I wanted to start by telling you that you are a life saver for admins and engineers the world over.

Now for my question. I have several compliance baselines running, each with several configuration items included. I work with a hierarchical domain, but in the deployment reports, domain is not an option to display, and we have devices with the same names in different domains do to a legacy software that requires this. I created a device collection from the non-compliant devices in one of the configuration baseline deployments, but SCCM does not show me which configuration item is the cause of the non-compliance. I have added the “compliance error detials” column to the collection view, but it is blank. Do you have any pointers that I may want to try to resolve this?

Thanks in advance!

I am unable to attach the link for you. Yes there is for CB all versions.>
If you notice even i had the same question and got it from SCCM Community.

Can some help me on Client Compliance Evaluation. I am not seeing Configuration Tab and Compliance Policy tab ( in Configuration items page) on Windows Server (Client machine). Anything i missed to enable.

Great informative post as always. One thing that I am scratching my head about and having trouble finding online is this – where do you look to find out why your remediation script isn’t working? I have successfully created a configuration Item/Baseline for computers without BitLocker enabled, and I have a quick PowerShell remediation script to turn on Bitlocker if it isn’t. It is reporting back the proper Compliance State but is not remediating non-compliant devices. Thanks in advance for your help!

You can really do either. You can do one CI for each registry key, but it’s probably simpler to do a single CI with multiple settings. Each registry key would have a setting and a compliance rule with the CI.