Who deleted that deployment?

Posted on Posted in SCCM

Who deleted that deployment?

This post will helpful for kind of questions about who deleted that deployment. Just kind of information about the creation of a deployment, the information about the deletion of a deployment is also stored in the database.

Use the same builtin report named All messages for a specific message ID to track the deleted deployment. Again, the only missing detail is that it’s not clear which Message ID belongs to which action. The following table provides an overview with exactly that information. It will show per object type which Message ID belongs to the deletion of a(n) deployment/ assignment.

 

 

Object Status Message Message ID
Application User “<>” deleted the deployment of application “<>” to collection “<>”. 30228
Package User “<>” deleted a deployment named “<>” deploying program “<>”. 30008
Task Sequence User “<>” deleted a deployment named “<>” deploying program “<>”. 30008
Software Updates User “<>” deleted updates assignment “<>”. 30198
Configuration Baseline User “<>” deleted updates assignment “<>”. 30198
User Data and Profiles Configuration User “<>” deleted configuration policy assignment “<>”. 40702
Remote Connection Profiles User “<>” deleted configuration policy assignment “<>”. 40702
Certificate Profile User “<>” deleted configuration policy assignment “<>”. 40702
Email Profile User “<>” deleted configuration policy assignment “<>”. 40702
VPN Profile User “<>” deleted configuration policy assignment “<>”. 40702
Wi-Fi Profile User “<>” deleted configuration policy assignment “<>”. 40702
Antimalware Policy User “<>” deleted client settings assignment “<>”. 40305
Windows Firewall Policy User “<>” deleted configuration policy assignment “<>”. 40702
Client Settings User “<>” deleted client settings assignment “<>”. 40305

Leave a Reply

Your email address will not be published. Required fields are marked *