Configuration Manager 2012 - Troubleshooting Log Files

Abaixo podem encontrar um sumário com os logs do Configuration Manager 2012 (alguns novos e outros já conhecidos).

 

A documentação deixada aqui apesar de já bastante completa ainda é uma pre-release:

 

Não hesitem em classificar este artigo e deixar o vosso comentário!

Espero ter ajudado! :) 

 

 

Client Operations


The following table lists the log files found on the Configuration
Manager client.

Log name

Description

CAS.log

Content Access service. Maintains the local package cache on the  client.

Ccm32BitLauncher.log

Records actions for starting applications on the client marked as "run as 32bit".

CcmEval.log

Records Configuration Manager agent health evaluation activities  and details for components that are required by the Configuration Manager  agent.

CcmEvalTask.log

Records the Configuration Manager agent health evaluation  activities triggered by the evaluation scheduled task.

CcmExec.log

Records activities of the client and the SMS Agent Host service.

Ccmperf.log

Records activities related to the maintenance and capture of  data related to client performance counters.

CcmRestart.log

Records client agent service restart activity.

CCMSDKProvider.log

Records activities for client agent SDK interfaces.

CertificateMaintenance.log

Maintains certificates for Active Directory Domain Services and  management points.

CIDownloader.log

Records details about configuration item definition downloads.

CITaskMgr.log

Records tasks that are initiated for each application and  deployment type - such as content download or install or uninstall actions.

ClientAuth.log

Records the signing and authentication activity for the client  agent.

ClientIDManagerStartup.log

Creates and maintains the client GUID and identifies tasks  performed during client registration and assignment.

ClientLocation.log

Records tasks related to the clients site assignment.

CMHttpsReadiness.log

Records the results of running the Configuration Manager HTTPS  Readiness Assessment Tool. This tool checks whether computers have a PKI  client authentication certificate that can be used for Configuration Manager.

CmRcService.log

Records information for the remote control service.

ContentTransferManager.log

Schedules the Background Intelligent Transfer Service (BITS) or  the Server Message Block (SMB) to download or to access SMS packages.

DataTransferService.log

Records all BITS communication for policy or package access.

EndpointProtectionAgent

Records information about the installation of the Endpoint  Protection client and the application of antimalware policy to that client.

execmgr.log

Records details about legacy packages and task sequences that  run on the client.

ExpressionSolver.log

Records details about enhanced detection methods that are used  when verbose or debug logging is enabled.

FileBITS.log

Records all SMB package access tasks.

FileSystemFile.log

Records the activity of the Windows Management Instrumentation  (WMI) provider for software inventory and file collection.

FSPStateMessage.log

Records the activity for state messages sent to the fallback  status point by the client agent.

InternetProxy.log

Records the network proxy configuration and usage activity for  the client agent.

InventoryAgent.log

Records activities of hardware inventory, software inventory,  and heartbeat discovery actions on the client.

LocationCache.log

Records the activity for location cache usage and maintenance  for the client agent.

LocationServices.log

Records the client activity for locating management points,  software update points, and distribution points.

MaintenanceCoordinator.log

Records the activity for general maintenance task activity for  the client agent.

Mifprovider.log

The WMI provider for .MIF files.

mtrmgr.log

Monitors all software metering processes.

PolicyAgent.log

Records requests for policies made by using the Data Transfer  service.

PolicyAgentProvider.log

Records policy changes.

PolicyEvaluator.log

Records details about the evaluation of policies on client  computers, including policies from software updates.

PolicyPlatformClient.log

Records the process of remediation and compliance for all  providers located in %Program Files%\Microsoft Policy Platform, except  the file provider.

PolicySdk.log

Records activities for policy system SDK interfaces.

PwrProvider.log

Shows the activities of the power management provider  (PWRInvProvider) hosted in the Windows Management Instrumentation (WMI)  service. On all supported versions of Windows, the provider enumerates the  current settings on computers during hardware inventory and applies power  plan settings.

RemoteControl.log

The primary log for remote control.

SCClient_<domain>@<username>_1.log

Records the activity in Software Center for the indicated user  on the client computer.

SCClient_<domain>@<username>_2.log

Records the historical activity in Software Center for the  indicated user on the client computer.

Scheduler.log

Records schedule tasks for all client operations.

SCNotify_<domain>@<username>_1.log

Records the activity for notifying users about software and  updates for the indicated user.

SCNotify_<domain>@<username>_1-<date_time>.log

Records the historical information for notifying users about  software and updates for the indicated user.

setuppolicyevaluator.log

Records configuration and inventory policy creation in WMI.

smscliui.log

Records usage of the Configuration Manager applet in Control  Panel.

SrcUpdateMgr.log

Records activity for installed Windows Installer applications  that are updated with current distribution point source locations.

StatusAgent.log

Records status messages that are created by the client  components.

SWMTRReportGen.log

Generates a usage data report that is collected by the metering  agent. (This data is logged in Mtrmgr.log.)

UserAffinity.log

Records details about user device affinity.

VirtualApp.log

Records information specific to the evaluation of App-V  deployment types.

 

 

Client Installation Log Files


The following table lists the log files that contain information
related to the installation of the Configuration Manager client.

Log name

Description

ccmsetup.log

Records ccmsetup tasks for client setup, client health  and remediation, client upgrade, and client removal. Can be used to  troubleshoot client installation problems.

CcmRepair.log

Records the repair activities of the client agent.

client.msi.log

Records setup tasks performed by client.msi. Can be used to  troubleshoot client installation or removal problems.

 

Site Server and Site System Server Logs


The following table lists the log files found on the Configuration
Manager site server and site system servers.

Log name

Description

Computer with log file

adctrl.log

Records enrollment processing activity.

Site server

ADForestDisc.log

Records Active Directory Forest Discovery actions.

Site server

ADService.log

Records account creation and security group details in Active  Directory.

Site server

adsgdis.log

Records Active Directory Security Group Discovery actions.

Site server

adsysdis.log

Records Active Directory System Discovery actions.

Site server

adusrdis.log

Records Active Directory User Discovery actions.

Site server

ccm.log

Records client push installation activities.

Site server

CertMgr.log

Records the certificate activities for intra-site  communications.

Site system server

chmgr.log

Records activities of the client health manager.

Site server

Cidm.log

Records changes to the client settings by the Client Install  Data Manager (CIDM).

Site server

colleval.log

Records details about when collections are created, changed, and  deleted by the Collection Evaluator.

Site server

compmon.log

Records the status of component threads monitored for the site  server.

Site system server

compsumm.log

Records Component Status Summarizer tasks.

Site server

ComRegSetup.log

Records the initial installation of COM registration results for  a site server.

Site system server

ConfigMgrPrereq.log

Records pre-requisite component evaluation and installation  activities.

Site server

dataldr.log

Records information about the processing of Management  Information Format (MIF) files and hardware inventory in the Configuration  Manager database.

Site Server

ddm.log

Records activities of the discovery data manager.

Site server

despool.log

Records incoming site-to-site communication transfers.

Site server

distmgr.log

Records details about package creation, compression, delta  replication, and information updates.

Site server

EPCtrlMgr.log

Records information about the synchronization of malware threat  information from the Endpoint Protection site system role server into the  Configuration Manager database.

Site server

EPMgr.log

Records the status of the Endpoint Protection site system role.

Site system server

EPSetup.log

Provides information about the installation of the Endpoint  Protection site system role.

Site system server

EnrollSrv.log

Records activities of the Enrollment service process.

Site system server

EnrollWeb.log

Records activities of the enrollment website process.

Site system server

fspmgr.log

Records activities of the fallback status point site system  role.

Site system server

hman.log

Records information about site configuration changes, and the  publishing of site information in Active Directory Domain Services.

Site server

Inboxast.log

Records the files that are moved from the management point to  the corresponding INBOXES folder on the site server.

Site server

inboxmgr.log

Records file transfer activities between inbox folders.

Site server

inboxmon.log

Records the processing of inbox files and performance counter  updates.

Site server

invproc.log

Records the forwarding of MIF files from a secondary site to its  parent site.

Site server

migmctrl.log

Records information for Migration actions involving migration  jobs, shared distribution points, and distribution point upgrades.

The top-level site in the System Center 2012 Configuration  Manager hierarchy, and each child primary site

  

   

   

Note

   

  

  

   

   

In a multi-primary site hierarchy, use the log file created at    the central administration site.

   

  

mpcontrol.log

Records the registration of the management point with WINS.  Records the availability of the management point every 10 minutes.

Site system server

mpfdm.log

Records the actions of the management point component that moves  client files to the corresponding INBOXES folder on the site server.

Site system server

mpMSI.log

Records details of about the management point installation.

Site server

MPSetup.log

Records the management point installation wrapper process.

Site server

netdisc.log

Records Network Discovery actions.

Site server

NotiCtrl.log

Site server

ntsvrdis.log

Records the discovery activity of site system servers.

Site server

Objreplmgr

Records the processing of object change notifications for  replication.

Site server

offermgr.log

Records advertisement updates.

Site server

offersum.log

Records the summarization of deployment status messages.

Site server

OfflineServicingMgr.log

Records the activities of applying updates to operating system  image files.

Site server

outboxmon.log

Records the processing of outbox files and performance counter  updates.

Site server

PerfSetup.log

Records the results of the installation of performance counters.

Site system server

PkgXferMgr.log

Records the actions of the SMS Executive component that is  responsible for sending content from a primary site to a remote distribution  point.

Site server

policypv.log

Records updates to the client policies to reflect changes to  client settings or advertisements.

Primary Site Server

rcmctrl.log

Records the activities of database replication between sites in  the hierarchy.

Site server

replmgr.log

Records the replication of files between the site server  components and the Scheduler component.

Site server

ResourceExplorer.log

Records errors, warnings, and information about running the  Resource Explorer.

The computer that runs the Configuration Manager console

ruleengine.log

Records details about Auto Deployment Rules around the  identification, content download, and update group and deployment creation.

Site server

Sched.log

Records details about site-to-site job and package replication.

Site server

schedule.log

Records the activities for standard sender content scheduling  jobs.

Site server

sdkinst.log

Computer with the SMS Provider

sender.log

Records the files that transfer by file-based replication  between sites.

Site server

sinvproc.log

Records information about the processing of software inventory  data to the site database.

Site server

sitecomp.log

Records details about the maintenance of the installed site  components on all site system servers in the site.

Site server

sitectrl.log

Records site setting changes made to site control objects in the  database.

Site server

sitestat.log

Records the availability and disk space monitoring process of  all site systems.

Site server

SmsAdminUI.log

Records Configuration Manager console activity.

The computer that runs the Configuration Manager console

SMSAWEBSVCSetup.log

Records the installation activities of the application catalog  web service.

Site system server

smsbkup.log

Records output from the site backup process.

Site server

smsdbmon.log

Records database changes.

Site server

SMSENROLLSRVSetup.log

Records the installation activities of the enrollment web  service.

Site system server

SMSENROLLWEBSetup.log

Records the installation activities of the enrollment website.

Site system server

smsexec.log

Records the processing of all site server component threads.

Site server or site system server

SMSFSPSetup.log

Records messages generated by the installation of a fallback  status point.

Site system server

SMSPORTALWEBSetup.log

Records the installation activities of the application catalog  web site.

Site system server

SMSProv.log

Records WMI provider access to the site database.

Computer with the SMS Provider

smstsvc.log

Records information about the installation, use, and removal of  a Windows service that is used to test network connectivity and permissions  between servers, using the computer account of the server initiating the  connection.

Site server and site systems

srsrpMSI.log

Records detailed results of the reporting point installation  process from the MSI output.

Site system server

srsrpsetup.log

Records results of the reporting point installation process.

Site system server

Srvacct.log

Records the maintenance of accounts when the site uses standard  security.

Site server

statesys.log

Records the processing of state system messages.

Site server

statmgr.log

Records the writing of all status messages to the database.

Site server

swmproc.log

Records the processing of metering files and settings.

Site server

 

 

Site Server Installation Log Files


The following table lists the log files that contain information
related to site installation.

Log name

Description

Computer with log file

ConfigMgrSetup.log

Records detailed output from site server setup.

Site Server

ConfigMgrSetupWizard.log

Records information related to activity in the Setup wizard UI.

Site Server

SMS_BOOTSTRAP.log

Records information about the progress of launching the  secondary site installation process. Details of the actual setup process are  contained in ConfigMgrSetup.log.

Site Server

 

Fallback Status Point Logs Files


The following table lists the log files that contain information
related to the fallback status point.

Log name

Description

Computer with log file

fspMSI.log

Records messages generated by the installation of a fallback  status point.

Site system server

fspmgr.log

Records activities of the fallback status point site system  role.

Site system server

 

Management Point Logs Files


The following table lists the log files that contain information
related to the management point.

Log name

Description

Computer with log file

CcmIsapi.log

Records client messaging activity on the endpoint.

Site system server

MP_CliReg.log

Records the client registration activity processed by the  management point.

Site system server

MP_Ddr.log

Records the conversion of XML.ddr records from clients, and  copies them to the site server.

Site system server

MP_Framework.log

Records the activities of the core management point and client  framework components.

Site system server

MP_GetAuth.log

Records client authorization activity.

Site system server

MP_GetPolicy.log

Records policy request activity from client computers.

Site system server

MP_Hinv.log

Records details about the conversion of XML hardware inventory  records from clients and the copy of those files to the site server.

Site system server

MP_Location.log

Records location request and reply activity from clients.

Site system server

MP_OOBMgr.log

Records the management point activities related to receiving OTP  from a client.

Site system server

MP_Policy.log

Records policy communication.

Site system server

MP_Relay.log

Records the transfer of files that are collected from the client.

Site system server

MP_Retry.log

Records the hardware inventory retry processes.

Site system server

MP_Sinv.log

Records details about the conversion of XML software inventory  records from clients and the copy of those files to the site server.

Site system server

MP_SinvCollFile.log

Records details about file collection.

Site system server

MP_Status.log

Records details about the conversion of XML.svf status message  files from clients and the copy of those files to the site server.

Site system server

mpcontrol.log

Records the registration of the management point with WINS.  Records the availability of the management point every 10 minutes.

Site server

mpfdm.log

Records the actions of the management point component that moves  client files to the corresponding INBOXES folder on the site server.

Site system server

mpMSI.log

Records details of about the management point installation.

Site server

MPSetup.log

Records the management point installation wrapper process.

Site server

 

Software Update Point Log Files


he following table lists the log files that contain information
related to the software update point.

Log name

Description

Computer with log file

objreplmgr.log

Records details about the replication of software updates  notification files from a parent to child sites.

Site server

PatchDownloader.log

Records details about the process of downloading software  updates from the update source to the download destination on the site  server.

The computer hosting the Configuration Manager console from  which downloads are initiated

ruleengine.log

Records details about Auto Deployment Rules around the  identification, content download, and update group and deployment creation.

Site server

SUPSetup.log

Records details about the software update point installation.  When the software update point installation completes, Installation was successful is written to this log file.

Site system server

WCM.log

Records details about the software update point configuration  and connections to the Windows Server Update Services (WSUS) server for  subscribed update categories, classifications, and languages.

Site server that connects to the Windows Server Update Services  (WSUS) server

WSUSCtrl.log

Records details about the configuration, database connectivity,  and health of the WSUS server for the site.

Site system server

wsyncmgr.log

Records details about the software updates synchronization  process.

Site system server

WUSSyncXML.log

Records details about the Inventory Tool for the Microsoft  Updates synchronization process.

The client computer configured as the synchronization host for  the Inventory Tool for Microsoft Updates.

Application Management


The following table lists the log files that contain information
related to Application Management.

Log name

Description

Computer with log file

AppDiscovery.log

Client

AppIntentEval.log

Records details about the current state, applicability (weather  requirements were met or not) as well as desired state of applications, deployment  types and their dependencies.

Client

AppProvider.log

Records details about attempted installs and uninstalls of  application deployment types. In addition, it will contain details on  detection method evaluation.

Client

awebsctl.log

Records the monitoring activities for the application catalog  web service point site system role.

Site system server

awebsvcMSI.log

Records detailed installation information for the application  catalog web service point site system role.

Site system server

Ccmsdkprovider.log

Records the activities of the application management SDK.

Client

colleval.log

Records details about when collections are created, changed, and  deleted by the Collection Evaluator.

Site system server

ConfigMgrSoftwareCatalog.log

Records the activity of the application catalog component,  including its use of Silverlight.

Client

portlctl.log

Records the monitoring activities for the application catalog  website point site system role.

Site system server

portlwebMSI.log

Records the MSI installation activity for the application  catalog website role.

Site system server

PrestageContent.log

Records the details about the use of the ExtractContent.exe tool  on a remote prestaged distribution point. This tool extracts content that has  been exported to a file.

Site system server

ServicePortalWebService.log

Records the activity of the application catalog web service.

Site system server

ServicePortalWebSite.log

Records the activity of the application catalog website.

Site system server

SMSdpmon.log

Records details about the distribution point health monitoring  scheduled task that are configured on a distribution point.

Site server

SoftwareCatalogUpdateEndpoint.log

Records the activities for managing the URL for the application  catalog shown in Software Center.

Client

SoftwareCenterSystemTasks.log

Records the activities for Software Center prerequisite  component validation.

Client

The following table lists the log files that contain information related to
deploying packages and programs.

Log name

Description

Computer with log file

colleval.log

Records details about when collections are created, changed, and  deleted by the Collection Evaluator.

Site server

execmgr.log

Records details about legacy packages and task sequences that  run.

Client

 

Asset Intelligence


The following table lists the log files that contain information
related to Asset Intelligence.

Log Name

Description

Computer with Log File

AssetAdvisor.log

Records the activities of Asset Intelligence inventory actions.

Client

aikbmgr.log

Records details about the processing of XML files from the inbox  for updating the catalog.

Site server

AIUpdateSvc.log

Records the interaction of the Asset Intelligence  synchronization point with SCO (System Center Online), the online web  service.

Site system server

AIUSMSI.log

Records details about the installation of Asset Intelligence  synchronization point site system role.

Site system server

AIUSSetup.log

Records details about the installation of Asset Intelligence  synchronization point site system role.

Site system server

MVLSImport.log

Records details about the processing of imported licensing  files.

Site system server

 

Backup and Recovery


The following table lists log files that contain information
related to backup and recovery actions including site resets, and changes to
the SMS Provider.

Log name

Description

Computer with log file

ConfigMgrSetup.log

Records information about setup and recovery tasks when  recovering a site from backup.

Site server

Smsbkup.log

Records details about the site backup activity.

Site server

smssqlbkup.log

Records output from the site database backup process when SQL  Server is installed on a different server than the site server.

Site database server

Smswriter.log

Records information about the state of the Configuration Manager  VSS writer that is used by the backup process.

Site server

 

Compliance Settings


The following table lists the log files that contain information
related to compliance settings.

Log name

Description

Computer with log file

CIAgent.log

Records details about the process of remediation and compliance  for settings management, software updates and application management.

Client

CITaskManager.log

Records information about configuration item task scheduling.

Client

DCMAgent.log

Records high-level information about the evaluation , conflict  reporting and remediation of desired settings and applications.

Client

DCMReporting.log

Records information about reporting policy platform results into  state messages for configuration items.

Client

DcmWmiProvider.log

Records information about reading configuration item synclets  from Windows Management Instrumentation (WMI).

Client

 

Configuration Manager Console


The following table lists the log files that contain information
related to the Configuration Manager console.

Log name

Description

Computer with log file

ConfigMgrAdminUISetup.log

Computer that runs the Configuration Manager console

SmsAdminUI.log

Computer that runs the Configuration Manager console

Smsprov.log

Records activities performed by the SMS Provider. Administrator  Console activities use the SMS provider.

Site server or site system server

 

Content Management


The following table lists the log files that contain information
related to content management.

Log name

Description

Computer with log file

PrestageContent.log

Records the details about the use of the ExtractContent.exe tool  on a remote prestaged distribution point. This tool extracts content that has  been exported to a file.

Site system role

SMSdpmon.log

Records details about the distribution point health monitoring  scheduled task that are configured on a distribution point.

Site system role

smsdpprov.log

Records details about the extraction of compressed files  received from a primary site. This log is generated by the WMI Provider of  the remote distribution point.

A distribution point server that is not co-located with the site  server.

 

Discovery


he following table lists the log files that contain information
related to Discovery.

Log name

Description

Computer with log file

adsgdis.log

Records Active Directory Security Group Discovery actions.

Site server

adsysdis.log

Records Active Directory System Discovery actions.

Site server

adusrdis.log

Records Active Directory User Discovery actions.

Site server

ADForestDisc.Log

Records Active Directory Forest Discovery actions.

Site server

ddm.log

Records activities of the discovery data manager.

Site server

InventoryAgent.log

Records activities of hardware inventory, software inventory,  and heartbeat discovery actions on the client.

Client

netdisc.log

Records Network Discovery actions.

Site server

 

Endpoint Protection


The following table lists the log files that contain information
related to Endpoint Protection.

Log name

Description

Computer with log file

EndpointProtectionAgent.log

Records details about the installation of the Endpoint  Protection client and the application of antimalware policy to that client.

Client

EPCtrlMgr.log

Records details about the synchronization of malware threat  information from the Endpoint Protection role server into the Configuration  Manager database.

Site system server

EPMgr.log

Monitors the status of the Endpoint Protection site system role

Site system server

EPSetup.log

Provides information about the installation of the Endpoint  Protection site system role.

Site system server

 

Inventory


The following table lists the log files that contain information
related to processing inventory data.

Log name

Description

Computer with log file

dataldr.log

Records information about the processing of Management  Information Format (MIF) files and hardware inventory in the Configuration  Manager database.

Site server

invproc.log

Records the forwarding of MIF files from secondary site to its  parent site.

Secondary site server

sinvproc.log

Records information about the processing of software inventory  data to the site database.

Site server

 

Metering


The following table lists the log files that contain information
related to metering.

Log name

Description

Computer with log file

mtrmgr.log

Monitors all software metering processes.

Site server

 

Migration


The following table lists the log files that contain information
related to migration.

Log name

Description

Computer with log file

migmctrl.log

Records information for Migration actions involving migration  jobs, shared distribution points, and distribution point upgrades.

The top-level site in the System Center 2012 Configuration  Manager hierarchy, and each child primary site

  

   

   

Note

   

  

  

   

   

In a multi-primary site hierarchy, use the log file created at    the central administration site.

   

  

 

Enrollment


The following table lists logs that contain information related to
mobile device enrollment.

Log name

Description

Computer with log file

DMPRP.log

Records communication between management points enabled for  mobile device management and the management point endpoints.

Site system server

dmpmsi.log

Records the windows installer data for setup of a management  point enabled for mobile device management.

Site system server

DMPSetup.log

Records the mobile device management setup process.

Site system server

enrollsrvMSI.log

Records the Windows Installer data for setup of an enrollment  point enabled for mobile device management.

Site system server

enrollmentweb.log

Records communication between devices and the enrollment proxy  point enabled for mobile device management.

Site system server

enrollwebMSI.log

Records the windows installer data for setup of a enrollment  proxy point enabled for mobile device management.

Site system server

enrollmentservice.log

Records communication between enrollment proxy point and  enrollment point enabled for mobile device management.

Site system server

SMS_DM.log

Records communication between devices and the management point  that is enabled for mobile device management.

Site system server

 

Exchange Server Connector


The following table lists logs that contain information related to
the Exchange Server connector.

Log name

Description

Computer with log file

easdisc.log

Records the activities and the status of the Exchange Server  connector.

Site server

 

Mobile Device Legacy


The following table lists logs that contain information related to
the Mobile Device legacy client.

Log name

Description

Computer with log file

DmCertEnroll.log

Records details about certificate enrollment data on Windows CE  device clients.

Client

DMCertResp.htm

Records the HTML response from the certificate server when the  Windows CE device Enroller program requests a client authentication  certificate.

Client

DmClientHealth.log

Records the GUIDs of all the Windows CE clients that are  communicating with the management point enabled for mobile device management. 

Site system server

DmClientRegistration.log

Records registration requests and responses to and from Windows  CE devices.

Site system server

DmClientSetup.log

Records client setup data on Windows CE devices.

Client

DmClientXfer.log

Records client transfer data for Windows CE Device and  ActiveSync deployments.

Client

DmCommonInstaller.log

Records client transfer file installation for setting up Windows  CE device client transfer files on client computers.

Client

DmInstaller.log

Records whether DMInstaller correctly calls DmClientSetup, and  whether DmClientSetup exits with success or failure on Windows CE devices.

Client

DmpDatastore.log

Records all the site database connections and queries made by  the management point enabled for mobile device management.

Site system server

DmpDiscovery.log

Records all the discovery data from the Windows CE device  clients on the management point enabled for mobile device management.

Site system server

DmpHardware.log

Records hardware inventory data from Windows CE devices on the  management point enabled for mobile device management.

Site system server

DmpIsapi.log

Records Windows CE devices communication with management point  enabled for mobile device management.

Site system server

dmpmsi.log

Records the Windows Installer data for setup of a management  point enabled for mobile device management.

Site system server

DMPSetup.log

Records the mobile device management setup process.

Site system server

DmpSoftware.log

Records mobile device software distribution data from mobile  device clients on a management point enabled for mobile device management.

Site system server

DmpStatus.log

Records mobile device status messages data from mobile device  clients on a management point enabled for mobile device management.

Site system server

DmSvc.log

Records Windows CE device client communication with Device  Management server role.

Client

FspIsapi.log

Records details about communications to the fallback status  point from mobile device clients and client computers on the fallback status  Point.

Site system server

 

Operating System Deployment


The following table lists the log files that contain information
related to operating system deployment.

Log name

Description

Computer with log file

ccmsetup.log

Records activities for client agent installation and client  health evaluations.

Client

CreateTSMedia.log

Records details for task sequence media creation.

The computer that runs the Configuration Manager console

Dism.log

Records driver installation actions or update apply actions for  Offline Servicing.

Site system server

Distmgr.log

Records details about PXE configuration.

Site system server

DriverCatalog.log

Records details about device drivers that have been imported  into the driver catalog.

Site system server

mcsisapi.log

Records information for multicast package transfer and client  request responses.

Site system server

mcsexec.log

Records health check, namespace, session creation and  certificate check actions.

Site system server

mcsmgr.log

Records changes to configuration, security mode and availability.

Site system server

mcsprv.log

Records multicast provider interaction with Windows Deployment  Services (WDS).

Site system server

MCSSetup.log

Records details about multicast server role installation.

Site system server

MCSMSI.log

Records details about multicast server role installation.

Site system server

Mcsperf.log

Records details about multicast performance counter updates.

Site system server

MP_ClientIDManager.log

Records management point responses to the client ID requests  task sequences initiated from PXE or boot media.

Site system server

MP_DriverManager.log

Records management point responses to Auto Apply Driver task  sequence action requests.

Site system server

OfflineServicingMgr.log

Records details of Offline Servicing schedules and update apply  actions on operating system .wim files.

Site system server

Setupact.log

Records details about Windows Sysprep and setup logs.

Client

Setupapi.log

Records details about Windows Sysprep and setup logs.

Client

Setuperr.log

Records details about Windows Sysprep and setup logs.

Client

smpisapi.log

Records details about the client state capture and restore  actions as well as threshold information.

Client

Smpmgr.log

Records details about the results of state migration point  health checks and configuration changes.

Site system server

smpmsi.log

Records details about the state migration point and is generated  when the state migration point site system has been created.

Site system server

smpperf.log

Records the state migration point performance counter updates.

Site system server

smspxe.log

Records details about the responses to PXE boot clients and  details about expansion of boot images and boot files.

Site system server

smssmpsetup.log

Records details about the state migration point and is generated  when the state migration point site system has been created.

Site system server

Smsts.log

Records actives the task sequence.

Client

TSAgent.log

Records resolution of task sequence dependencies before  launching task sequence.

Client

TaskSequenceProvider.log

Records details about task sequences when they are imported,  exported, or edited.

Site system server

USMT Log loadstate.log

Records details about the User State Migration Tool (USMT)  regarding the restore of user state data.

Client

USMT Log scanstate.log

Records details about the USMT regarding the capture of user  state data.

Client

 

Site System Roles for Out of Band Management


The following table lists the log files that contain information
related to the Out of Band Management Service Point.

Log name

Description

Computer with log file

amtopmgr.log

Records the activities of the out of band service point relating  to discovery of management controllers, provisioning, audit log control, and  power control commands.

Out of band service point site system server

adctrl.log

Records details about managing Active Directory accounts used by  out of band management .

Site server

ADService.log

Records details about account creation and security group  details in Active Directory.

Site server

amtproxymgr.log

Records details about the activities of the site server relating  to provisioning, the activities of sending instruction files to the out of  band service point, which include the following: Discovery of management  controllers. Provisioning. Audit log control, Power control commands. Shows  the activities related to out of band management site replication. Records  details about the creation of Enrollment records.

Site server

amtspsetup.log

Records details about the installation of the out of band  service point.

Out of band service point site system server

 

Out of Band Management Client Computer Log Files


The following table lists the log files that contain information
about the management of Out of Band Clients.

Log name

Description

Computer with log file

oobmgmt.log

Records details about out of band management activities  performed on workstation computers, including the provisioning state of the  management controller.

Client

 

Out of Band Management Console Log Files


The following table lists the log files that contain information
related to the Out of Band console.

Log name

Description

Computer with log file

Oobconsole_<Machine Name>_<User Name>.log

Records details about running the out of band management  console.

Computer that runs the out of band management console

 

Power Management Log Files


The following table lists the log files that contain information
related to power management.

Log name

Description

Computer with log file

pwrmgmt.log

Records details about power management activities performed on  the client computer that include monitoring and enforcement activities  performed by the Power Management Client Agent.

Client

 

Remote Control


The following table lists the log files that contain information
related to remote control.

Log name

Description

Computer with log file

RemoteControl.log

The log for remote control.

Client

 

Reporting


The following table lists the Configuration Manager log files that
contain information related to using reporting.

Log name

Description

Computer with log file

srsrp.log

Records information about the activity and status of the  reporting point.

Site system server

srsrpMSI.log

Records detailed results of the reporting point installation  process from the MSI output.

Site server

srsrpsetup.log

Records results of the reporting point installation process.

Site server

 

Role-Based Administration


The following table lists the log files that contain information
related to managing role-based administration.

Log name

Description

Computer with log file

hman.log

Records information about site configuration changes, and the  publishing of site information in Active Directory Domain Services.

Site server

SMSProv.log

Records WMI provider access to the site database.

Computer with the SMS Provider

 

Software Updates and Network Access Protection


The following table lists the log files that contain information
related to software updates and Network Access Protection.

Log name

Description

Computer with log file

ccmcca.log

Records details about the processing of compliance evaluation  based on Configuration Manager NAP policy processing, and contains the  processing of remediation for each software update required for compliance.

Client

ccmperf.log

Records activities related to the maintenance and capture of  data related to client performance counters.

Client

PatchDownloader.log

Records details about the process of downloading software  updates from the update source to the download destination on the site  server.

The computer hosting the Configuration Manager console from  which downloads are initiated

PolicyEvaluator.log

Records details about the evaluation of policies on client  computers, including policies from software updates.

Client

RebootCoordinator.log

Records details about the coordination of system restarts on  client computers after software update installations.

ScanAgent.log

Records details about scan requests for software updates, the  WSUS location, and related actions.

Client

SdmAgent.log

Records details about tracking of remediation and compliance.  However, the software updates log file, Updateshandler.log, provides more  informative details about installing the software updates required for  compliance.

This log file is shared with compliance settings.

Client

ServiceWindowManager.log

Records details about the evaluation of maintenance windows.

smssha.log

The main log file for the Configuration Manager Network Access  Protection client and it contains a merged statement of health information  from the two Configuration Manager components: location services (LS) and the  configuration compliance agent (CCA). This log file also contains information  about the interactions between the Configuration Manager System Health Agent  and the operating system NAP agent, and also between the Configuration  Manager System Health Agent and both the configuration compliance agent and  the location services. It provides information about whether the NAP agent  successfully initialized, the statement of health data, and the statement of  health response.

Client

Smsshv.log

This is the main log file for the System Health Validator point  and records the basic operations of the System Health Validator service, such  as the initialization progress.

Site system server

Smsshvadcacheclient.log

Records details about the retrieval of Configuration Manager  health state references from Active Directory Domain Services.

Site system server

SmsSHVCacheStore.log

Records details about the cache store used to hold the Configuration  Manager NAP health state references retrieved from Active Directory Domain  Services, such as reading from the store and purging entries from the local  cache store file. The cache store is not configurable.

Site system server

smsSHVQuarValidator.log

Records client statement of health information and processing  operations. To obtain full information, change the registry key LogLevel  from 1 to 0 in the following location: HKLM\SOFTWARE\Microsoft\SMSSHV\Logging\@GLOBAL

Site system server

smsshvregistrysettings.log

Records any dynamic change to the System Health Validator  component configuration while the service is running.

Site system server

SMSSHVSetup.log

Records the success or failure (with failure reason) of  installing the System Health Validator point.

Site system server

SmsWusHandler.log

Records details about the scan process for the Inventory Tool  for Microsoft Updates.

StateMessage.log

Records details about software updates state messages that are  created and sent to the management point.

Client

SUPSetup.log

Records details about the software update point installation.  When the software update point installation completes, Installation was successful is written to this log file.

Site system server

UpdatesDeployment.log

Records details about deployments on the client, including  software update activation, evaluation, and enforcement. Verbose logging  shows additional information about the interaction with the client user  interface.

Client

UpdatesHandler.log

Records details about software update compliance scanning and  about the download and installation of software updates on the client.

Client

UpdatesStore.log

Records details about compliance status for the software updates  that were assessed during the compliance scan cycle.

Client

WCM.log

Records details about software update point configurations and  connections to the Windows Server Update Services (WSUS) server for  subscribed update categories, classifications, and languages.

Site server

WSUSCtrl.log

Records details about the configuration, database connectivity,  and health of the WSUS server for the site.

Site system server

wsyncmgr.log

Records details about the software updates synchronization  process.

Site server

WUAHandler.log

Records details about the Windows Update Agent on the client  when it searches for software updates.

Client

 

Wake On LAN


he following table lists the log files that contain information
related to using Wake on LAN.

Log name

Description

Computer with log file

wolcmgr.log

Records details about which clients need to be sent wake-up  packets, the number of wake-up packets sent, and the number of wake-up  packets retried.

Site Server

wolmgr.log

Records details about wake-up procedures such as when to wake up  advertisements or deployments that are configured for Wake On LAN.

Site Server

 

Windows Update Agent


The following table lists the log files that contain information
related to the Windows Update Agent.

Log name

Description

Computer with log file

WindowsUpdate.log

Records details about when the Windows Update Agent connects to  the WSUS server and retrieves the software updates for compliance assessment  and whether there are updates to the agent components.

Client

 

WSUS Server


The following table lists the log files that contain information
related to the WSUS server.

Log name

Description

Computer with log file

Change.log

Records details about the WSUS server database information that  has changed.

WSUS server

SoftwareDistribution.log

Records details about the software updates that are synchronized  from the configured update source to the WSUS server database.

WSUS server

Comments

  • Anonymous
    January 01, 2003
    Thanks so much for your posting!

  • Anonymous
    March 11, 2014
    where do you run these logs?

  • Anonymous
    March 17, 2017
    An outstanding share! I've just forwarded this onto a colleague who was doing a little homework on this.And he in fact ordered me lunch because I stumbled upon it for him...lol. So let me reword this.... Thanks for the meal!!But yeah, thanx for spending time to discuss this issue here on your site.