Adaptiva Client Health Checks List

For Enterprise IT organizations who are dissatisfied with the time and effort it takes to keep endpoints secure and up-to-date, Adaptiva offers Client Health.

Client Health is an endpoint health and security engine that automatically identifies & repairs endpoint issues…instantly.

It is the fastest and most automated way to keep your endpoints secure and up-to-date.

Unlike competitive alternatives that simply provide visibility into security issues, Client Health proactively monitors the health of endpoints, troubleshoots issues, and then automatically resolves them without the need for manual efforts.

Client Health comes pre-packaged with dozens of health checks as well as a WorkFlow Designer tool that companies can use to visually create their own custom health checks without writing a single line of code. This document provides a list and brief description of the 75 health checks that are included in Client Health.

Health Check

Remediates?

Description

ConfigMgr Client Configuration Checks

 

Ensure that Microsoft ConfigMgr client endpoints are configured correctly

ConfigMgr Client - Cache Available Space

Yes

Checks and Remediates: The specified amount of space is available in the client cache

ConfigMgr Client - Cache Location

Yes

Checks and Remediates: The client cache location is correctly set

ConfigMgr Client - Site Assignment

Yes

Checks and Remediates: The client is assigned to the specified site

ConfigMgr Client - Site Auto Discovery

No

Verifies: Site auto discovery is working on the client

ConfigMgr Client Health Checks

 

Check and resolve issues related to the Microsoft ConfigMgr client

ConfigMgr Client - Cache Size

Yes

Checks and Remediates: The client cache size is set to desired value, or more

ConfigMgr Client - CCM Folders

Yes

Checks and Remediates: There is no file named CCM in the Windows system32 folder, and there is no file named CCMSETUP in the Windows system32 folder

ConfigMgr Client - Duplicate GUID

No

Verifies: The client does not have a duplicate SMS GUID

ConfigMgr Client - Management Point Location

No

Verifies: The client can correctly determine the location of the management point

ConfigMgr Client - Provisioning Mode

Yes

Checks and Remediates: Cases where the Task Sequence manager leaves software distribution disabled even after it has exited

ConfigMgr Client - Service Running

Yes

Checks and Remediates: The SCCM client agent service is running, and its start mode is set to automatic

ConfigMgr Client - Version

Yes

Checks and Remediates: The specified version or later of SCCM agent is installed

ConfigMgr Client Installation Checks

 

Detect and resolve Microsoft ConfigMgr setup and installation issues

CCMSetup - DiscoveryStatus MOF

Yes

Checks and Remediates: If the event logs contain entries indicating CCMSetup failed due to a DiscoveryStatus MOF compile issue; compiles the MOF automatically if so

CCMSetup - StatusAgentProxy DLL

No

Detects if the event logs contain entries indicating CCMSetup failed due to a StatusAgentProxy DLL issue

CCMSetup - Visual C++ DLL

Yes

Checks and Remediates: If the size of the Visual C++ DLL is incorrect, the correct DLL is copied from the specified path

ConfigMgr Client - Installed

Yes

Checks and Remediates: The SCCM client agent is installed

ConfigMgr Client Status Checks

 

Detect and resolve Microsoft ConfigMgr client communication, reporting and download issues

ConfigMgr Client Status - Hardware Inventory

Yes

Checks and Remediates: whether hardware inventory is working

ConfigMgr Client Status - Heartbeat Discovery

Yes

Checks and Remediates: whether heartbeat discovery is working

ConfigMgr Client Status - Management Point Ping

No

Checks and Remediates: The management point location can be detected, and management point can be pinged using ICMP echo

ConfigMgr Client Status - Package Ping

Yes

Checks and Remediates: whether package download is working or not

ConfigMgr Client Status - Policy Retrieval

Yes

Checks and Remediates: a recently updated policy can be downloaded successfully by the client

ConfigMgr Client Status - Software Distribution

Yes

Checks and Remediates: whether software distribution is working or not

ConfigMgr Client Status - Software Inventory

Yes

Checks and Remediates: whether software inventory is working or not

ConfigMgr Client Status - Status Message Submission

Yes

Checks and Remediates: whether status messages are being reported

DCOM Checks

 

Ensure networked computers are enabled for remote connection

DCOM - Remote Connection Enabled

Yes

Checks and Remediates: Whether remote connection is enabled or not

Instant Inventory Checks

 

Return instant inventory details from clients for reporting purposes

Instant Inventory - Disk Space

No

Returns any machines that have below the specified amount of available disk space

Instant Inventory - File Contains Text

No

Returns any machines that have the specified text in a specified file

Instant Inventory - File Exists

No

Returns any machines that have a specified file

Instant Inventory - Folder Exists

No

Returns any machines that have a specified folder

Instant Inventory - Process Running

No

Returns any machines that have a specified process running

Instant Inventory - Service Started

No

Returns any machines that have a specified service that is in the started state

Instant Inventory - Service Stopped

No

Returns any machines that have a specified service that is in the stopped state

IP Address Scope Checks

 

Ensure client endpoints have a valid IP address

IP - Permitted Scope

No

Verifies: Client's IP address is within the specified permitted IP address scopes

IP - Prohibited Scope

No

Verifies: Client's IP address is not within the specified prohibited IP address scopes

Network

 

Ensure clients have properly configured network and communication settings

Network - DNS Settings

Yes

Checks and Remediates: If the Primary DNS suffix, Sync Domain with Membership, the Primary DNS Domain, the NIC DNS Domain and Enable Dynamic DNS Registration settings are set correctly; sets to the desired state if incorrect

Network - Hosts file entries present

Yes

Checks and Remediates: If the hosts file contains the specified entries; if any specified hosts entry is not present, it is appended

Operating System Health Checks

 

Ensure endpoint user operating systems are configured correctly

(Lanman) Server - Service Running

Yes

Checks and Remediates: The lanmanserver service is running, and its start mode is set to automatic

OS - Admin Share Available

Yes

Checks and Remediates: The admin$ share is published on the client

OS - Version

No

Verifies: The client operating system version is one of the desired versions

Remote Registry Service Running (OS Specific)

Yes

Checks and Remediates: The Remote Registry service is running based on operating system, and its start mode is set to desired type

OS - Clear windows print queues

No (Action)

Clears the Windows printer queues

OS - Computer Naming Convention

No

Detects whether the computer naming convention matches the specified regular expression

OS - Delete Temp Folder Contents

No (Action)

Deletes all content from Temp folders

OS - File Associations

Yes

Checks and Remediates: That a list of file extensions are present and match. Corrects any that are incorrect and adds any that are missing

OS - Remote Desktop Settings

Yes

Checks and Remediates: Remote Desktop, Remote Assistance and Secure connection (Network Level Authentication) and sets if any are incorrect

OS - Run Key Entries

Yes

Checks and Remediates: Both the x86 and x64 Run Key entries are in an allowed list; removes any that are not

OS - Screen Saver Settings

Yes

Checks and Remediates: For each user, whether the screen saver is configured, whether it's set to password protected, the timeout and the path; if any are incorrect, they are corrected

OS - Security Group presence

Yes

Checks and Remediates: Local group membership for a specified local group to ensure that a specified member exists; if it does not exist, it is added

OS - Windows Explorer Settings

Yes

Checks and Remediates: The following - Show Hidden Files, Show Protected System Files, Hide File Extensions for Known File Types, Compressed Files in a different color, Show Run on Start Menu, Hide Empty Drives; corrects any that are incorrect

OS - Windows licensing compliance

No

Detects the current Windows licensing state

OS - Logon Server correct

No

Detects whether the current Logon Server matches the desired name

PowerShell Health Checks

 

Ensure desired PowerShell scripting and remote management settings are configured correctly

PowerShell - WinRM

Yes

Checks and Remediates: That WinRM is enabled or disabled on the machine. If in an incorrect state, changes it accordingly

PowerShell - Set PowerShell Execution Policy

Yes

Checks and Remediates: The PowerShell execution policy. Choose between Restricted, All Signed, Remote Signed, Unrestricted, Bypass or Undefined Sets to the desired state if incorrect

Security Health Checks

 

Ensures client endpoint user access is configured correctly

Security - User Access Control (UAC) Enabled

Yes

Checks and Remediates: If UAC is enabled; performed only on Windows operating systems

Security - User Local Admin

No

Detects whether the currently logged on user is a local administrator

Security - BitLocker Drive Encryption

Yes

Checks and Remediates: If BitLocker drive encryption is enabled for either the OS Drive, All Drives or a Specific drive; enables if it is not already enabled (encrypts)

System - Secure Boot

No

Detects whether Secure boot is enabled or disabled

Software Health Checks

 

Performs various checks relating to software issues

Software - Illegal Software installed

No

Detects whether any software specified in a named list of either software titles or software GUIDs is installed

Software - Internet Explorer Home Page

Yes

Checks and Remediates: Whether the Internet Explorer home page is set correctly, and if not sets it

System Performance Health Checks

 

Maintain system performance for end users

System - Free Disk Space

No

Verfies: The % free space on disk drives

System - Defrag drive

No (Action)

Runs the disk defragmentation tool to reorganize and optimize the disk

System - Run Check Disk

No (Action)

Schedules a ChkDsk to run on the next reboot

System - Run Disk Cleanup

No (Action)

Runs the disk cleanup utility to remove unneeded files and reclaim lost disk space

System - Trigger System Restore

No (Action)

Triggers a System Restore task so systems can be restored to a specific point in time

Windows Update Agent Health Checks

 

Ensure the successful distribution of updates and hotfixes released for Microsoft products

WUA - Service Missing

Yes

Checks and Remediates: Whether WSUS service is present on the machine or not

WUA - Service Running

Yes

Checks and Remediates: The wuauserv service is running, and its start mode is set to desired type

WUA - Version

Yes

Checks and Remediates: The WSUS client version is current

WMI Health Checks

 

Detects and resolves client endpoint WMI issues

WMI - ConfigMgr Client Namespaces

Yes

Checks and Remediates: Connectivity to WMI namespaces used by the SCCM client

WMI - ExecMgr Connection Error

Yes

Checks and Remediates: Detects whether the SCCM client's execmgr log contains WMI connection errors

WMI - In Path

Yes

Checks and Remediates: The system32\wbem folder is included in the path variable in the environment

WMI - Repository Integrity

Yes

Checks and Remediates: The integrity of the wmi repository

WMI - Service Running

Yes

Checks and Remediates: The WinMgmt service is running, and its start mode is set to desired type

WMI - Windows Server Updates Installed

Yes

Checks and Remediates: Proper hotfix installed on relevant Windows Server systems

BITS Health Checks

 

Ensure file transfers are happening as expected

BITS - Service Running

Yes

Checks and Remediates: The BITS service is running, and its start mode is set to desired type

BITS - Service Startup Failing

Yes

Checks and Remediates: Detects whether BITS startup is failing (it might be possible that BITS has become corrupted)

BITS - Version

Yes

Checks and Remediates: Ensure SCCM Clients have a recent version of BITS

Adaptiva Health Checks

 

Ensure you have the correct Adaptiva OneSite version running on all endpoints

Adaptiva Client - Version

No

Verifies: Whether Adaptiva client version is equal to desired Adaptiva client version