Предлагаю несколько вариаторов отчетов и запросов, возможно кому-то будет полезно.
Report: последний lоgin на компьютере
SELECT
sys.Name0 AS SystemName,
MIN(sys.User_Name0) AS UserName
FROM
dbo.v_r_user AS usr
INNER JOIN dbo.v_r_system AS sys
ON usr.User_Name0 = sys.User_Name0
INNER JOIN dbo.v_RA_System_IPAddresses AS ip
ON sys.ResourceID = ip.ResourceID
WHERE ip.IP_Addresses0 LIKE '192.168.%.%'
AND usr.resourceID IN
(SELECT
resourceID
FROM
dbo.v_RA_User_UserGroupName
WHERE
(sys.decommissioned0 = 0 AND
sys.obsolete0 = 0 AND
sys.client0 = 1))
GROUP BY sys.Name0, sys.User_Name0
Query: компьютеры со определенным софтом
x64:
select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client, SMS_R_System.LastLogonUserName, SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS_64 on SMS_G_System_ADD_REMOVE_PROGRAMS_64.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS_64.DisplayName like "%firefox%"
x86:
select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client, SMS_R_System.LastLogonUserName, SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceId = SMS_R_System.ResourceId where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "%firefox%"
Queriy: поиск остановленной службы
select
SMS_R_System.ResourceId, SMS_G_System_SERVICE.State, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from SMS_R_System inner join SMS_G_System_SERVICE on SMS_G_System_SERVICE.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SERVICE.Name = "ServiceName" and SMS_G_System_SERVICE.State != "Running" and SMS_R_System.Client = 1