SCOM – Locate Computers in Maintenance

XO — Tue, 01 Oct 2019 16:46:03 +0000

I ran into an issue today where a important production server was not being monitored. As well- when the user placed the object into maintenance mode, they did not include comments. Lastly- the UI does not show who performed the action by default without digging.

So- today, I present to you, a simple powershell function to find all Windows Computers in maintenance mode, and to output a table showing the computer’s name, who placed it into maintenance mode, the start and end time, and comments if available.

Here is the simple script:

function Get-ObjectsInMaintenance
{
    Param(
        [Parameter(Mandatory=$false)][string[]]$excludeFromAccount = $null,
        [Parameter(Mandatory=$false)][string]$ManagementPackClass = "Microsoft.Windows.Computer"
    )
    
    $class = Get-SCOMClass -Name $ManagementPackClass
    $ComputersInMaintenance = Get-SCOMClassInstance -Class $class | Where InMaintenanceMode -eq $true
    ForEach($com in $ComputersInMaintenance)
    {
        $mm = $com | Get-SCOMMaintenanceMode

        #If there are values in excludeFromAccount, match the values against the User field.
        if($excludeFromAccount -ne $null -and $excludeFromAccount -contains $mm.User)
        {
            continue
        }

        
        [pscustomobject]@{
            Name = $com.Name
            Who = $mm.User
            StartTime = $mm.StartTime
            EndTime = $mm.ScheduledEndTime
            Comments = $mm.Comments
        } | Write-Output
    }
}

#Connect to your management group
New-SCOMManagementGroupConnection scom.mydomain.com

#Example 1. Show all Windows Computers in Maintenance Mode.
Get-ObjectsInMaintenance | Format-Table

##Example 2. Show all Windows Computers in Maintenance Mode, EXCEPT, if my account performed the action.
Get-ObjectsInMaintenance -excludeFromAccount 'MyDomain\AccountToExclude1' | Format-Table

##Example 3. Show all Windows Computers in Maintenance Mode, EXCEPT, by multiple accounts
Get-ObjectsInMaintenance -excludeFromAccount 'MyDomain\AccountToExclude1','MyDomain\AccountToExclude2' | Format-Table

#Example 4. Show all Unix objects in Maintenance Mode
Get-ObjectsInMaintenance -ManagementPackClass "Microsoft.Unix.Computer" | Format-Table

For the above script, it is capable of filtering out any number of potential accounts, which is handy if you don’t want to audit yourself, or a trusted service-account.

As well- while it defaults to microsoft.windows.computer, you can specify any separate management pack class to view.

Lastly- the above script does not include any error handling to validate you provided a valid class, or you have a valid connection… etc. Just sharing my simple cmdlet for anybody who may benefit from it.

Collection Membership based on Folder Existing

XO — Tue, 03 Feb 2015 21:33:19 +0000

Here is an old example I created back in 2015, to populate a collection based on devices who have a folder present. As apart of the migration to this new blog- it has been reposted here.

Ever had the need to create a SCCM collection based on if a folder exists on a system?

Well, its quite easy.

Under Criteria, Select Software Files.
Select your Value as File Path

Remember to use your wildcard! “%”

The end query will resemble this:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client 
FROM SMS_R_System inner join SMS_G_System_SoftwareFile on SMS_G_System_SoftwareFile.ResourceId = SMS_R_System.ResourceId 
WHERE SMS_G_System_SoftwareFile.FilePath LIKE "C:\\Temp\\%"

System Center – XtremeOwnage

SCOM – Locate Computers in Maintenance

Collection Membership based on Folder Existing