We would like to see Advanced Insights expanded to include reporting and analysis of Configuration Baselines and Configuration Items (CIs) from Microsoft Configuration Manager.
Many organisations use Configuration Baselines extensively for compliance monitoring, security validation, configuration drift detection, and proactive remediation. Whilst Advanced Insights provides excellent visibility into applications, updates, devices, and operational health, there is currently limited visibility into baseline deployment and compliance data.
Key capabilities that would add significant value include:
Visibility of all Configuration Baselines and Configuration Items within the hierarchy.
Baseline deployment status and targeting information.
Compliance percentages by baseline.
Number of compliant, non-compliant, error, and unknown devices.
Historical compliance trending.
Device-level drill-down showing which baseline rules are failing.
Identification of baselines that have not evaluated recently.
Reporting on disabled, superseded, or orphaned Configuration Items/Baselines.
Collection and organisational filtering for compliance views.
Dashboard widgets highlighting the least compliant baselines and largest compliance risks.
Thanks for this John, we looked into this a few years back, at the time we were struggling because the way that Microsoft report on CI/CB uses loads of SQL Stored Procs and we'd need execute rights for SQL, which we don't currently request and don't really want to. We will look at this again.