We previously showed how to use the CM control panel applet to look at compliance, but that is useful for just one machine at a time. There are several ways to monitor the compliance of a baseline in CM for all users or computers.
One way to view compliance is just to view the Monitoring node of the CM console. Another way is to view SQL Server Reporting Services (SSRS) reports. Slicker yet, is to leverage subscriptions via text file to a share, or an e-mail from SSRS. We will show you how to set up an e-mail subscription on behalf of your boss. Then we will show how to drop a file daily, which lists noncompliant assets for your security team.
The My-Company-Win10-Computer baseline created earlier should have been piloted by now and should be deployed to a collection of Windows 10 machines. Refer to Chapter 9, Managing Reports and Queries to set up SSRS if you have not already done so.