How to create SCCM collections based on Configuration Baseline compliance

posted in: ConfigMgr, SCCM | 0

Background

I was looking at how to create SCCM collection based on configuration baseline as a validation step before running upgrades on Windows 10 devices.

During this process I wanted to automate collection memberships based on the results of the validation.

It turns out that you can quite easily create SCCM Collection Based on Configuration Baseline.

I’m using this method to verify that our devices fulfill the requirements before assigning the Feature Upgrade.

Solution

All you need to do is navigate to Configuration Baselines to select the baseline you want to use.

Click the Deployments tab and right-click on the deployment name.

Showing where to create new collection from context menu

Use the Create New Collection option to select what compliance state you want.

This will create a new collection with a query that will contain members based on the compliance state of the baseline.

The new collection will be limited to the target collection of the deployment and the query will look like this.

Collection query that will result in CB compliant devices.

In my case the CollectionID is the limiting collection and the ComplianceState = 1 equals compliant devices.

If you want to create a collection for all devices that are not compliant, e.g. Unknown, Error and Not Compliant, you can take the query and reverse the ComplianceState =1 to ComplianceState !=”1″

Collection query that will result in CB non-compliant devices

If you want more information you can find related posts here:

Leave a Reply

Your email address will not be published. Required fields are marked *