SCCM Software Update Point Dashboard - PowerBI Version
Overview
The PowerBI version of the SCCM Software Update Point dashboard is now finally here.
There are some great enhancements to this version alongside the benefits of PowerBI providing a more real-time and interactive visual data structure to its dashboard.
This time around there is more detail to the user for where there WSUS/Software Update architecture for SCCM can be viewed to know exactly what their health state is.
Embedded Error Handling
In the SQL Report builder version of this dashboard, it required you to add an additional database to use the exports of all of the errors from windows so that you were able to translate all of the errors that came from any part of SCCM.
This time around the error codes and descriptions are now embedded into the report so there is no longer a need for this and any errors which happen will be able to be shown in any section that details a "Last Error Code" and followed by an "Error Code Meaning" section.
How to Use for your environment
The data source and database connection settings will need to be changed.
Edit Data Source Settings
- Select File - Options and Settings - Data Source Settings
- Click change source to change the server name and database name.
- Click edit permissions to change the connection settings credentials
Front Page
https://irp-cdn.multiscreensite.com/c1f89e50/dms3rep/multi/desktop/FrontPage-1268x673.PNGFigure 1.1 - Front Page of the Dashboard
The first page is the front page of the dashboard.
It provides the user with a "Table of Contents" type of structure where a user can observe the titles and descriptions of each page which is available and the detail it will show.
The user can then click on the arrow and this will take them to the page which they require.
WSUS Sync Catalog Compliance
https://irp-cdn.multiscreensite.com/c1f89e50/dms3rep/multi/desktop/WSUSSync-2104x1152.PNGFigure 1.2 - WSUS Sync Catalog Compliance Page
This page will display all of the latest synchronized updates which come into WSUS within the last 7 days and will also display the declined updates within the last 7 days.
The charts can provide a drill down to each update that has been part of the latest synchronization and also categorized by the type of updates that have been synchronized.
Below are details of the WSUS server which has performed the synchronization as well as the details of latest sync and displaying any error codes if it had failed.
ADR (Automatic Deployment Rules) compliance section displays all of your rules which automatically pull down updates and deploy them to the machines/collections which require it. As ADR rules can sometimes generate errors more frequent the error handling will provide a great description for this if it does fail.
WSUS Cleanup Health State
https://irp-cdn.multiscreensite.com/c1f89e50/dms3rep/multi/desktop/WSUSHealht-2092x1161.PNGFigure 1.3 - WSUS Cleanup Health State Page
Huge enhancements on the PowerBI version of this dashboard.
*Additional Gauges on Obsolete Object Counts
*In this page, we have gauges for the following
- Obsolete Updates Count - Count of updates which are no longer being used in WSUS which can be cleaned up.
- Dead Deployments - Deployments which have lapsed/ended and no longer needed end up becoming obsolete and also add to the cleanup required.
- Deleted Computer Objects - Old computer objects show in this count which will need its data removed from the database.
*WSUS Services Health
*This table shows a list of the WSUS services which are running at the moment.
*WSUS DB Space
*This table shows the size of your SUSDB and provides details on the location of where it is stored and also the free space which is on the disk it resides on. So you'll be able to see when the SUSDB gets too big as well as when its parent disk space also runs.
*WSUS Tables Require Re-Indexing
*This table shows a list of all of the tables which require indexing and are grouped by tables which are taking between 50%-80% of the space within the SUSDB. This is a great indicator to show overall as and when to run a re-indexing of your SUSDB.
Software Update Deployment Forecast
https://irp-cdn.multiscreensite.com/c1f89e50/dms3rep/multi/desktop/Forecast-2262x1192.PNG
Overall summary of all of the devices within a collection that the user can freely select from the drop-down list, detailing all of the devices that are online.
This provides a forecast to any potential deployments which you roll out whether being application deployments or software update deployments. But as this section contains a chart for last scan states this zones more specifically within Software update deployments.
After this, some summarised stats will show which will determine
- Total devices in Collection
- Online devices in the collection
- Devices that have had no hardware scan
- Devices that have been inactive for 30 days or longer
- Devices with failed WSUS scans
- Total devices which will potentially have a successful deployment on your next run
Windows Defender Definition Compliance
https://irp-cdn.multiscreensite.com/c1f89e50/dms3rep/multi/desktop/Defender_FWWi75y3SraFvPanpFrh-2137x1185.PNGFigure 1.5 - Windows Defender Definition Updates Compliance
Selecting from the list above which is filtered by collections which specifically focus on the Windows Defender deployment and it will provide a huge wealth of details for its compliance.
*Compliance Summary
*The first part shows an overall of the health of the devices in terms of definition update compliance, malware health state, risk count and also not supported numbers.
*Latest Definition Update Deployment
*This part will show the latest definition update which is available to the machines and currently being deployed to the machines which have been synchronized into the SCCM estate whether by normal deployment or through the processing of ADR rules.
*Windows Defender Charts Summary
*Several charts which are displayed across to give a visualized breakdown of the following
- Windows Defender Definition Compliance - Shows all devices which have the latest definitions which are between 1-3 days old, 3-7 days old and older than 7 days
- Windows Definition Client Version - Chart which displays all of the client versions of Windows Defender.
- Windows Defender Malware Detection - Displays all of the devices which have malware detected on them
*Windows Defender Device Compliance Table
*A full summary table showing all of the devices for that collection and displaying more detail to its Windows Defender details such as full scans and signature ages.
Current Software Update Deployments
Choose your software update deployment from the drop-down list and you will then see a pie chart which will display all of the compliance levels of the updates and the corresponding assignment deployment aimed at that collection.
You will see the following categories;
- Num Compliant
- Num Non-Compliant
- Num Pending
- Num Unkown
Software Updates Deploying
Below is also a table which shows all of the updates which are included within that assignment so you can see exactly what is being deployed to your collection,
Software Update & Device Compliance
https://irp-cdn.multiscreensite.com/c1f89e50/dms3rep/multi/desktop/UpdaateDeviceCompliance-2115x1181.PNGFigure 1.7 - Software Update & Device Compliance
This page is new to the dashboard which i had released previously.
This is compliance based on a sole device which you can select from the drop-down list and it will provide you the following;
*Hardware Summary
*The first section gives an overall summary of its hardware which is everything from its CPU, Memory, Disk Space and Network Address details alongside Manufacturer, Model and Operating System and build number.
*Current Deployments
*Displays the current software update assignments which are applicable to that device. Which will show and be displayed by its assignment name, similar to the previous page for the Current Software Update Deployments.
*Software Updates Being Deployed
*Here you can see exactly which updates are being pushed to the computer which you have selected which also correspond to the software update deployment assignments which the device is involved with.
*Software Updates Installed on Device
*The bottom section shows all of the software updates which are installed on the machine so you can have an idea on its compliance when it comes to the oldest and last patch that the machine had received.
Optional - Additional Error Codes
Due to the limit of PowerBI having a 2999 cell limit for manual data, there is another error codes spreadsheet which comes alongside this dashboard which can be added as an extra data source.
Add Spreadsheet as Data Source
- Open Get Data Source
- Click Excel
- Browse to the error codes spreadsheet
Join to Tables with Errors
The two main pages which require the error code translation are primarily the WSUS Sync Catalog Compliance for its "SynchronizationResults" and "ADRResults" queries and the Software Deployment Forecast page for its "LastScanStates" query.
- Click Edit Queries - Edit Queries
- Go to the query you wish to edit and select Merge Queries
- Select the Error Code column, then select the errorcodes_final query and select the correct error code column (can vary with the hexadecimal and standard error code column)
- Make sure Left Outer is selected.
- Click OK
- Click Close and Apply
Then it should all refresh with the error codes resolving.
(Note: May not contain all error codes)
Where to Download
This can be downloaded on the Technet Gallery below
https://gallery.technet.microsoft.com/SCCM-Software-Update-8db3e98d