In the Configuration Manager administration console, there is a device (Devices) finder. Although the speed of this tool varies, but without knowing the collections in which the computer is located, you can find it by name:
Contrary to popular belief, not only the name of the computer can be entered into the search field. Analysis of the SQL query that is executed when the name is typed into the search field is possible when found in the SMSProv.log server log:
The text form of the SQL query is quite long, so I truncate the extracted fields, leaving the condition that is most interesting in terms of analysis:
from vSMS_CombinedDeviceResources AS SMS_CombinedDeviceResources where (((SMS_CombinedDeviceResources.ClientType is null AND SMS_CombinedDeviceResources.EAS_DeviceID is null ) OR SMS_CombinedDeviceResources.ClientType 3) AND ((((SMS_CombinedDeviceResources.PrimaryUser like N'%TEST%' OR SMS_CombinedDeviceResources.CurrentLogonUser like N'%TEST%') OR SMS_CombinedDeviceResources.LastLogonUser like N'%TEST%') OR SMS_CombinedDeviceResources.MACAddress like N'%TEST%') OR SMS_CombinedDeviceResources.Name like N'%TEST%'))
Now you can see that the other parameters that this search engine can be queried for are:
- MAC Address
- The username of the user last logged in,
- Primary User name
- Current computer user, if recognized)
In this way you can search for duplicate MAC addresses (if any). By typing the beginning of the MAC address, you can find machines that have a similar network card - usually the same manufacturer and sometimes even model.
However, you need to remember to specify a colon as the character separator in the MAC address, otherwise you will get an empty set:
As you can see, searching for a computer by MAC address does not at all require constructing a special query in WQL - the default capabilities of Configuration Manager's administrative console are sufficient.