and file collection. | Client |
| FSPStateMessage.log | Client operations | Records the activity for state messages that are sent to the fallback status point by the client. | Client |
| InternetProxy.log | Client operations | Records the network proxy configuration and usage activity for the client. | Client |
| InventoryAgent.log | Client operations | Records activities of hardware inventory, software inventory, and heartbeat discovery actions on the client. | Client |
| LocationCache.log | Client operations | Records the activity for location cache usage and maintenance for the client. | Client |
| LocationServices.log | Client operations | Records the client activity for locating management points, software update points, and distribution points. | Client |
| MaintenanceCoordinator.log | Client operations | Records the activity for general maintenance task activity for the client. | Client |
| Mifprovider.log | Client operations | Records the activity of the WMI provider for .MIF files. | Client |
| mtrmgr.log | Client operations | Monitors all software metering processes. | Client |
| PolicyAgent.log | Client operations | Records requests for policies made by using the Data Transfer service. | Client |
| PolicyAgentProvider.log | Client operations | Records policy changes. | Client |
| PolicyEvaluator.log | Client operations | Records details about the evaluation of policies on client computers, including policies from software updates. | Client |
| PolicyPlatformClient.log | Client operations | Records the process of remediation and compliance for all providers located in %Program Files%\Microsoft Policy Platform, except the file provider. | Client |
| PolicySdk.log | Client operations | Records activities for policy system SDK interfaces. | Client |
| Pwrmgmt.log | Client operations | Records information about enabling or disabling and configuring the wake-up proxy client settings. | Client |
| PwrProvider.log | Client operations | Records the activities of the power management provider (PWRInvProvider) hosted in the Windows Management Instrumentation (WMI) service. On all supported versions of Windows, the provider enumerates the current settings on computers during hardware inventory and applies power plan settings. | Client |
| SCClient_ | Client operations | Records the activity in Software Center for the specified user on the client computer. | Client |
| SCClient_ | Client operations | Records the historical activity in Software Center for the specified user on the client computer. | Client |
| Scheduler.log | Client operations | Records activities of scheduled tasks for all client operations. | Client |
| SCNotify_ | Client operations | Records the activity for notifying users about software for the specified user. | Client |
| SCNotify_ | Client operations | Records the historical information for notifying users about software for the specified user. | Client |
| setuppolicyevaluator.log | Client operations | Records configuration and inventory policy creation in WMI. | Client |
| SleepAgent_ | Client operations | Main log file for wake-up proxy. | Client |
| smscliui.log | Client operations | Records usage of the Configuration Manager client in Control Panel. | Client |
| SrcUpdateMgr.log | Client operations | Records activity for installed Windows Installer applications that are updated with current distribution point source locations. | Client |
| StatusAgent.log | Client operations | Records status messages that are created by the client components. | Client |
| SWMTRReportGen.log | Client operations | Generates a usage data report that is collected by the metering agent. This data is logged in Mtrmgr.log. | Client |
| UserAffinity.log | Client operations | Records details about user device affinity. | Client |
| VirtualApp.log | Client operations | Records information specific to the evaluation of App-V deployment types. | Client |
| Wedmtrace.log | Client operations | Records operations related to write filters on Windows Embedded clients. | Client |
| wakeprxy-install.log | Client operations | Records installation information when clients receive the client setting option to enable wake-up proxy. | Client |
| wakeprxy-uninstall.log | Client operations | Records information about uninstalling wake-up proxy when clients receive the client setting option to disable wake-up proxy, if wake-up proxy was previously enabled. | Client |
| ccmsetup.log | Client installation | Records ccmsetup tasks for client setup, client upgrade, and client removal. Can be used to troubleshoot client installation problems. | Client |
| ccmsetup-ccmeval.log | Client installation | Records ccmsetup tasks for client status and remediation. | Client |
| CcmRepair.log | Client installation | Records the repair activities of the client agent. | Client |
| client.msi.log | Client installation | Records setup tasks performed by client.msi. Can be used to troubleshoot client installation or removal problems. | Client |
| scxcm.log | Client for Linux and UNIX | This is the log file for the core service of the Configuration Manager client for Linux and UNIX (ccmexec.bin). This log file contains information about the installation and ongoing operations of ccmexec.bin. | Client |
| scxcmprovider.log | Client for Linux and UNIX | This is the log file for the CIM service of the Configuration Manager client for Linux and UNIX (omiserver.bin). This log file contains information about the ongoing operations of nwserver.bin. | Client |
| CCMClient- | Client for Mac Computers | Records activities that are related to the Mac client operations, which includes application management, inventory, and error logging. | Client |
| CCMAgent- | Client for Mac Computers | Records information that is related to client operations, which includes user logon and logoff operations and Mac computer activity. | Client |
| CCMNotifications- | Client for Mac Computers | Records activities that are related to Configuration Manager notifications displayed on the Mac computer. | Client |
| CCMPrefPane- | Client for Mac Computers | Records activities related to the Configuration Manager preferences dialog box on the Mac computer, which includes general status and error logging. | Client |
| adctrl.log | CM Site Server | Records enrollment processing activity. | Site server |
| ADForestDisc.log | CM Site Server | Records Active Directory Forest Discovery actions. | Site server |
| ADService.log | CM Site Server | Records account creation and security group details in Active Directory. | Site server |
| adsgdis.log | CM Site Server | Records Active Directory Group Discovery actions. | Site server |
| adsysdis.log | CM Site Server | Records Active Directory System Discovery actions. | Site server |
| adusrdis.log | CM Site Server | Records Active Directory User Discovery actions. | Site server |
| ccm.log | CM Site Server | Records client push installation activities. | Site server |
| CertMgr.log | CM Site Server | Records the certificate activities for intra-site communications. | Site system server |
| chmgr.log | CM Site Server | Records activities of the client health manager. | Site server |
| Cidm.log | CM Site Server | Records changes to the client settings by the Client Install Data Manager (CIDM). | Site server |
| colleval.log | CM Site Server | Records details about when collections are created, changed, and deleted by the Collection Evaluator. | Site server |
| compmon.log | CM Site Server | Records the status of component threads monitored for the site server. | Site system server |
| compsumm.log | CM Site Server | Records Component Status Summarizer tasks. | Site server |
| ComRegSetup.log | CM Site Server | Records the initial installation of COM registration results for a site server. | Site system server |
| dataldr.log | CM Site Server | Records information about the processing of Management Information Format (MIF) files and hardware inventory in the Configuration Manager database. | Site Server |
| ddm.log | CM Site Server | Records activities of the discovery data manager. | Site server |
| despool.log | CM Site Server | Records incoming site-to-site communication transfers. | Site server |
| distmgr.log | CM Site Server | Records details about package creation, compression, delta replication, and information updates. | Site server |
| EPCtrlMgr.log | CM Site Server | Records information about the synchronization of malware threat information from the Endpoint Protection site system role server into the Configuration Manager database. | Site server |
| EPMgr.log | CM Site Server | Records the status of the Endpoint Protection site system role. | Site system server |
| EPSetup.log | CM Site Server | Provides information about the installation of the Endpoint Protection site system role. | Site system server |
| EnrollSrv.log | CM Site Server | Records activities of the enrollment service process. | Site system server |
| EnrollWeb.log | CM Site Server | Records activities of the enrollment website process. | Site system server |
| fspmgr.log | CM Site Server | Records activities of the fallback status point site system role. | Site system server |
| hman.log | CM Site Server | Records information about site configuration changes, and the publishing of site information in Active Directory Domain Services. | Site server |
| Inboxast.log | CM Site Server | Records the files that are moved from the management point to the corresponding INBOXES folder on the site server. | Site server |
| inboxmgr.log | CM Site Server | Records file transfer activities between inbox folders. | Site server |
| inboxmon.log | CM Site Server | Records the processing of inbox files and performance counter updates. | Site server |
| invproc.log | CM Site Server | Records the forwarding of MIF files from a secondary site to its parent site. | Site server |
| migmctrl.log | CM Site Server | Records information for Migration actions involving migration jobs, shared distribution points, and distribution point upgrades. | The top-level site and each child primary site |
| mpcontrol.log | CM Site Server | Records the registration of the management point with WINS. Records the availability of the management point every 10 minutes. | Site system server |
| mpfdm.log | CM Site Server | Records the actions of the management point component that moves client files to the corresponding INBOXES folder on the site server. | Site system server |
| mpMSI.log | CM Site Server | Records details of about the management point installation. | Site server |
| MPSetup.log | CM Site Server | Records the management point installation wrapper process. | Site server |
| netdisc.log | CM Site Server | Records Network Discovery actions. | Site server |
| ntsvrdis.log | CM Site Server | Records the discovery activity of site system servers. | Site server |
| Objreplmgr | CM Site Server | Records the processing of object change notifications for replication. | Site server |
| offermgr.log | CM Site Server | Records advertisement updates. | Site server |
| offersum.log | CM Site Server | Records the summarization of deployment status messages. | Site server |
| OfflineServicingMgr.log | CM Site Server | Records the activities of applying updates to operating system image files. | Site server |
| outboxmon.log | CM Site Server | Records the processing of outbox files and performance counter updates. | Site server |
| PerfSetup.log | CM Site Server | Records the results of the installation of performance counters. | Site system server |
| PkgXferMgr.log | CM Site Server | Records the actions of the SMS Executive component that is responsible for sending content from a primary site to a remote distribution point. | Site server |
| policypv.log | CM Site Server | Records updates to the client policies to reflect changes to client settings or deployments. | Primary site server |
| rcmctrl.log | CM Site Server | Records the activities of database replication between sites in the hierarchy. | Site server |
| replmgr.log | CM Site Server | Records the replication of files between the site server components and the Scheduler component. | Site server |
| ResourceExplorer.log | CM Site Server | Records errors, warnings, and information about running the Resource Explorer. | CM console |
| ruleengine.log | CM Site Server | Records details about automatic deployment rules for the identification, content download, and software update group and deployment creation. | Site server |
| schedule.log | CM Site Server | Records details about site-to-site job and file replication. | Site server |
| sender.log | CM Site Server | Records the files that transfer by file-based replication between sites. | Site server |
| sinvproc.log | CM Site Server | Records information about the processing of software inventory data to the site database. | Site server |
| sitecomp.log | CM Site Server | Records details about the maintenance of the installed site components on all site system servers in the site. | Site server |
| sitectrl.log | CM Site Server | Records site setting changes made to site control objects in the database. | Site server |
| sitestat.log | CM Site Server | Records the availability and disk space monitoring process of all site systems. | Site server |
| SmsAdminUI.log | CM Site Server | Records Configuration Manager console activity. | CM console |
| SMSAWEBSVCSetup.log | CM Site Server | Records the installation activities of the Application Catalog web service. | Site system server |
| smsbkup.log | CM Site Server | Records output from the site backup process. | Site server |
| smsdbmon.log | CM Site Server | Records database changes. | Site server |
| SMSENROLLSRVSetup.log | CM Site Server | Records the installation activities of the enrollment web service. | Site system server |
| SMSENROLLWEBSetup.log | CM Site Server | Records the installation activities of the enrollment website. | Site system server |
| smsexec.log | CM Site Server | Records the processing of all site server component threads. | Site server or site system server |
| SMSFSPSetup.log | CM Site Server | Records messages generated by the installation of a fallback status point. | Site system server |
| SMSPORTALWEBSetup.log | CM Site Server | Records the installation activities of the Application Catalog website. | Site system server |
| SMSProv.log | CM Site Server | Records WMI provider access to the site database. | SMS Provider |
| srsrpMSI.log | CM Site Server | Records detailed results of the reporting point installation process from the MSI output. | Site system server |
| srsrpsetup.log | CM Site Server | Records results of the reporting point installation process. | Site system server |
| statesys.log | CM Site Server | Records the processing of state system messages. | Site server |
| statmgr.log | CM Site Server | Records the writing of all status messages to the database. | Site server |
| swmproc.log | CM Site Server | Records the processing of metering files and settings. | Site server |
| ConfigMgrPrereq.log | Site Server Inst | Records pre-requisite component evaluation and installation activities. | Site server |
| ConfigMgrSetup.log | Site Server Inst | Records detailed output from site server setup. | Site Server |
| ConfigMgrSetupWizard.log | Site Server Inst | Records information related to activity in the Setup wizard. | Site Server |
| SMS_BOOTSTRAP.log | Site Server Inst | Records information about the progress of launching the secondary site installation process. Details of the actual setup process are contained in ConfigMgrSetup.log. | Site Server |
| smstsvc.log | Site Server Inst | Records information about the installation, use, and removal of a Windows service that is used to test network connectivity and permissions between servers, using the computer account of the server initiating the connection. | Site server and site systems |
| FspIsapi | FSP Log Files | Records details about communications to the fallback status point from mobile device legacy clients and client computers. | Site system server |
| fspMSI.log | FSP Log Files | Records messages generated by the installation of a fallback status point. | Site system server |
| fspmgr.log | FSP Log Files | Records activities of the fallback status point site system role. | Site system server |
| CcmIsapi.log | MP Log Files | Records client messaging activity on the endpoint. | Site system server |
| MP_CliReg.log | MP Log Files | Records the client registration activity processed by the management point. | Site system server |
| MP_Ddr.log | MP Log Files | Records the conversion of XML.ddr records from clients, and copies them to the site server. | Site system server |
| MP_Framework.log | MP Log Files | Records the activities of the core management point and client framework components. | Site system server |
| MP_GetAuth.log | MP Log Files | Records client authorization activity. | Site system server |
| MP_GetPolicy.log | MP Log Files | Records policy request activity from client computers. | Site system server |
| MP_Hinv.log | MP Log Files | Records details about the conversion of XML hardware inventory records from clients and the copy of those files to the site server. | Site system server |
| MP_Location.log | MP Log Files | Records location request and reply activity from clients. | Site system server |
| MP_OOBMgr.log | MP Log Files | Records the management point activities related to receiving OTP from a client. | Site system server |
| MP_Policy.log | MP Log Files | Records policy communication. | Site system server |
| MP_Relay.log | MP Log Files | Records the transfer of files that are collected from the client. | Site system server |
| MP_Retry.log | MP Log Files | Records the hardware inventory retry processes. | Site system server |
| MP_Sinv.log | MP Log Files | Records details about the conversion of XML software inventory records from clients and the copy of those files to the site server. | Site system server |
| MP_SinvCollFile.log | MP Log Files | Records details about file collection. | Site system server |
| MP_Status.log | MP Log Files | Records details about the conversion of XML.svf status message files from clients and the copy of those files to the site server. | Site system server |
| mpcontrol.log | MP Log Files | Records the registration of the management point with WINS. Records the availability of the management point every 10 minutes. | Site server |
| mpfdm.log | MP Log Files | Records the actions of the management point component that moves client files to the corresponding INBOXES folder on the site server. | Site system server |
| mpMSI.log | MP Log Files | Records details of about the management point installation. | Site server |
| MPSetup.log | MP Log Files | Records the management point installation wrapper process. | Site server |
| objreplmgr.log | SUP Log Files | Records details about the replication of software updates notification files from a parent to child sites. | Site server |
| PatchDownloader.log | SUP Log Files | Records details about the process of downloading software updates from the update source to the download destination on the site server. | The computer hosting the Configuration Manager console from which downloads are initiated |
| ruleengine.log | SUP Log Files | Records details about automatic deployment rules for the identification, content download, and software update group and deployment creation. | Site server |
| SUPSetup.log | SUP Log Files | Records details about the software update point installation. When the software update point installation completes, Installation was successful is written to this log file. | Site system server |
| WCM.log | SUP Log Files | Records details about the software update point configuration and connections to the Windows Server Update Services (WSUS) server for subscribed update categories, classifications, and languages. | Site server that connects to the (WSUS) server |
| WSUSCtrl.log | SUP Log Files | Records details about the configuration, database connectivity, and health of the WSUS server for the site. | Site system server |
| wsyncmgr.log | SUP Log Files | Records details about the software updates synchronization process. | Site system server |
| WUSSyncXML.log | SUP Log Files | Records details about the Inventory Tool for the Microsoft Updates synchronization process. | The client computer configured as the synchronization host for the Inventory Tool for Microsoft Updates. |
| AppIntentEval.log | App Mgmt | Records details about the current and intended state of applications, their applicability, whether requirements were met, deployment types, and dependencies. | Client |
| AppDiscovery.log | App Mgmt | Records details about the discovery or detection of applications on client computers. | Client |
| AppEnforce.log | App Mgmt | Records details about enforcement actions (install and uninstall) taken for applications on the client. | Client |
| awebsctl.log | App Mgmt | Records the monitoring activities for the Application Catalog web service point site system role. | Site system server |
| awebsvcMSI.log | App Mgmt | Records detailed installation information for the Application Catalog web service point site system role. | Site system server |
| Ccmsdkprovider.log | App Mgmt | Records the activities of the application management SDK. | Client |
| colleval.log | App Mgmt | Records details about when collections are created, changed, and deleted by the Collection Evaluator. | Site system server |
| ConfigMgrSoftwareCatalog.log | App Mgmt | Records the activity of the Application Catalog, which includes its use of Silverlight. | Client |
| portlctl.log | App Mgmt | Records the monitoring activities for the Application Catalog website point site system role. | Site system server |
| portlwebMSI.log | App Mgmt | Records the MSI installation activity for the Application Catalog website role. | Site system server |
| PrestageContent.log | App Mgmt | Records the details about the use of the ExtractContent.exe tool on a remote prestaged distribution point. This tool extracts content that has been exported to a file. | Site system server |
| ServicePortalWebService.log | App Mgmt | Records the activity of the Application Catalog web service. | Site system server |
| ServicePortalWebSite.log | App Mgmt | Records the activity of the Application Catalog website. | Site system server |
| SMSdpmon.log | App Mgmt | Records details about the distribution point health monitoring scheduled task that is configured on a distribution point. | Site server |
| SoftwareCatalogUpdateEndpoint.log | App Mgmt | Records the activities for managing the URL for the Application Catalog shown in Software Center. | Client |
| SoftwareCenterSystemTasks.log | App Mgmt | Records the activities for Software Center prerequisite component validation. | Client |
| colleval.log | Pkg deploiyment | Records details about when collections are created, changed, and deleted by the Collection Evaluator. | Site server |
| execmgr.log | Pkg deploiyment | Records details about packages and task sequences that run. | Client |
| AssetAdvisor.log | Asset Intelligence | Records the activities of Asset Intelligence inventory actions. | Client |
| aikbmgr.log | Asset Intelligence | Records details about the processing of XML files from the inbox for updating the Asset Intelligence catalog. | Site server |
| AIUpdateSvc.log | Asset Intelligence | Records the interaction of the Asset Intelligence synchronization point with SCO (System Center Online), the online web service. | Site system server |
| AIUSMSI.log | Asset Intelligence | Records details about the installation of Asset Intelligence synchronization point site system role. | Site system server |
| AIUSSetup.log | Asset Intelligence | Records details about the installation of Asset Intelligence synchronization point site system role. | Site system server |
| ManagedProvider.log | Asset Intelligence | Records details about discovering software with an associated software identification tag. Also records activities relating to hardware inventory. | Site system server |
| MVLSImport.log | Asset Intelligence | Records details about the processing of imported licensing files. | Site system server |
| ConfigMgrSetup.log | Backup and Recovery | Records information about setup and recovery tasks when Configuration Manager recovers a site from backup. | Site server |
| Smsbkup.log | Backup and Recovery | Records details about the site backup activity. | Site server |
| smssqlbkup.log | Backup and Recovery | Records output from the site database backup process when SQLÂ Server is installed on a different server than the site server. | Site database server |
| Smswriter.log | Backup and Recovery | Records information about the state of the Configuration Manager VSS writer that is used by the backup process. | Site server |
| Crp.log | Certificate Enrollment | Records the enrollment activities. | Certificate registration point |
| Crpctrl.log | Certificate Enrollment | Records the operational health of the certificate registration point. | Certificate registration point |
| Crpsetup.log | Certificate Enrollment | Records details about the installation and configuration of the certificate registration point. | Certificate registration point |
| Crpmsi.log | Certificate Enrollment | Records details about the installation and configuration of the certificate registration point. | Certificate registration point |
| NDESPlugin.log | Certificate Enrollment | Records the challenge verification and certificate enrollment activities. | Configuration Manager Policy Module and the Network Device Enrollment Service |
| bgbmgr.log | Client Notification | Records details about the activities of the site server relating to client notification tasks and processing online and task status files. | Site server |
| BGBServer.log | Client Notification | Records the activities of the notification server such as client-server communications and pushing tasks to clients. Also records information about online and task status files generation to be sent to the site server. | Management point |
| BgbSetup.log | Client Notification | Records the activities of the notification server installation wrapper process during installation and uninstall. | Management point |
| bgbisapiMSI.log | Client Notification | Records details about the notification server installation and uninstall. | Management point |
| BgbHttpProxy.log | Client Notification | Records the activities of the notification HTTP proxy as it relays the messages of clients using HTTP to and from the notification server. | Client |
| CcmNotificationAgent.log | Client Notification | Records the activities of the notification agent such as client-server communication and information about tasks received and dispatched to other client agents. | Client |
| CIAgent.log | Compliance Settings | Records details about the process of remediation and compliance for compliance settings, software updates, and application management. | Client |
| CITaskManager.log | Compliance Settings | Records information about configuration item task scheduling. | Client |
| DCMAgent.log | Compliance Settings | Records high-level information about the evaluation, conflict reporting, and remediation of configuration items and applications. | Client |
| DCMReporting.log | Compliance Settings | Records information about reporting policy platform results into state messages for configuration items. | Client |
| DcmWmiProvider.log | Compliance Settings | Records information about reading configuration item synclets from Windows Management Instrumentation (WMI). | Client |
| ConfigMgrAdminUISetup.log | CMr Console | Records the installation of the Configuration Manager console. | CM console |
| SmsAdminUI.log | CMr Console | Records information about the operation of the Configuration Manager console. | CM console |
| Smsprov.log | CMr Console | Records activities performed by the SMS Provider. Configuration Manager console activities use the SMS provider. | Site server or site system server |
| CloudDP- | Content Management | ||
| CloudMgr.log | Content Management | Records details about the provisioning of content, collecting storage and bandwidth statistics, and administrator initiated actions to stop or start the cloud service that runs a cloud-based distribution point. | Site system server |
| DataTransferService.log | Content Management | ||
| PullDP.log | Content Management | ||
| PrestageContent.log | Content Management | Records the details about the use of the ExtractContent.exe tool on a remote prestaged distribution point. This tool extracts content that has been exported to a file. | Site system role |
| SMSdpmon.log | Content Management | Records details about the distribution point health monitoring scheduled task that are configured on a distribution point. | Site system role |
| smsdpprov.log | Content Management | Records details about the extraction of compressed files received from a primary site. This log is generated by the WMI Provider of the remote distribution point. | A distribution point computer that is not co-located with the site server. |
| adsgdis.log | Discovery | Records Active Directory Security Group Discovery actions. | Site server |
| adsysdis.log | Discovery | Records Active Directory System Discovery actions. | Site server |
| adusrdis.log | Discovery | Records Active Directory User Discovery actions. | Site server |
| ADForestDisc.Log | Discovery | Records Active Directory Forest Discovery actions. | Site server |
| ddm.log | Discovery | Records activities of the discovery data manager. | Site server |
| InventoryAgent.log | Discovery | Records activities of hardware inventory, software inventory, and heartbeat discovery actions on the client. | Client |
| netdisc.log | Discovery | Records Network Discovery actions. | Site server |
| EndpointProtectionAgent.log | Endpoint Protection | Records details about the installation of the Endpoint Protection client and the application of antimalware policy to that client. | Client |
| EPCtrlMgr.log | Endpoint Protection | Records details about the synchronization of malware threat information from the Endpoint Protection role server into the Configuration Manager database. | Site system server |
| EPMgr.log | Endpoint Protection | Monitors the status of the Endpoint Protection site system role. | Site system server |
| EPSetup.log | Endpoint Protection | Provides information about the installation of the Endpoint Protection site system role. | Site system server |
| AdminUI.ExtensionInstaller.log | Extensions | Records information about the download of extensions from Microsoft, and the installation and uninstallation of all extensions. | CM console |
| FeatureExtensionInstaller.log | Extensions | Records information about the installation and removal of individual extensions when they are enabled or disabled in the Configuration Manager console. | CM console |
| SmsAdminUI.log | Extensions | Records Configuration Manager console activity. | CM console |
| dataldr.log | Inventory | Records information about the processing of Management Information Format (MIF) files and hardware inventory in the Configuration Manager database. | Site server |
| invproc.log | Inventory | Records the forwarding of MIF files from a secondary site to its parent site. | Secondary site server |
| sinvproc.log | Inventory | Records information about the processing of software inventory data to the site database. | Site server |
| mtrmgr.log | Metering | Monitors all software metering processes. | Site server |
| migmctrl.log | Migration | Records information about migration actions that involve migration jobs, shared distribution points, and distribution point upgrades. | The top-level site in the System Center 2012 Configuration Manager hierarchy, and each child primary site |
| DMPRP.log | Mobile Devices | Records communication between management points that are enabled for mobile devices and the management point endpoints. | Site system server |
| dmpmsi.log | Mobile Devices | Records the Windows Installer data for the configuration of a management point that is enabled for mobile devices. | Site system server |
| DMPSetup.log | Mobile Devices | Records the configuration of the management point when it is enabled for mobile devices. | Site system server |
| enrollsrvMSI.log | Mobile Devices | Records the Windows Installer data for the configuration of an enrollment point. | Site system server |
| enrollmentweb.log | Mobile Devices | Records communication between mobile devices and the enrollment proxy point. | Site system server |
| enrollwebMSI.log | Mobile Devices | Records the Windows Installer data for the configuration of an enrollment proxy point. | Site system server |
| enrollmentservice.log | Mobile Devices | Records communication between an enrollment proxy point and an enrollment point. | Site system server |
| SMS_DM.log | Mobile Devices | Records communication between mobile devices, Mac computers and the management point that is enabled for mobile devices and Mac computers. | Site system server |
| easdisc.log | Exchange Server Connector | Records the activities and the status of the Exchange Server connector. | Site server |
| DmCertEnroll.log | Mobile Device Legacy | Records details about certificate enrollment data on mobile device legacy clients. | Client |
| DMCertResp.htm | Mobile Device Legacy | Records the HTML response from the certificate server when the mobile device legacy client enroller program requests a PKI certificate. | Client |
| DmClientHealth.log | Mobile Device Legacy | Records the GUIDs of all the mobile device legacy clients that communicate with the management point that is enabled for mobile devices. | Site system server |
| DmClientRegistration.log | Mobile Device Legacy | Records registration requests and responses to and from mobile device legacy clients. | Site system server |
| DmClientSetup.log | Mobile Device Legacy | Records client setup data for mobile device legacy clients. | Client |
| DmClientXfer.log | Mobile Device Legacy | Records client transfer data for mobile device legacy clients and for ActiveSync deployments. | Client |
| DmCommonInstaller.log | Mobile Device Legacy | Records client transfer file installation for configuring mobile device legacy client transfer files. | Client |
| DmInstaller.log | Mobile Device Legacy | Records whether DMInstaller correctly calls DmClientSetup, and whether DmClientSetup exits with success or failure for mobile device legacy clients. | Client |
| DmpDatastore.log | Mobile Device Legacy | Records all the site database connections and queries made by the management point that is enabled for mobile devices. | Site system server |
| DmpDiscovery.log | Mobile Device Legacy | Records all the discovery data from the mobile device legacy clients on the management point that is enabled for mobile devices. | Site system server |
| DmpHardware.log | Mobile Device Legacy | Records hardware inventory data from mobile device legacy clients on the management point that is enabled for mobile devices. | Site system server |
| DmpIsapi.log | Mobile Device Legacy | Records mobile device legacy client communication with a management point that is enabled for mobile devices. | Site system server |
| dmpmsi.log | Mobile Device Legacy | Records the Windows Installer data for the configuration of a management point that is enabled for mobile devices. | Site system server |
| DMPSetup.log | Mobile Device Legacy | Records the configuration of the management point when it is enabled for mobile devices. | Site system server |
| DmpSoftware.log | Mobile Device Legacy | Records software distribution data from mobile device legacy clients on a management point that is enabled for mobile devices. | Site system server |
| DmpStatus.log | Mobile Device Legacy | Records status messages data from mobile device clients on a management point that is enabled for mobile devices. | Site system server |
| DmSvc.log | Mobile Device Legacy | Records client communication from mobile device legacy clients with a management point that is enabled for mobile devices. | Client |
| FspIsapi.log | Mobile Device Legacy | Records details about communications to the fallback status point from mobile device legacy clients and client computers. | Site system server |
| CAS.log | OSD | Records details when distribution points are found for referenced content. | Client |
| ccmsetup.log | OSD | Records ccmsetup tasks for client setup, client upgrade, and client removal. Can be used to troubleshoot client installation problems. | Client |
| CreateTSMedia.log | OSD | Records details for task sequence media creation. | CM console |
| DeployToVhd.log | OSD | ||
| Dism.log | OSD | Records driver installation actions or update apply actions for offline servicing. | Site system server |
| Distmgr.log | OSD | Records details about the configuration of enabling a distribution point for PXE. | Site system server |
| DriverCatalog.log | OSD | Records details about device drivers that have been imported into the driver catalog. | Site system server |
| mcsisapi.log | OSD | Records information for multicast package transfer and client request responses. | Site system server |
| mcsexec.log | OSD | Records health check, namespace, session creation and certificate check actions. | Site system server |
| mcsmgr.log | OSD | Records changes to configuration, security mode and availability. | Site system server |
| mcsprv.log | OSD | Records multicast provider interaction with Windows Deployment Services (WDS). | Site system server |
| MCSSetup.log | OSD | Records details about multicast server role installation. | Site system server |
| MCSMSI.log | OSD | Records details about multicast server role installation. | Site system server |
| Mcsperf.log | OSD | Records details about multicast performance counter updates. | Site system server |
| MP_ClientIDManager.log | OSD | Records management point responses to the client ID requests task sequences initiated from PXE or boot media. | Site system server |
| MP_DriverManager.log | OSD | Records management point responses to Auto Apply Driver task sequence action requests. | Site system server |
| OfflineServicingMgr.log | OSD | Records details of offline servicing schedules and update apply actions on operating system .wim files. | Site system server |
| Setupact.log | OSD | Records details about Windows Sysprep and setup logs. | Client |
| Setupapi.log | OSD | Records details about Windows Sysprep and setup logs. | Client |
| Setuperr.log | OSD | Records details about Windows Sysprep and setup logs. | Client |
| smpisapi.log | OSD | Records details about the client state capture and restore actions, and threshold information. | Client |
| Smpmgr.log | OSD | Records details about the results of state migration point health checks and configuration changes. | Site system server |
| smpmsi.log | OSD | Records installation and configuration details about the state migration point. | Site system server |
| smpperf.log | OSD | Records the state migration point performance counter updates. | Site system server |
| smspxe.log | OSD | Records details about the responses to clients that PXE boot and details about the expansion of boot images and boot files. | Site system server |
| smssmpsetup.log | OSD | Records installation and configuration details about the state migration point. | Site system server |
| Smsts.log | OSD | Records task sequence activities. | Client |
| TSAgent.log | OSD | Records the outcome of task sequence dependencies before starting a task sequence. | Client |
| TaskSequenceProvider.log | OSD | Records details about task sequences when they are imported, exported, or edited. | Site system server |
| loadstate.log | OSD | Records details about the User State Migration Tool (USMT) and restoring user state data. | Client |
| scanstate.log | OSD | Records details about the User State Migration Tool (USMT) and capturing user state data. | Client |
| amtopmgr.log | OOBM | Records the activities of the out of band service point, which include the discovery of management controllers, provisioning, audit log control, and power control commands. | Out of band service point site system server |
| adctrl.log | OOBM | Records details about managing Active Directory accounts that are used by out of band management. | Site server |
| ADService.log | OOBM | Records details about account creation and security group details in Active Directory. | Site server |
| amtproxymgr.log | OOBM | Records details about the activities of the site server relating to provisioning and sending instruction files to the out of band service point, which include the following: | Site server |
| amtspsetup.log | OOBM | Records details about the installation of the out of band service point. | Out of band service point site system server |
| pwrmgmt.log | Power Management | Records details about power management activities on the client computer, which include monitoring and the enforcement of settings by the Power Management Client Agent. | Client |
| CMRcViewer.log | Remote Control | Records details about the activity of the remote control viewer. | Located in the %temp% folder on the computer running the remote control viewer. |
| srsrp.log | Reporting | Records information about the activity and status of the reporting services point. | Site system server |
| srsrpMSI.log | Reporting | Records detailed results of the reporting services point installation process from the MSI output. | Site system server |
| srsrpsetup.log | Reporting | Records results of the reporting services point installation process. | Site system server |
| hman.log | RBAC | Records information about site configuration changes, and the publishing of site information to Active Directory Domain Services. | Site server |
| SMSProv.log | RBAC | Records WMI provider access to the site database. | Computer with the SMS Provider |
| ccmcca.log | SU/NAP | Records details about the processing of compliance evaluation based on Configuration Manager NAP policy processing, and contains the processing of remediation for each software update required for compliance. | Client |
| ccmperf.log | SU/NAP | Records activities related to the maintenance and capture of data related to client performance counters. | Client |
| PatchDownloader.log | SU/NAP | Records details about the process of downloading software updates from the update source to the download destination on the site server. | The computer hosting the Configuration Manager console from which downloads are initiated |
| PolicyEvaluator.log | SU/NAP | Records details about the evaluation of policies on client computers, including policies from software updates. | Client |
| RebootCoordinator.log | SU/NAP | Records details about the coordination of system restarts on client computers after software update installations. | Client |
| ScanAgent.log | SU/NAP | Records details about scan requests for software updates, the WSUS location, and related actions. | Client |
| SdmAgent.log | SU/NAP | Records details about tracking of remediation and compliance. However, the software updates log file, Updateshandler.log, provides more informative details about installing the software updates required for compliance. | Client |
| ServiceWindowManager.log | SU/NAP | Records details about the evaluation of maintenance windows. | Client |
| smssha.log | SU/NAP | The main log file for the Configuration Manager Network Access Protection client and it contains a merged statement of health information from the two Configuration Manager components: location services (LS) and the configuration compliance agent (CCA). This log file also contains information about the interactions between the Configuration Manager System Health Agent and the operating system NAP agent, and also between the Configuration Manager System Health Agent and both the configuration compliance agent and the location services. It provides information about whether the NAP agent successfully initialized, the statement of health data, and the statement of health response. | Client |
| Smsshv.log | SU/NAP | This is the main log file for the System Health Validator point and records the basic operations of the System Health Validator service, such as the initialization progress. | Site system server |
| Smsshvadcacheclient.log | SU/NAP | Records details about the retrieval of Configuration Manager health state references from Active Directory Domain Services. | Site system server |
| SmsSHVCacheStore.log | SU/NAP | Records details about the cache store used to hold the Configuration Manager NAP health state references retrieved from Active Directory Domain Services, such as reading from the store and purging entries from the local cache store file. The cache store is not configurable. | Site system server |
| smsSHVQuarValidator.log | SU/NAP | Records client statement of health information and processing operations. To obtain full information, change the registry key LogLevel from 1 to 0 in the following location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMSSHV\Logging\@GLOBAL | Site system server |
| smsshvregistrysettings.log | SU/NAP | Records any dynamic change to the System Health Validator component configuration while the service is running. | Site system server |
| SMSSHVSetup.log | SU/NAP | Records the success or failure (with failure reason) of installing the System Health Validator point. | Site system server |
| SmsWusHandler.log | SU/NAP | Records details about the scan process for the Inventory Tool for Microsoft Updates. | Client |
| StateMessage.log | SU/NAP | Records details about software updates state messages that are created and sent to the management point. | Client |
| SUPSetup.log | SU/NAP | Records details about the software update point installation. When the software update point installation completes, Installation was successful is written to this log file. | Site system server |
| UpdatesDeployment.log | SU/NAP | Records details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface. | Client |
| UpdatesHandler.log | SU/NAP | Records details about software update compliance scanning and about the download and installation of software updates on the client. | Client |
| UpdatesStore.log | SU/NAP | Records details about compliance status for the software updates that were assessed during the compliance scan cycle. | Client |
| WCM.log | SU/NAP | Records details about software update point configurations and connections to the Windows Server Update Services (WSUS) server for subscribed update categories, classifications, and languages. | Site server |
| WSUSCtrl.log | SU/NAP | Records details about the configuration, database connectivity, and health of the WSUS server for the site. | Site system server |
| wsyncmgr.log | SU/NAP | Records details about the software updates synchronization process. | Site server |
| WUAHandler.log | SU/NAP | Records details about the Windows Update Agent on the client when it searches for software updates. | Client |
| wolcmgr.log | Wake On LAN | Records details about which clients need to be sent wake-up packets, the number of wake-up packets sent, and the number of wake-up packets retried. | Site server |
| wolmgr.log | Wake On LAN | Records details about wake-up procedures, such as when to wake up deployments that are configured for Wake On LAN. | Site server |
| CertMgr.log | Intune | Records certificate and proxy account information. | Site server |
| CollEval.log | Intune | Records details about when collections are created, changed, and deleted by the Collection Evaluator. | Primary site and central administration site |
| Cloudusersync.log | Intune | Records license enablement for users. | Computer with the Windows Intune connector |
| Dataldr.log | Intune | Records information about the processing of MIX files. | Site server |
| ddm.log | Intune | Records activities of the discovery data manager. | Site server |
| Distmgr.log | Intune | Records details about content distribution requests. | Top-level site server |
| Dmpdownloader.log | Intune | Records details on downloads from Microsoft Intune. | Computer with the Windows Intune connector |
| Dmpuploader.log | Intune | Records details for uploading database changes to Microsoft Intune. | Computer with the Windows Intune connector |
| hman.log | Intune | Records information about message forwarding. | Site server |
| objreplmgr.log | Intune | Records the processing of policy and assignment. | Primary site server |
| PolicyPV.log | Intune | Records policy generation of all policies. | Site server |
| outgoingcontentmanager.log | Intune | Records content uploaded to Microsoft Intune. | Computer with the Windows Intune connector |
| Sitecomp.log | Intune | Records details of connector role installation. | Site server |
| SmsAdminUI.log | Intune | Records Configuration Manager console activity. | Computer that runs the Configuration Manager console |
| Smsprov.log | Intune | Records activities performed by the SMSÂ Provider. Configuration Manager console activities use the SMSÂ Provider. | Computer with the SMSÂ Provider |
| SrvBoot.log | Intune | Records details about the Widows Intune connector installer service. | Computer with the Windows Intune connector |
| Statesys.log | Intune | Records the processing of mobile device management messages. | Primary site and central administration site |
| WindowsUpdate.log | Windows Update Agent | Records details about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment and whether there are updates to the agent components. | Client |
| Change.log | WSUS Server | Records details about the WSUS server database information that has changed. | WSUS server |
| SoftwareDistribution.log | WSUS Server | Records details about the software updates that are synchronized from the configured update source to the WSUS server database. | WSUS server |
One thought on “SCCM Log files”