← All work
Real-time patch compliance tooling
Outcome: Operators got fast, at-a-glance answers on where a patch wave stood, which let them hold large deployments inside their maintenance windows and took real stress out of a high-pressure role. Going through SSRS, rather than the console or the raw database, kept the tooling low-risk and durable against schema and version changes.
The problem
Patching ran at punishing scale. One operator could be handed 100 to 200 servers in a single deployment, watching them patch, answering alerts, and supporting application teams all at once, the daily reality of platform support in a large data center. The only view into progress was a slow, clunky SSRS web report, far too heavy to check quickly under that kind of pressure.
What I did
- Chose the SSRS reporting service as the data path on purpose. SSRS already sits on top of the SCCM database and encapsulates Microsoft's own vetted reporting queries, so calling it reused that sanctioned data layer instead of hand-writing fragile T-SQL against an undocumented, version-shifting ConfigMgr schema, or adding load and risk to a production site database, or scraping the console by hand. It was the path of least resistance and the lowest-risk one.
- That path came with a real catch: SSRS only exposes a SOAP/XML web service designed in the mid-2000s (the ReportExecution2005 endpoint), driven by a stateful execution model, load the report, set parameters, render, then parse the returned payload, with none of the conveniences of a modern REST/JSON API. I drove that older surface from PowerShell through a generated web-service proxy, handling the execution flow and rendered output by hand.
- Wrapped all of that in reusable PowerShell modules that returned live patch status in a fraction of the time the browser report took, giving operators quick progress and validation without wrestling with the SSRS webpage.
- Correlated Active Directory, SCCM, and VMware inventory to surface broken clients and coverage gaps before they became a compliance miss.