SCCM Collection Queries

A running reference of useful SCCM collection queries — a mix of simple lookups and more complex joins — that come up often enough to be worth keeping in one place. We add to this list as new ones prove useful.

Computers matching a name prefix

Use % as a wildcard to match machine names starting with a given prefix:

select SMS_R_System.NetbiosName from
SMS_R_System
WHERE
SMS_R_System.NetbiosName = "ABC%"

Machines with Adobe Reader XI installed

Pulled from Add/Remove Programs data via hardware inventory:

select SMS_R_System.NetbiosName,
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from
SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on
SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId =
SMS_R_System.ResourceId where
SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "Adobe Reader XI"

Devices in a specific OU

select distinct * from SMS_R_System
WHERE
SMS_R_System.SystemOUName = "OU NAME"

Windows 8 installations

select SMS_R_SYSTEM.ResourceID,
SMS_R_SYSTEM.ResourceType,
SMS_R_SYSTEM.Name,
SMS_R_SYSTEM.SMSUniqueIdentifier,
SMS_R_SYSTEM.ResourceDomainORWorkgroup,
SMS_R_SYSTEM.Client from SMS_R_System
INNER JOIN
SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceId = SMS_R_System.ResourceId
WHERE
SMS_R_System.OperatingSystemNameandVersion
LIKE
"%Workstation 6.2%" or SMS_R_System.OperatingSystemNameandVersion LIKE "%Windows 8%"

Swap the DisplayName like or OperatingSystemNameandVersion LIKE values to adapt any of these to a different application or OS version — the join structure stays the same.

Still Current on Configuration Manager 2603 (Updated for 2026)

The WQL syntax and join structure above haven’t changed — these queries run as-is against Configuration Manager 2603 (the current branch release as of 2026), whether you’re building them the old way via Monitoring > Queries > Create Query or through the newer query rule builder used for collection membership rules, which produces the same underlying WQL under the hood. One thing worth flagging: the “Adobe Reader XI” example is now well past its own end of life and largely academic as written — if you’re hunting for outdated Adobe installs today, swap the DisplayName like value for whatever current Acrobat Reader release you’re auditing against, or better yet, query for anything not matching your target version to catch stragglers automatically.

Resources

• SCCM
• Adobe Reader
• WQL
• our SQL & WQL query library