Microsoft Configuration Manager (SCCM)
Visualize Microsoft Configuration Manager (SCCM) devices, device collections, and local users in the JupiterOne graph. Use this integration to also monitor changes to Microsoft Configuration Manager entities using JupiterOne alerts.
- Installation
- Authorization
- Data Model
- Types
- Release Notes
Installation
JupiterOne uses a connection to the Microsoft SQL server that hosts data for Microsoft Configuration Manager to pull data. If you have the ability to log into the database, it is strongly recommended that a user create an account specifically for JupiterOne to use. At a minimum, login credentials for an account that includes public and db_datareader permissions will be needed.
Configuration in Microsoft Configuration Manager
- In the object explorer, open the "Security" folder.
- Right-click on "Logins" and select "New Login..."
- Create a user using the following steps:
- Enter the login name
j1int. - Select "SQL Server Authentication".
- Create a password.
- Set the default database to your Microsoft Configuration Manager database
- Navigate to the "User Mapping" page.
- Check the "Map" box for the Microsoft Configuration Manager database row.
- Ensure that both
publicanddb_datareaderare checked under "Database role membership for: " the Microsoft Configuration Manager database. - Click "OK".
- Enter the login name
Configuration in JupiterOne
- From the top-bar menu, select Integrations.
- Scroll to, or search for, the Microsoft Configuration Manager (SCCM) integration tile and click it.
- Click the New Instance button and configure the settings:
- Enter the Host for the Microsoft Configuration Manager database.
- Enter the Database name.
- Enter the login name for the account to be used for SQL data retrieval. (the
suggested name is
j1int). - Enter the password for the account to be used for SQL data retrieval.
- Enter in a name and description for the integration instance.
- Click the Create button to complete the integration.
Next steps
Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.
Entities
The following entities are created:
| Resources | Entity _type | Entity _class |
|---|---|---|
| Account | microsoft_configuration_manager_account | Account |
| Application | microsoft_configuration_manager_application | Application |
| Device | microsoft_configuration_manager_device | Device |
| Device Collection | microsoft_configuration_manager_device_collection | Group |
| Local User | microsoft_configuration_manager_local_user | User |
Relationships
The following relationships are created:
Source Entity _type | Relationship _class | Target Entity _type |
|---|---|---|
microsoft_configuration_manager_account | HAS | microsoft_configuration_manager_device |
microsoft_configuration_manager_device | INSTALLED | microsoft_configuration_manager_application |
microsoft_configuration_manager_device_collection | HAS | microsoft_configuration_manager_device |
microsoft_configuration_manager_local_user | OWNS | microsoft_configuration_manager_device |
Microsoft Configuration Manager Device
microsoft_configuration_manager_device inherits from Device
| Property | Type | Description | Specifications |
|---|---|---|---|
aadDeviceId | string | null | The Microsoft Entra ID (Azure AD) device identifier. | |
aadTenantId | string | null | The Microsoft Entra ID (Azure AD) tenant identifier. | |
adSiteName | string | null | The Active Directory site name that is assigned to the client. | |
agentEdition | number | null | The edition of the installed Configuration Manager client agent. | |
clientType | string | null | The type of client installed on the computer. Derived from the numeric source value: 0 -> legacy, 1 -> advanced, 3 -> device. | |
clientVersion | string | null | Version of the installed client software. | |
cpuType | string | null | The CPU type, for example StrongARM. Only device clients report this value. | |
distinguishedName | string | null | The Active Directory distinguished name of the computer account, e.g. CN=host01,OU=Servers,DC=contoso,DC=com. | |
domainName | string | null | The fully qualified Active Directory domain name the resource belongs to. | |
easDeviceId | string | null | The Exchange ActiveSync device ID used for mobile device management. | |
hardwareId | string | null | An ID that uniquely describes the hardware the client is installed on. Remains unchanged through re-imaging or successive operating system installations, unlike the Configuration Manager unique ID. | |
isAlwaysInternet | boolean | Indicates whether the client always behaves like an internet-based client. | |
isAoacCapable | boolean | Indicates whether the resource supports Always On/Always Connected (modern standby). | |
isAssignedToUser | boolean | Indicates whether the resource is assigned to a user. | |
isClientInstalled | boolean | Indicates whether the computer has the Configuration Manager client software installed. | |
isDecommissioned | boolean | Indicates whether the resource is decommissioned. | |
isInternetEnabled | boolean | Indicates whether the device is enabled as an internet device. | |
isObsolete | boolean | Indicates the record has been superseded by another record for the same computer. When several records share the same hardware ID, the older records are marked obsolete. | |
isPortableOperatingSystem | boolean | Indicates whether the resource runs a portable operating system, such as Windows To Go. | |
isVirtualMachine | boolean | Indicates whether the resource is a virtual machine. | |
lastLogonUserDomain | string | null | Domain used by the last logged-on user at the time the discovery agent ran. | |
lastLogonUserName | string | null | Name of the last logged-on user at the time the discovery agent ran. | |
managementAuthority | number | null | The authority that manages the device, used to distinguish Configuration Manager, Intune and co-managed devices. | |
mdmDeviceCategoryId | string | null | The GUID of the device category assigned to the device, if any. | |
mdmStatus | string | null | The mobile device management enrollment status of the device. | |
netbiosName | string | null | Name used by the NetBIOS protocol. | |
objectGuid | string | null | Object GUID of the resource, retrieved from Active Directory. | |
previousSmsUuid | string | null | The prior Configuration Manager GUID, reported when the client determines the hardware changed significantly enough that it likely moved to a different computer. | |
primaryGroupId | number | null | Primary group of the resource, retrieved from Active Directory. | |
resourceDomainOrWorkgroup | string | null | Domain or workgroup to which the resource belongs. | |
senseId | string | null | The Microsoft Defender for Endpoint (SENSE) device identifier. | |
serialNumber | string | null | Please use serial instead. | deprecated: true |
sid | string | null | The security identifier (SID) of the resource, retrieved from Active Directory. | |
smbiosGuid | string | null | BIOS GUID of the client computer. | |
smsUniqueIdentifier | string | null | Unique ID that comes from the client computer. This ID is unique across Configuration Manager sites. | |
smsUuidChangedOn | number | null | The timestamp (in milliseconds since epoch) when the client generated a new Configuration Manager GUID. | |
userAccountControl | number | null | User account control value retrieved from Active Directory. | |
virtualMachineHostName | string | null | Virtual machine host name. |
Microsoft Configuration Manager Local User
microsoft_configuration_manager_local_user inherits from User
| Property | Type | Description | Specifications |
|---|---|---|---|
localPath | string |
Release Notes
- 2026-04-08 — Improved OS name, type, and version accuracy for Microsoft Configuration Manager device entities, stripping trailing version numbers from raw OS strings.