Introduction

SCCM relies heavily on log files for software updates, application management, content distribution, and Operating System Deployment (OSD). This unified guide centralizes the most useful logs, where they live, and how to read them effectively with tools like CMTrace and Trace32/Trace64.

Reading SCCM Logs (CMTrace & Trace32/Trace64)

Microsoft log files can be verbose and difficult to parse with standard editors. Use CMTrace or Trace32/Trace64 to speed up troubleshooting.

CMTrace Highlights

  • Real-time tail: Watch logs update live while you troubleshoot.
  • Search & filters: Quickly locate relevant entries.
  • Highlighting: Emphasize keywords, warnings, and errors.
  • Error surfacing: Automatic visual cues for failures.

Trace32 / Trace64 Highlights

  • 64-bit native (Trace64): Better performance on modern OSes.
  • Advanced filtering: Fine-grained views for deep dives.
  • Customizable views: Focus on the data that matters.

Download log viewers

OSD Log File Locations (by Phase)

Use the table below to find smsts.log during each phase of deployment. Locations change as the disk is partitioned and the client is installed.

PhasePath
WinPE (before disk format)X:\Windows\Temp\SMSTSLog\smsts.log
WinPE (after disk format)X:\SMSTSLog\smsts.log (also copied to C:\_SMSTaskSequence\Logs\Smstslog\smsts.log)
Full OS (before ConfigMgr client)C:\_SMSTaskSequence\Logs\Smstslog\smsts.log
Full OS (after ConfigMgr client installed)%WINDIR%\CCM\Logs\smsts.log (or %WINDIR%\SysWOW64\CCM\Logs\smsts.log on 64-bit during certain stages)
Full OS (build complete)%WINDIR%\System32\CCM\Logs\smsts.log (or %WINDIR%\SysWOW64\CCM\Logs\smsts.log on 64-bit)

Operating System Deployment Log Files

Log NameDescriptionComputer with Log File
CAS.logContent access service: finds distribution points for referenced content.Client
ccmsetup.logClient setup/upgrade/removal actions; key for client install issues.Client
CreateTSMedia.logTask sequence media creation details.Admin PC running the ConfigMgr console
Dism.logDriver install or update apply actions for offline servicing.Site system server
Distmgr.logDistribution manager; includes enabling PXE on a DP.Site system server
DriverCatalog.logDrivers imported into the driver catalog.Site system server
mcsisapi.logMulticast package transfer and client responses.Site system server
mcsexec.logMulticast health checks, sessions, certificate checks.Site system server
mcsmgr.logMulticast config/security/availability changes.Site system server
mcsprv.logMulticast provider interaction with WDS.Site system server
MCSSetup.logMulticast server role installation details.Site system server
MCSMSI.logMulticast server role MSI installation details.Site system server
Mcsperf.logMulticast performance counter updates.Site system server
MP_ClientIDManager.logMP responses to client ID requests from PXE/boot media initiated TS.Site system server
MP_DriverManager.logMP responses to Auto Apply Driver action requests.Site system server
OfflineServicingMgr.logOffline servicing schedules and WIM update apply actions.Site system server
Setupact.log / Setupapi.log / Setuperr.logWindows setup/Sysprep logs.Client
smpisapi.logClient state capture/restore actions and thresholds.Client
Smpmgr.logSMP health checks and config changes.Site system server
smpmsi.logSMP installation and configuration details.Site system server
smpperf.logSMP performance counters updates.Site system server
smspxe.logPXE responses; boot image/file expansion details.Site system server
smssmpsetup.logSMP installation/configuration details.Site system server
smsts.logTask sequence engine log (primary for OSD troubleshooting).Client
TSAgent.logTask sequence dependency evaluation outcomes before TS start.Client
loadstate.logUSMT restore operations.Client
scanstate.logUSMT capture operations.Client

Software Distribution Log Files

Log NameDescriptionComputer with Log File
DataTransferService.logBITS communication for policy/content access; also used by pull-DP content.Client
PullDP.logContent that a pull distribution point transfers from source DPs. (System Center 2012 ConfigMgr SP1+)Pull Distribution Point
PrestageContent.logExtractContent.exe usage on a remote prestaged DP (imports exported content files). (SP1+)Prestaged Distribution Point
SMSdpmon.logDistribution point health monitoring scheduled tasks.Distribution Point (site system server)
smsdpprov.logExtraction of compressed files received from a primary site (WMI provider on remote DP).Distribution Point (WMI Provider)

Software Update Point Log Files

Log NameDescriptionComputer with Log File
objreplmgr.logReplication of software update notification files from parent to child sites.Site server
PatchDownloader.logDownloads updates from the source to the site server’s download destination.Admin PC hosting the ConfigMgr console used for download
ruleengine.logAutomatic deployment rules: identification, content download, group and deployment creation.Site server
SUPSetup.logSoftware update point installation details; look for “Installation was successful”.Site system server
WCM.logSUP configuration and WSUS connections (categories, classifications, languages).Site server connecting to WSUS
WSUSCtrl.logWSUS configuration, DB connectivity, and health.Site system server
wsyncmgr.logSoftware update synchronization process.Site system server
WindowsUpdate.logWindows Update Agent communications with WSUS; compliance and agent updates.Client

Application Management Log Files

Log NameDescriptionComputer with Log File
AppIntentEval.logCurrent/intended app state, applicability, requirements, DTs, dependencies.Client
AppDiscovery.logDiscovery/detection of applications on client computers.Client
AppEnforce.logApp enforcement (install/uninstall) on the client.Client
awebsctl.logMonitoring for the Application Catalog web service point.Site system server
awebsvcMSI.logInstallation details for the App Catalog web service point role.Site system server
Ccmsdkprovider.logApplication management SDK activities.Client
colleval.logCollection Evaluator when collections are created/changed/deleted.Site system server
ConfigMgrSoftwareCatalog.logApplication Catalog activity (includes Silverlight usage).Client
portlctl.logMonitoring for the Application Catalog website point.Site system server
portlwebMSI.logMSI installation activity for the App Catalog website role.Site system server
PrestageContent.logExtractContent.exe usage on a prestaged DP for exported content files.Site system server
ServicePortalWebService.logApplication Catalog web service activity.Site system server
ServicePortalWebSite.logApplication Catalog website activity.Site system server
SMSdpmon.logDistribution point health monitoring scheduled task activity.Site server
SoftwareCatalogUpdateEndpoint.logManages the Application Catalog URL shown in Software Center.Client
SoftwareCenterSystemTasks.logSoftware Center prerequisite component validation.Client

Tips for Faster Troubleshooting

  • Open smsts.log with CMTrace during OSD; press F8 in WinPE (if enabled) to launch a command prompt and browse paths.
  • Correlate client-side errors with server-side logs (for example, smspxe.log, wsyncmgr.log, distmgr.log).
  • Use consistent time synchronization on servers and clients to align timestamps across logs.

Similar Posts

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.