Hi,

I have a strange issue with my compliance report. I have a SCCM2012 setup, where around 10% of all my servers are reporting non-compliant. all servers are using the same Software Update Point and have the same site code assinged. when i'm digging into to the report i can see that it's claiming that some updates are missing, but when i check the server i can see that the updates actually are installed, the problem is not related to a specific update but i see it with all kind of updates, ALSO SOME UPDATES WICH AREN'T DEPLOYED/DOWNLOADED NOR ADDED TO A SOFTWARE UPDATE GROUP... When i check the State Message report i can see that the clients have reportet within 24 hours, i tried to do this http://social.technet.microsoft.com/Forums/en-US/configmgrsum/thread/5519635d-8673-4b92-8a4d-3b59e01c57b6what Kent A writes, with the result that it moves the client to scan state unknown and later moves it back to the non-compliant group :(  

If you're not deploying certain updates then you'll never see 100% compliance in the built-in overall compliance report.

You'd be better to use "States 1 - Enforcement States for a Deployment" to verify actual compliance against updates you've actually deployed.

That's not correct, when i run the compliance report against the software update group i created and the collection i deployed to, the compliance report only complies with the updates in the software update group, almost 90% og my server are compliant i'm just strugling with the with the last 10% wich are reporting non-compliant due to missing updates, but the updates are installed on the computer, for some reason it says "required update" for a couple on about 3% of updates wich are not even in my software update group.

When is run this report "States 1 - Enforcement States for a Deployment" the numbers are the same... :(

you could check some of the WU logfiles on the client, to see if the "required" updates are detecting as "missing" ?

How is this the answer? It is just asking if the they checked the logs? Bertinski never responded that he fixed the issue buy "looking at the logs" and the Moderator marked it as answered when it has not been answered.

This thread has no solution and you are wasting other users time buy marking answers as answers when they are not. It really sucks that the moderators can mark questions as answered, its worse that in the TechNet forums they do it all the time like they are closing an issue out even if its not resolved.

Only the person who asks the question should be allowed to mark it as answered, and only if they post a response stating it fixed it and forgot to mark it as answered should the moderator step in to mark it for them.

Technet cheaters! Stop marking answers just to get some free pens from Microsoft...