WQL Query for Devices with Configuration Manager Client Installed and no System Center Endpoint Protection Installed
We have had a report that one of our WQL queries has not been working correctly, this is the one for devices that have Configuration Manager client installed but do not have System Center Endpoint Protection installed on them.
The original post is here:
So, we have looked into this and found the fault, we have now updated the original post, but in case you want quick access to it, below is the updated and confirmed working WQL query.
select <br /> SMS_R_SYSTEM.ResourceID,<br /> SMS_R_SYSTEM.ResourceType,<br /> SMS_R_SYSTEM.Name,<br /> SMS_R_SYSTEM.SMSUniqueIdentifier,<br /> SMS_R_SYSTEM.ResourceDomainORWorkgroup,<br /> SMS_R_SYSTEM.Client<br /> from SMS_R_System<br /> inner join SMS_G_System_COMPUTER_SYSTEM<br /> on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId<br /> where SMS_G_System_COMPUTER_SYSTEM.Name in<br /> (select distinct<br /> SMS_G_System_COMPUTER_SYSTEM.Name<br /> from SMS_R_System<br /> inner join SMS_G_System_COMPUTER_SYSTEM<br /> on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId<br /> inner join SMS_G_System_ADD_REMOVE_PROGRAMS<br /> on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId<br /> where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "System Center 2012 Endpoint Protection" )<br /> and SMS_R_System.Client = 1 <br />
This query can now be used to create a collection then you can deploy System Center Endpoint Protection to this collection to ensure all devices within the collection then get Endpoint installed.
To find out how to add System Center Endpoint Protection as an application to your Configuration Manager so that you can deploy it to a collection, then please see the post below:
If you have any comments or questions or if you do find a problem with this query, please feel free to leave a comment below using our Disqus system and we will get back to you as soon as we can.