< Blog

SCCM Maintenance Tasks

This time of year is a good time (when things are a bit slow) to check Configuration Manager’s (SCCM) environment to ensure that everything is working well. We all know that we should be doing this every week or month, but there never seems to be enough time in the day. Day-to-day activities always seem to get in the way! However, to help us out, Microsoft produced a guide that lists a number of SCCM maintenance tasks.

The guide is great, but I find that it doesn’t give enough detail. Instead, each year, I refer to a list that I put together some time ago. This year is no different! My SCCM maintenance tasks list is designed to start at the top of the console and move down node by node. Recently, while performing these maintenance tasks for my lab, I noticed that my ADR rules failed. Thank goodness I discovered this problem!

Keep in mind that these SCCM maintenance tasks will take a good part of a day or longer to complete. This is especially true if you have a large environment. However, this is time well spent! Hopefully, these tests will show that your environment is a good and healthy one as of January 2018. If it is not, then at least you will know what to work on in 2018.

SCCM Maintenance Tasks - List

SCCM Maintenance Tasks Checklist

Assets and Compliance

Collections

-Open the All Systems collection and review the list of all computers WITHOUT the SCCM client installed. You will likely find at least one computer that should have the SCCM client installed that doesn’t.
-Review all collections; update query and schedule settings.
-Review maintenance windows on each collection.
-Remove unnecessary collections.

Asset Intelligence

-Review and confirm your Asset Intelligence (AI) inventory classes.
-Confirm that your AI sync point has run recently.

Software Metering

-Review and update your Software Metering (SWM) rules.
-Remove any unnecessary rules.

Compliance Setting

-Review and update your Configuration Baselines and Configuration Items (CI).
-Remove any unnecessary baselines or CI.

Endpoint Protection

-Review and update your anti-malware policies.
-Review and update your Windows Defender firewall policies.
-Review and update your Windows Defender ATP policies.

Software Library

Applications and Deployments

-Review all of your Applications and Deployments. This might mean that you need to review your Collections too.
-Remove any unnecessary applications or packages.

Software Updates

-Review and adjust any Software Update (SU) groups and Automatic Deployment Rules (ADR).
-Review and adjust any SU deployment groups or packages.
-Remove any unused SU groups.
-Remove any unused SU packages.
Later down the checklist you will be asked to review what SUs are being scanned.

Operating Systems

-Review and update any Operating System (OS) objects: Driver packages, OS images (this might be a good time to ensure that your base OS image has all SUs applied to it), boot images, and task sequences (TS).
-Remove any unnecessary WIMs.
-Remove any unnecessary driver packages.
-Remove any unwanted TS.

Windows 10 Servicing

-Review Windows 10 updates.
-Review and update service plans.
-Review and update Windows update for business policies.

Office 365 Client Management

-Review and adjust any Office 365 SUs.

Monitoring

Alerts

-Review all Active Alerts.
-Review and adjust all alert subscriptions.

Queries

-Review and remove unused queries.

Reporting

-Review custom reports.
-Review subscriptions.

Site Hierarchy

-Review your Site Status and Component Status.
-Review your Conflicting Records under Site Status.

Deployment

-Take a quick look at the Deployment Status; ensure that the results are what you are expecting.

Database Replication

-Take a quick look at the Database Replication Status, if applicable; ensure the results are what you are expecting.

Distribution

-Closely review your Content Status and make sure that your compliance level is 100% for all packages. If not, find out why it isn’t.

Software Update Point Synchronization

-Review your Software Update Point Synchronization Status.

Security

-Review the Security Dashboard and take appropriate action if necessary.

SCCM Maintenance Tasks - Check Mark

Administration

Updates and Servicing (SCCM Current Branch only)

-Ensure that you have applied the latest updates.

Hierarchy and Configuration

-Review and adjust Discovery Methods.
-Review and adjust Boundaries.
-Review and adjust Boundary Groups.
-Review and adjust Exchange Server Connections.
-Review and adjust Database Replication.
-Review and adjust File Replication.
-Review and adjust Active Directory Forest settings.

Cloud Services

-Review the Cloud Services node items.

Site Configuration

-Review all of the SCCM maintenance tasks in the Microsoft guide.
-Review all of the Site Roles.
-Review what SUs, products and classifications are being scanned.

Client Settings

-Review and adjust, if necessary, the client settings.

Security

-Review and adjust, if necessary, Administrative Users.
-Review and adjust, if necessary, Security Roles.
-Review the accounts within the Accounts node.
-Remove any unnecessary Accounts.

Distribution Point and Distribution Point Groups

-Review Distribution Points.
-Review and adjust, if necessary, Distribution Point Groups.

SCCM Servers

On each SCCM server within your SCCM environment:
-Logon to each server.
-Check the Event Viewer for any issues.
-Check the free space on all drives.
-Review the SCCM log files.

SQL Servers

On each SQL Server within your SCCM environment:
-Logon to each server.
-Check the Event Viewer for any issues.
-Check the free space on all drives.
-Review the SCCM and SQL Server log files.
-Review and adjust the SQL Server backup if necessary.
-Ensure that SQL Server re-indexing is done either by SCCM maintenance tasks or by
SQL Server Job.
-Ensure that the SQL Server database has
defined size limits.
-Check that you are
backing-up SSRS reports.
-Ensure that your SSRS database is configured for
simple logging.

WSUS Servers

On each WSUS server within your SCCM environment:
-Logon to each server.
-Check the Event Viewer for any issues.
-Check the free space on all drives.
-Review the SCCM and WSUS log files.
-Review and adjust the SQL Server backup if necessary.

SCCM Maintenance Tasks - SCCM Console

If you have any questions about these SCCM maintenance tasks, please feel free to contact me @GarthMJ.