Endpoint Protection

Does anybody know of a way of retrieving from the manager logs when a client upgraded software version? We have been upgrading our estate to RU6 MP1 and believe that clients are continually downloading the package even when they have already upgraded, for instance for one client i have found the following in the client-server activity logs:

if all the clients are upgraded;

go to the group

click on client packages - delete it.

its possible that the installation is going in a loop, did that complete the install?

No not all the clients in the group were upgraded. I ran a report that showed 95% of a 800 member group upgraded. We removed the package due to bandwidth problems and despite this a few days later we still witnessed 400 clients downloaded the auto-upgrade package in the logs.

What i want to be able to do is see when individual clients actually upgraded

can you select the event type as package events and create a log?

In SEPM go to monitors-->logs-->computer status,select appropriate time range and click on view logs.Here you can find the version of each client.You can also export the same and import to an excel sheet.This will give you more visibility...

Do you mean System logs: Administrative -> Package events?

This only shows when we have assigned, removed or exported install packages, not when specific clients have upgraded

Try this log

monitors-->logs-->system-->client activity...

Very intresting!!! I would suggest, move the clients that are not upgraded yet, to a separate group, and delete the client install package from the existing group.

Also, wanted to know have to set a schedule for clients to download this install package??

Yes, but that only gives you the current client version and no details as to when it actually upgraded to that version

Thanks, I have tried this but there are no events in the client logs which represent the upgrade unfortunately

Yes it was scheduled over 3 days available 24 hours.

Basically what i want to prove is when clients have upgraded, will they still download the package file as it seems that is what is happening. I figure the only way to prove this now as it seems there is no way in getting the details from the logs would be to create  a new group with package assigned, take an initial status export, then run a status export at regular intervals to build a picture of when the clients are upgrading, then each day run the client-server log of downloaded auto-upgrade files and see if already upgraded clients still appear to be downloading

Maybe this illustrates the point - this is part of a report of System Client-Server activity -> download auto-upgrade file events over a 24 hour period on Monday. The install package from this group was removed early last week. As you can see the majority of these clients are already on the latest version so why would they still be downloading the file?