ISE - SCCM multiple baseline compliance and ISE user privileges.

[jbenitol]

Hello Team,

Working on ISE <-> SCCM integration in an environment where the endpoint has more than one baseline applicable when could we expect the "compliance state = true" will happen? is it if and only if all baselines are met? The WMI query generate by ISE does not query for any specific baseline.

Also, regarding ISE user privileges, is "SMS admin" mandatory? couldn't we be querying WMI with read only access?

Thanks!

[hslai · Accepted solution]

That is what is tested. If you know of any other security group with sufficient permission, please test it and give the feedback to our engineering team.