We previously showed how to use the CM control panel applet to look at compliance, but that is useful for just one machine at a time. There are several ways to monitor the compliance of a baseline in CM12 for all users or computers.
One way to view compliance is just to view the Monitoring node of the CM12 console. Another way is to view SQL Server Reporting Services (SSRS) reports. Slicker yet, is to leverage subscriptions via text file to a share, or an e-mail from SSRS. We will show you how to set up an e-mail subscription on behalf of your boss. Then we will show how to drop a file daily, which lists noncompliant assets for your security team.
The My-Company-Win7-Desktop baseline created earlier should have been piloted by now and should be deployed to a collection of Windows 7 machines. See Chapter 8, Managing Reports and Queries to set up SSRS if you have not already done so.
SSRS should already be set up with all the canned reports working...