After January 2019, businesses will need a commercial license to receive updates for Oracle Java SE products. This means that if you’re using Java in your environment, chances are that your management will need to know how many licenses to buy and how many PC has Java installed but don’t use it.

SCCM Java Inventory

The bad news is that SCCM Software Metering cannot do a reliable job to track Java Usage since the executable file always runs on computers. The good news is that there’s a way to track Java usage using Oracle tools… but it’s not straightforward.

After searching, I found an awesome script made by Steve Jesok that do exactly what I needed. Unfortunately, the blog post is a bit old and don’t have detailed information on how to implement it.

We will guide you through the process and we’ll also provide a free report to help you track your java usage using SCCM.

Important Info

Java Usage Tracker requires a commercial license for use in production. To learn more about commercial features and how to enable them, see Oracle Java SE Advanced & Suite Products.

Process Overview

Here’s a high-level process overview. It’s quite simple as the PowerShell script, configuration item and report are already created. You only have to import everything on your SCCM server.

  • Download Java inventory .zip file
  • Import Configuration Data in SCCM
  • Modify Configuration Baseline
  • Deploy Configuration Baseline
  • Import Report

Download SCCM Java Inventory .zip file

I cannot say this enough, all the magic behind this solution is possible because of Steve Jesok script. Download the .zip file from the MNSCUG website or from our direct link (backup link…) and save it on your computer.

Import Java Configuration Data

Once you have downloaded the .zip file, extract it so you have a .cab file. We will use the .cab file to create a Configuration Item in SCCM.

  • In the SCCM Console, go to Assets and Compliance / Compliance Settings / Configuration Items
  • Right-click Configuration Items and select Import Configuration Data

SCCM Java Inventory

  • Click Add

SCCM Java Inventory

  • Select the JavaUsageTracking.cab file

SCCM Java Inventory

  • Click Next

SCCM Java Inventory

  • Click Next

SCCM Java Inventory

  • Validate and close the wizard

SCCM Java Inventory

  • The Java Logging Configuration Item has been created

SCCM Java Inventory

  • Right-click the Java Logging Configuration Item and select Properties
  • By default the Configuration Item cannot run on Windows 10, select the Supported Platforms and enable Windows 10. Select Other Operating System that you want to support.

SCCM Java Inventory

  • You should also have a Java Usage Tracking Configuration Baseline created by the import process

SCCM Java Inventory

  • Right-click the baseline and select Deploy

SCCM Java Inventory

  • Click Browse and select a test collection

SCCM Java Inventory

Java Configuration Baseline – Test and verification

We will now evaluate the Java Configuration Baseline on our test computer.

  • Log on your test computer
  • Open Control Panel / Configuration Manager applet
  • In the Configurations tab, select the Java Usage Tracking baseline and select Evaluate

SCCM Java Inventory

  • Once Evaluate, click View Report
  • The report will show Non-Compliant but this is normal

SCCM Java Inventory

  • Validate the presence of the usagetracker.properties file that has been created by the baseline. The file should be in the C:\Program Files (x86)\Java\Jre[yourversion]\lib\management folder

SCCM Java Inventory

  • The script also logs its action in the SCCM log directory – CM_JavaUsageLogging.log

SCCM Java Inventory

  • The CM_JavaUsageTracking WMI class has been created

SCCM Java Inventory

  • Launch any application that needs Java or visits any web page that needs Java.
  • After a couple of minutes, you should have some data in the WMI classes. This confirms that the monitoring process is fully functioning

SCCM Java Inventory

Collect information using Hardware Inventory

Now that our data is in WMI, we need to instruct SCCM to gather this information in its next hardware inventory cycle.

  • Open the SCCM console and go to Administration \ Client Settings
  • Select your Default client setting and select Properties
  • Select Hardware Inventory and select Set Classes

SCCM Java Inventory

  • In the Hardware Inventory Classes window, click on Add

SCCM Java Inventory

  • Click Connect and enter the test computer name and leave the default WMI Namespace (root\cimv2)
  • A list of the inventory classes will show, find CM_JavaUsageTracking, check it and click Ok

SCCM Java Inventory

  • You can leave the inventory classes in the Default Client settings or you can enable it in a custom one if you have one
  • Make sure that the client setting is deployed to your test collection and initiate a Hardware Inventory from the Configuration Manager applet

SCCM Java Inventory

  • As in any Hardware Inventory cycle, you can validate that the new classes get inventoried in the InventoryAgent.Log

SCCM Java Inventory

  • The CM_JavaUsageLogging.log in the SCCM logs folder should show activity

SCCM Java Inventory

Java Data Verification

  • In the SCCM Console, right-click your test computer and select Start / Resource Explorer
  • You should see the CM_JavaUsageTracking classes under Hardware

SCCM Java Inventory

  • If you are familiar with SQL, a new v_GS_CM_JavaUsagetracking view has been created

SCCM Java Inventory

Report

Now that our Java tracking data is gathered by SCCM we have built an SSRS report to show which computer has run Java. You can download the free Asset – Java Inventory and Metering report by visiting our product page. Leave us your comments if you are using our report so that we can improve it over time.

Important Info

This report will work only if the above steps have been made. If you try to run the report without creating the Java view, the report will fail

SCCM Java Inventory

[ratings]

Comments (59)

Garrett

01.16.2019 AT 09:52 AM
Is there anything in this solution that could possibly trigger updates for Java products? In my test group I had one user who, without knowing I had deployed CI/CB, reported getting a UAC prompt for a Java update. Since the normal behavior is for Java updates to show up in the system tray, I found it unusual. What part of this CI/CB could be invoking Java to update, skipping the system tray and going straight to UAC? If there is something, can it be disabled as to avoid having our users greeted with UAC to update a product that they maybe shouldn't? Some of our users are advised to skip Java updates until a certain software vendor approves the new version. Thanks!

PhilC

01.15.2019 AT 06:23 AM
Has anyone had an issue running / modifying the included report? I am getting File, interop.shdocvw.dll, has a different computed hash than specified in manifest. when i try and open to edit.

Chris Kibble

01.07.2019 AT 08:34 AM
I made some modifications to the script to address some things that came up when I was testing this. Posted to GitHub for anyone who wants to steal a copy or suggest changes of their own to the community via pull requests. https://github.com/ChrisKibble/JavaUsageTracking Changes Implemented: * Minor readability / Unused Variable Cleanup. * Support for 64-bit Java. * Fixed leading space in multiple fields. * Fixed issues where JVM Vendor would populate blank in WMI. * Added OverwriteUT (default $false) to always overwrite the usage tracking file. Like Benoit, full credit out to Steve Jesok who did all of the heavy lifting on the script.

thohun

05.06.2019 AT 09:04 AM
Chris, Thanks for posting this. How long after running an app/web site that uses JRE should usage data be populated in the WMI classes? I'm not getting anything. https://i.imgur.com/7c78tB5.png https://i.imgur.com/ZB3B90f.png Thanks

Garrett

01.15.2019 AT 05:43 PM
Wait I think I found it... Do I just replace the script in the Config Item via Java Logging > Settings > Java Usage Tracking > Edit > Edit Script? Just a copy+paste situation? Since I don't totally understand how this script arrived here, I just want to make sure that I'm not circumventing some important step by replacing that existing script.

Christopher Kibble

02.04.2019 AT 05:42 PM
Hi Garrett - I think you've got it - you follow all steps from the original blog post here on SCD, and then just replace the existing script. Good luck! Chris

Garrett

01.15.2019 AT 01:34 PM
Hi Chris thanks for the update. I was able to implement the reporting as outlined above but would love to add your improvements. The .cab has 2 RESX files and 2 XML's. How does one go about replacing the RESX/XML's with your powershell script?

Scott Durham

12.13.2018 AT 11:54 AM
I modified the script to do detect both x86 and x64 (nothing fancy just copied the IF block and renamed the variables to distinguish x86 vs x64). I also changed the JREPath variable to include a Resolve-Path: $JREPath_x86 = @("C:\Program Files (x86)\Java\*") | Resolve-Path $JREPath_x64 = @("C:\Program Files\Java\*") | Resolve-Path #Enable Java logging by enumerating the JREs from the registry $Keys_x86 = Get-ChildItem "HKLM:\Software\WOW6432Node\JavaSoft\Java Runtime Environment" $Keys_x64 = Get-ChildItem "HKLM:\Software\JavaSoft\Java Runtime Environment" $JREs_x86 = $Keys_x86 | Foreach-Object {Get-ItemProperty $_.PsPath } $JREs_x64 = $Keys_x64 | Foreach-Object {Get-ItemProperty $_.PsPath } #Evaulate for x86 JRE installs ForEach ($JRE_x86 in $JREs_x86) { IF ($LoggingEnable -eq $true) {Log-ScriptEvent -Value "Interogating JRE path $($JRE_x86.JavaHome)" -Severity 1} $JREPath_x86 = test-path "$($JRE_x86.JavaHome)\lib\management" if ($JREPath_x86) { $UTProps = test-path "$($JRE_x86.JavaHome)\lib\management\usagetracker.properties" if (-Not $UTProps) { IF ($LoggingEnable -eq $true) {Log-ScriptEvent -Value "Creating $($JRE_x86.JavaHome)\lib\management\usagetracker.properties" -Severity 1} Create-UsageTrackingProps -UTPath "$($JRE_x86.JavaHome)\lib\management\usagetracker.properties" } Else { IF ($LoggingEnable -eq $true) {Log-ScriptEvent -Value "$($JRE_x86.JavaHome)\lib\management\usagetracker.properties exists" -Severity 1} } } } #Evaulate for x64 JRE installs ForEach ($JRE_x64 in $JREs_x64) { IF ($LoggingEnable -eq $true) {Log-ScriptEvent -Value "Interogating JRE path $($JRE_x64.JavaHome)" -Severity 1} $JREPath_x64 = test-path "$($JRE_x64.JavaHome)\lib\management" if ($JREPath_x64) { $UTProps = test-path "$($JRE_x64.JavaHome)\lib\management\usagetracker.properties" if (-Not $UTProps) { IF ($LoggingEnable -eq $true) {Log-ScriptEvent -Value "Creating $($JRE_x64.JavaHome)\lib\management\usagetracker.properties" -Severity 1} Create-UsageTrackingProps -UTPath "$($JRE_x64.JavaHome)\lib\management\usagetracker.properties" } Else { IF ($LoggingEnable -eq $true) {Log-ScriptEvent -Value "$($JRE_x64.JavaHome)\lib\management\usagetracker.properties exists" -Severity 1} } } } Thanks SystemCenterDudes! This was a HUGE help for us!

Brady

12.18.2018 AT 02:29 PM
Did you just replace everything between these 2 lines with your code? #Set Variables and #Enumerate user profile folders from WMI

Benoit Lecours

12.18.2018 AT 12:51 PM
Awesome, thank you for sharing !

Sean

12.13.2018 AT 10:23 AM
Will this track JRE usage on Server OS's as well?

Jonathan

10.22.2018 AT 09:13 AM
This only tracks JRE? I thought the intention was to track JDK? Am I misunderstanding something?

Tobias Hennighausen

10.09.2018 AT 07:27 AM
I did extend the powershell with "$Keys += Get-ChildItem "HKLM:\Software\JavaSoft\Java Runtime Environment"" to add x64 support. Now it is creating the "usagetracker.properties" file in x86 & x64 \Java\jre8\lib\management, also my Client is adding java usage to the database. Can anybody confirm?

M3

10.04.2018 AT 01:02 AM
Doesnt work with 64 bit Java for me

Anthony

08.21.2018 AT 03:50 PM
I believe the issue with not being able to monitor x64 is due to the powerscript only enumerating WOW6432 registry keys, so it only knows about 32bit installs of Java to be able to put the usagetracker.properties file in the correct location. The script needs to be modified to account for this. I did find this URL "https://docs.oracle.com/javacomponents/usage-tracker/overview/" which talks about a a central location but it only works for the latest versions.

M

08.16.2018 AT 03:39 PM
Is there a list of what the compliance states mean? When i run the Evaluation and Get the report view on the test machine, I have a compliance state: Error and Non-Compliance Severity: Critical.

cdnsteel

09.27.2018 AT 11:31 AM
Check the script in the config item. It will have all the details.

GK

08.15.2018 AT 10:02 AM
Hi @ all I ogt work locally, but when I use the report Asset – Java Inventory and Metering it says " No device found" Did I something wrong? The report sees the total number of devices, but says that no device is using Java. That's impossible.

cdnsteel

07.19.2018 AT 10:55 AM
Thank you for the post and script, however I'm having issues getting it to run on my Windows 7 machines. Anyone else having issues? I have tried to run it directly from Powershell on some sample machines and it appears to be choking on syntax in the script. First (of many) errors are: You must provide a value expression on the right-hand side of the '+' operator. At line:31 char:36

cdnsteel

08.13.2018 AT 09:20 AM
I was able to figure this one out. If anyone else runs into this issue, there are extra spaces after the backtick (`) for the line breaks in lines 31-37. These extra spaces must be removed for it to run properly on Windows 7.

Robert Stein

08.21.2018 AT 03:36 PM
I removed the extra spaces and have the baseline deployed to about 65 systems but still only have 2 in the report.

cdnsteel

09.27.2018 AT 11:27 AM
Give it some time to run. Once Java is used on a machine and it checks in, it should appear on the report.

Tim Brady

07.19.2018 AT 12:11 AM
ok, have connected it to my datasource now, but the only pc that shows data is my test pc. I have confirmed the client settings are deployed to the All Workstations collection.

cdnsteel

07.19.2018 AT 11:12 AM
I have been able to get it working for Win10, but not Win7. It takes some time for the data to come in as Java has to be launched after the CM was pushed. It may take some time, so be patient with it.

Tim Brady

07.19.2018 AT 12:01 AM
Hi All, I'm just having some trouble with the report step. I get this "The report server cannot process the report or shared dataset. The shared data source 'CM_SCD' for the report server or SharePoint site is not valid. Browse to the server or site and select a shared data source. (rsInvalidDataSourceReference)" when I try to run it from the reports portal. Have I done something wrong? It doesn't appear in the list of reports in the sccm console. Tim

Matt

11.18.2019 AT 01:45 PM
I managed to get the report working, at least at a glance. 1. Click on dropdown of your imported report and edit in report builder. 2. In report builder, expand Datasets. Right click on the dataset and click dataset properties 3. click new dataset. Browse to the dataset on your report server. Dataset should use logged in user credentials. 4. Repeat for other datasets 5. Save report I'm still poking around because the above process was giving me some access errors. I'm getting some null values as reported in the comments as well still.

Johan

05.22.2019 AT 01:35 AM
I also get this error from the report, how do we fix this?

Simon Jäggi

07.11.2019 AT 09:09 AM
I get the same error. If I run the Report directly in the sql man. studio, it works. Does anyone know what changes we have to make to get it running?

Nathan

07.12.2018 AT 06:11 PM
Thank you so much for putting this together!

Buster Frith

06.22.2018 AT 07:42 AM
This seems to work well for x86 Java but not x64. Is there a way to monitor x64 also?

sj

08.07.2018 AT 03:46 PM
Did you or anyone find a way for this to track 64 bit JAVA?

Soren

05.28.2019 AT 08:17 AM
I also would like to know about this. We really need it to both track x86 and x64 JAVA. Thanks

Simon Jäggi

07.11.2019 AT 07:25 AM
see chris kibbels answer to this: https://github.com/ChrisKibble/JavaUsageTracking

Paul

07.12.2019 AT 05:24 PM
what answers are you referring to? I see no comments/questions/answers on the github link