SCCM Patch Compliance Reports

Updated: 2013-11-20 – Fixes for rdl files and 2012 report, I’ve edited the RDLs but I have no infrastructure currently to test on so feedback is welcome.

I was watching SCCM Guru Episode 9 with Garth Jones, when I saw in his powerpoint presentation two reports for patch compliance that I liked the look of. So I decided to see if I could emulate the reports, I will say here having only seen the final product in his slide my reports will look similar to his, and may even share code, however I have not seen ANY of his code so any similarities here are purely coincidental and not me just copying his code and taking credit.

Report 1: MissingUpdatesByCollection – This report will list the counts of missing updates for all systems in a collection where the updates are listed in the specified update list. This report is set to link to the MachineVulnerabilityReport to provide the ability to drill down. It is worth editing the collections query for this report as currently it is set to show all XP, all Servers and all 2003 servers, which depending on your site be a rather large amount of machines. You may also want to edit the report name field for the link if you rename these reports.

Report 2: MachineVulnerabilityReport – This report will list the missing updates for a specific system where the updates are listed in the specified update list.

As always if you know of any improvements that could be made to the reports or notice any bugs please leave a comment.


  • [download id=”48″]
  • – Now Includes Count error Fix, Thanks to Russ

  • [download id=”54″]
  • – Submitted by Max in Comments section, Untested by me if someone can confirm it works it would be appreciated.

  • [download id=”49″]

51 thoughts to “SCCM Patch Compliance Reports”

  1. Peter,

    All you should need to do is edit the RDL section of MissingUpdatesByCollection below:
    CollectionID = ‘SMS000ES’ — All XP
    CollectionID = ‘SMS000DS’ — All Server Systems
    CollectionID = ‘SMS000FS’ — All Server 2003
    ORDER BY CollectionID
    to include more lines of the following:
    CollectionID = ‘SMS000XX’

    Where XX is the id of the collection. You should be able to get that by right clicking the collection and looking at it’s ID. (If my memory is correct)


Leave a Reply

Your email address will not be published. Required fields are marked *


This blog is kept spam free by WP-SpamFree.