CMTrace Open
Free, open-source CMTrace replacement for Windows log files, with Intune and Autopilot ESP diagnostics.
v1.6.0
16.1 MBscanned clean
Verify your download
Select the file you downloaded to check it against the hash we published — the check runs in your browser, nothing is uploaded.
Screenshots
About
CMTrace Open is a free, open-source log viewer and Windows troubleshooting tool. It is intended for administrators and support technicians who work with Windows, ConfigMgr/SCCM, Intune, and related deployment or enrollment issues. The application serves as an independent alternative to Microsoft’s CMTrace.exe.
It automatically detects and parses ConfigMgr/SCCM (CCM), CBS, DISM, Panther, MSI, PSADT, and plain-text logs. Severity-based color coding, real-time log tailing, search, and filtering help users examine changing log files and locate relevant entries. A built-in lookup covers more than 700 Windows, ConfigMgr, and Intune error codes.
Beyond log viewing, CMTrace Open provides troubleshooting workspaces for Intune Management Extension diagnostics, including an event timeline and download statistics. It supports Autopilot Enrollment Status Page and Device Preparation triage, DSRegCmd analysis for Entra join, hybrid join, PRT, MDM, and Windows Hello for Business, as well as software deployment log scanning. Additional tools analyze Windows Event Log files in .evtx format and Sysmon data, check Secure Boot certificates, and collect diagnostic evidence.
CMTrace Open runs on Windows as a single-file executable with no runtime prerequisites, and its Windows builds are code-signed. It is distributed as open-source software, while MirrorNest stores the official build directly on its own storage and scans it for malware before publication. The project is independent and is not affiliated with Microsoft Corporation.
Architecture: x64
What's new in v1.6.0
Stable downloads: https://download.cmtraceopen.com/?source=github-release CMTrace Open v1.6.0 The first release to carry the ConfigMgr/SCCM diagnostics work and the expanded Intune parser family. None of it was in 1.5.2: that was a scoped patch cut from the 1.5.1 branch for a single clipboard fix, so everything below is new to anyone upgrading from it. Highlights ConfigMgr/SCCM diagnostics, client and server — a native evidence path with a diagnostics workspace behind it: site core, management point, distribution point, software update point, hierarchy and replication, task-sequence provenance, client health, policy, deployment, updates, and inventory/compliance/metering analysis, plus bounded database export and advanced server capture contracts. Every finding cites the artifact it came from, coverage gaps stay visible instead of being reported as success, and nothing is inferred from timestamp proximity. The Intune parser family, well past IME and ESP — Win32 app deployment transactions, Windows configuration policy evidence, Microsoft Store app evidence, Company Portal on Windows (LocalState), macOS (Apple unified log) and iOS/iPadOS (Console exports), the full Device Inventory Agent log family with rotation-aware tailing, an Autopilot evidence parser that works outside the ESP workspace, and a four-phase Windows compliance analyzer that will not promote a Conditional Access denial into a local setting verdict. Privacy fixed at the export boundary — the ESP session export and the Intune Compliance lane were each binding at the wrong place. Both now project at the crate boundary, so an unredacted snapshot can no longer be written to a file you choose, and SIDs, tenant domains and device names no longer survive an export. Microsoft Graph sign-in without freezing the UI — enable Graph with an explicit Sign in, cancellable interactive auth, and fast-fail when the host cannot do it (personal MSA, missing org account, provider unavailable). The Entra interactive path is retained where real consent is needed. Restart as administrator, keeping your work — an application-wide elevated restart that restores the sources you had open. Upgrading from 1.5.2 - msiexec /i app-1.6.0-x64.msi DISABLEUPDATECHECKS=1 now completes. On managed Windows 11 running Constrained Language Mode the custom action threw, and with the install not tolerated to continue it rolled the whole installation back; the policy is written through the 64-bit reg.exe instead (#576). - Auto-update is intact: latest.json is rebuilt from the release's own signature assets and carries all eight updater targets — both Windows architectures, the macOS app and its archive, and the AppImage, .deb and .rpm. - winget carries 1.6.0. Scoop is one review away: the bucket update is open as a pull request (#625), and until it merges scoop install cmtrace serves the previous version. The shortlinks below are unaffected either way. Download shortlinks Each shortlink always resolves to the current stable release, so it stays valid in tickets, runbooks, and slides long after this page scrolls out of view. ──────────────────────────────┬─────────────────────────────── Platform │Shortlink ──────────────────────────────┼─────────────────────────────── Windows x64, portable EXE │https://win.cmtrace.net ──────────────────────────────┼─────────────────────────────── Windows ARM64, portable EXE │https://winarm.cmtrace.net ──────────────────────────────┼─────────────────────────────── Windows x64, Lite portable EXE│https://lite.cmtrace.net ──────────────────────────────┼─────────────────────────────── Windows x64, MSI installer │https://msi.cmtrace.net ──────────────────────────────┼─────────────────────────────── macOS Apple silicon, DMG │https://mac.cmtrace.net ──────────────────────────────┼─────────────────────────────── Linux x64, AppImage │https://linux.cmtrace.net ──────────────────────────────┴─────────────────────────────── Nightly channel: https://nightly.cmtrace.net Artifacts in v1.6.0 ─────────────────────┬───────────────────────────────────────────────────────────────── Platform │Files ─────────────────────┼───────────────────────────────────────────────────────────────── Windows x64 and ARM64│signed .msi, signed portable .exe (Full and Lite), signed │-setup.exe ─────────────────────┼───────────────────────────────────────────────────────────────── macOS Apple silicon │signed and notarized .dmg, plus the .app.tar.gz updater archive ─────────────────────┼───────────────────────────────────────────────────────────────── Linux x64 │.AppImage, .deb, .rpm ─────────────────────┴───────────────────────────────────────────────────────────────── The MSI installs both the Full and Lite editions. Portable EXEs require no installation. CycloneDX SBOMs (sbom-rust.cdx.json, sbom-npm.cdx.json) and build provenance attestations are published alongside the binaries. What else changed The release notes above are a digest, not the whole list — this one carries a great deal of parser hardening, privacy work and dependency maintenance. - Full changelog: CHANGELOG.md - Every commit: v1.5.2...v1.6.0
Details
SHA-256
Does this still work for you?
Reviews
No reviews yet — be the first.
More in System Tools
Rufus
A utility that helps format and create bootable USB flash drives, such as USB keys/pendrives, memory sticks, etc.
sortify
High-performance folder organizer. Go binary, safety-first, cross-platform.
PureLink
Clean URLs, remove tracking, unshorten links & view history.
DesktopGo
一个面向 Windows 的桌面启动台,把应用唤起、图标整理和 Everything 文件搜索收进同一个入口。
Password Checker
Checks if password was leaked in previous data breaches
Straumr
CLI tool for managing, saving, and sending HTTP requests across workspaces