Microsoft SCCM Attribute Reference

Table of Contents

Microsoft Windows Server Attribute Reference

Microsoft SCCM Attribute Reference

This reference lists the attributes that Device Security collects from Microsoft SCCM, their names as stored in Device Security, and the Device Security fields they map to.

When Device Security integrates with Microsoft SCCM, it imports device attributes from the SCCM inventory to enrich device records. The attributes in this reference cover hardware, OS, and configuration data for SCCM-managed computers.

The third-party attribute name in Device Security refers to the attribute name as it appears in the Assets Inventory table and in Query Engine. This follows the format of third-party-name.attribute-name. When viewing the attribute name in the Assets Inventory table column selector or on a Device Details page, where the third-party name can be found as a header for the attributes section, then the third-party name is removed from the attribute name.

For example, micrsoft_defender_xdr.macAddress would appear in the Query Builder and in the Assets Inventory table, but under Device DetailsAttributesIntegration Specific AttributesMicrosoft Defender, the attribute would appear as macAddress.

Device Attributes

Device Security collects device attributes from Microsoft SCCM. The following table lists each Microsoft SCCM attribute, its name as stored in Device Security, and the Device Security field it maps to (if applicable).

* Only some attributes map to a Device Security Common Attribute.

Microsoft Intune Attribute Reference

Microsoft Windows Server Attribute Reference

Device Security Docs

Microsoft SCCM Attribute Reference

Device Security Docs

Microsoft SCCM Attribute Reference

Device Attributes

Activation & Onboarding

Next-Generation Firewalls

SASE

Microsoft SCCM Attribute	Device Security Attribute Name	Device Security Common Attribute*	Description
GS_COMPUTER_SYSTEM.Domain0	microsoft_sccm.GS_COMPUTER_SYSTEM.Domain0	AD Domain	Domain0
GS_COMPUTER_SYSTEM.UserName0	microsoft_sccm.GS_COMPUTER_SYSTEM.UserName0	AD Username	User name0
GS_COMPUTER_SYSTEM.Name0	microsoft_sccm.GS_COMPUTER_SYSTEM.Name0	hostname	Name0
deviceid	—	id; MAC Address	Device ID
ipAddress	—	IP Address	IP address
GS_COMPUTER_SYSTEM.Model0	microsoft_sccm.GS_COMPUTER_SYSTEM.Model0	Model	Model0
GS_OPERATING_SYSTEM.BuildNumber0	microsoft_sccm.GS_OPERATING_SYSTEM.BuildNumber0	OS Build Number	Build number0
GS_OPERATING_SYSTEM.Caption0	microsoft_sccm.GS_OPERATING_SYSTEM.Caption0	OS Name	Caption0
GS_OPERATING_SYSTEM.Version0	microsoft_sccm.GS_OPERATING_SYSTEM.Version0	OS Version	Version0
windowsVersion	—	raw_os	Windows version
serialNumber	—	Serial Number	Serial number
GS_SOFTWAREPRODUCT	microsoft_sccm.GS_SOFTWAREPRODUCT	third_party_learned_installed_software	Gs softwareproduct
windowsInstalledPatches	microsoft_sccm.windowsInstalledPatches	third_party_learned_os_kb_articles	Windows installed patches
GS_COMPUTER_SYSTEM.Manufacturer0	microsoft_sccm.GS_COMPUTER_SYSTEM.Manufacturer0	Vendor	Manufacturer0
CH_ClientSummary.AADDeviceID	microsoft_sccm.CH_ClientSummary.AADDeviceID	—	Aad device ID
CH_ClientSummary.ClientActiveStatus	microsoft_sccm.CH_ClientSummary.ClientActiveStatus	—	Client active status
CH_ClientSummary.ClientState	microsoft_sccm.CH_ClientSummary.ClientState	—	Client state
CH_ClientSummary.ClientStateDescription	microsoft_sccm.CH_ClientSummary.ClientStateDescription	—	Client state description
CH_ClientSummary.ExpectedNextPolicyRequest	microsoft_sccm.CH_ClientSummary.ExpectedNextPolicyRequest	—	Expected next policy request
CH_ClientSummary.IsActiveDDR	microsoft_sccm.CH_ClientSummary.IsActiveDDR	—	Is active ddr
CH_ClientSummary.IsActiveHW	microsoft_sccm.CH_ClientSummary.IsActiveHW	—	Is active hw
CH_ClientSummary.IsActivePolicyRequest	microsoft_sccm.CH_ClientSummary.IsActivePolicyRequest	—	Is active policy request
CH_ClientSummary.IsActiveStatusMessages	microsoft_sccm.CH_ClientSummary.IsActiveStatusMessages	—	Is active status messages
CH_ClientSummary.IsActiveSW	microsoft_sccm.CH_ClientSummary.IsActiveSW	—	Is active sw
CH_ClientSummary.LastActiveTime	microsoft_sccm.CH_ClientSummary.LastActiveTime	—	Last active time
CH_ClientSummary.LastDDR	microsoft_sccm.CH_ClientSummary.LastDDR	—	Last ddr
CH_ClientSummary.LastEvaluationHealthy	microsoft_sccm.CH_ClientSummary.LastEvaluationHealthy	—	Last evaluation healthy
CH_ClientSummary.LastHealthEvaluation	microsoft_sccm.CH_ClientSummary.LastHealthEvaluation	—	Last health evaluation
CH_ClientSummary.LastHealthEvaluationResult	microsoft_sccm.CH_ClientSummary.LastHealthEvaluationResult	—	Last health evaluation result
CH_ClientSummary.LastHW	microsoft_sccm.CH_ClientSummary.LastHW	—	Last hw
CH_ClientSummary.LastMPServerName	microsoft_sccm.CH_ClientSummary.LastMPServerName	—	Last mp server name
CH_ClientSummary.LastOnline	microsoft_sccm.CH_ClientSummary.LastOnline	—	Last online
CH_ClientSummary.LastPolicyRequest	microsoft_sccm.CH_ClientSummary.LastPolicyRequest	—	Last policy request
CH_ClientSummary.LastStatusMessage	microsoft_sccm.CH_ClientSummary.LastStatusMessage	—	Last status message
CH_ClientSummary.ResourceID	microsoft_sccm.CH_ClientSummary.ResourceID	—	Resource ID
CP_Machine.AssignedSiteCode	microsoft_sccm.CP_Machine.AssignedSiteCode	—	Assigned site code
CP_Machine.Description	microsoft_sccm.CP_Machine.Description	—	Description
CP_Machine.InitialRequestDate	microsoft_sccm.CP_Machine.InitialRequestDate	—	Initial request date
CP_Machine.LastErrorCode	microsoft_sccm.CP_Machine.LastErrorCode	—	Last error code
CP_Machine.LatestProcessingAttempt	microsoft_sccm.CP_Machine.LatestProcessingAttempt	—	Latest processing attempt