Background

I was looking at how to create SCCM collection based on configuration baseline as a validation step before running upgrades on Windows 10 devices.

During this process I wanted to automate collection memberships based on the results of the validation.

It turns out that you can quite easily create SCCM Collection Based on Configuration Baseline.

I’m using this method to verify that our devices fulfill the requirements before assigning the Feature Upgrade.

Solution

All you need to do is navigate to Configuration Baselines to select the baseline you want to use.

Click the Deployments tab and right-click on the deployment name.

Use the Create New Collection option to select what compliance state you want.

This will create a new collection with a query that will contain members based on the compliance state of the baseline.

The new collection will be limited to the target collection of the deployment and the query will look like this.

In my case the CollectionID is the limiting collection and the ComplianceState = 1 equals compliant devices.

If you want to create a collection for all devices that are not compliant, e.g. Unknown, Error and Not Compliant, you can take the query and reverse the ComplianceState =1 to ComplianceState !=”1″

If you want more information you can find related posts here:

• https://docs.microsoft.com/en-us/sccm/compliance/deploy-use/create-configuration-baselines
• http://www.scconfigmgr.com/2017/04/09/configmgr-configuration-baselines-a-beginners-guide