I am planning to use SCCM User Device Affinity data in order to keep tabs on a large pilot group. Basically to ensure users are using the machines we are targeting for pilot. We currently have Auto UDA set for 1800 hours / 7 days. Thus far that seems to
be working reasonably well.
One issue I am seeing I don't have an explanation for thus yet is I've come across a number of machines just randomly losing a relationship to a user which should not have. After investigating, it was found the dropout coincided with a reboot. Below is a
snippet from the UserAffinity.log from one of them. Every day in the days prior to 5/12 it was at 10080 mins usage (they never log out) and 5/13 dropped to 0 right after the reboot and RelationActive toggled to 0. Every indication is it was a clean reboot.
One of the others I observed was definitely not a clean reboot. The machine was power cycled off.
Anyone have any ideas what may have caused this? Is there any data I can pull to assist with this? I would like to be able to rely on UDA but this concerns me. Below is a snippet from the UserAffinity.log. Sorry for the terrible formatting. Probably my first
post and they won't allow links or images.
>>>>>>Starting processing user affinity usage task<<<<<<
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Auto affinity threshold settings Days = '7', User minutes threshold = '1800', Auto approve affinity = '1'.
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Clean up agents user logon events...
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Retrieving user minutes map...
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Loading approved and pending user affinities...
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Checking if any pending affinity is approved...
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Checking usage minutes per user against current minutes threshold...
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
User 'USER' has 10080 usage minutesUserAffinity5/12/2019 6:22:11 PM26560 (0x67C0)
Setting auto affinity for user 'USER'.
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
Found same state message existing. (was sent before) Skip sending same state message for user 'USER'..
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
>>>>>>Finished processing user affinity usage task<<<<<<
UserAffinity
5/12/2019 6:22:11 PM
26560 (0x67C0)
>>>>>>Starting processing user logoff event<<<<<<
UserAffinity
5/13/2019 8:50:02 AM
22860 (0x594C)
User logoff task with user 'S-1-5-21-USERSID'
UserAffinity
5/13/2019 8:50:02 AM
22860 (0x594C)
Current time '1557751802' as user logoff time
UserAffinity
5/13/2019 8:50:02 AM
22860 (0x594C)
Active logon event for user 'S-1-5-21-USERSID' was found in WMI 'CCM_UserLogonEvents.LogonTime="1556281224",UserSID="S-1-5-21-USERSID"'. Set its LogoffTime to 1557751802.
UserAffinity
5/13/2019 8:50:02 AM
22860 (0x594C)
>>>>>>Finished processing user logoff event<<<<<<
UserAffinity
5/13/2019 8:50:02 AM
22860 (0x594C)
===========================================================
UserAffinity
5/13/2019 8:53:14 AM
6512 (0x1970)
System start up task
UserAffinity
5/13/2019 8:53:14 AM
6512 (0x1970)
Deleted incompleted user logon event instance 'CCM_UserLogonEvents.LogonTime="1556281224",UserSID="S-1-5-21-USERSID"' from WMI.
UserAffinity
5/13/2019 8:53:14 AM
6512 (0x1970)
Last tracking time is: 1556230615
UserAffinity
5/13/2019 8:53:14 AM
6512 (0x1970)
Earliest tracking time is: 1557147194
UserAffinity
5/13/2019 8:53:14 AM
6512 (0x1970)
Performing query 'select * from SMS_UserLogonEvents where LogoffTime > 1557147194' to get new events...
UserAffinity
5/13/2019 8:53:14 AM
6512 (0x1970)
Finished initiating user logon events
UserAffinity
5/13/2019 8:53:15 AM
6512 (0x1970)
>>>>>>Starting processing user logon event<<<<<<
UserAffinity
5/13/2019 8:54:55 AM
8184 (0x1FF8)
User logon task with user 'S-1-5-21-USERSID' and session ID '1'
UserAffinity
5/13/2019 8:54:55 AM
8184 (0x1FF8)
Get user logon time '1557752079' (CurrentTime: 1557752095)
UserAffinity
5/13/2019 8:54:55 AM
8184 (0x1FF8)
Created user logon instance 'CCM_UserLogonEvents.UserSID='S-1-5-21-USERSID',LogonTime=1557752079' in WMI.
UserAffinity
5/13/2019 8:54:55 AM
8184 (0x1FF8)
>>>>>>Finished processing user logon event<<<<<<
UserAffinity
5/13/2019 8:54:55 AM
8184 (0x1FF8)
>>>>>>Starting processing user affinity usage task<<<<<<
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Auto affinity threshold settings Days = '7', User minutes threshold = '1800', Auto approve affinity = '1'.
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Clean up agents user logon events...
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Retrieving user minutes map...
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Loading approved and pending user affinities...
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Checking if any pending affinity is approved...
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Checking usage minutes per user against current minutes threshold...
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
User 'USER' has 0 usage minutesUserAffinity5/13/2019 8:55:15 AM6996 (0x1B54)
Unsetting auto affinity for user 'USER'
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
Successfully sent user affinity state message for user 'USER'.
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)
>>>>>>Finished processing user affinity usage task<<<<<<
UserAffinity
5/13/2019 8:55:15 AM
6996 (0x1B54)