Sign in
Microsoft.com
 
System Center Configuration Manager TechCenter
 
 
 
System Center Configuration Manager TechCenter > System Center Configuration Manager Forums > Configuration Manager General > Client install in the DMZ.
Ask a questionAsk a question
Search Forums:
 

QuestionClient install in the DMZ.

  • Thursday, November 05, 2009 5:04 PMBrennan1 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    I am finishing up a new SCCM 2007/WSUS deployment and last piece I am having issues with is a few servers in a DMZ.

    We have a few machines in a DMZ that are setup in a workgroup. Previously to get updates our old WSUS server was specified in the "Specify intranet Microsoft Update service location” policy. Now that WSUS is managed by SCCM I know that the SCCM client needs to set it's own policies.

    The only features we want to be able to control on the DMZ servers are Software Updates. Port 80 is open and WSUS is using the default website without SSL so from what I understand Port 80 should suffice. When I have attempted to install the default client the log is showing all kinds of issues so I beleive I need to specify additional parameters since these machiens are joined to the domain.


    So my two questions are what parameters should I set  when installing the CCMsetup.exe on these DMZ machines to accomplish this? Would just speficying the site code work and MP work do I need to specify additional parameters?

    Do I need to make any changes to the local policies on these servers in the DMZ or will the client install take care of that?

     




    Lossless Audio Addict
     

All Replies

  • Thursday, November 05, 2009 6:57 PMMinh Luong Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Client installation has many paramenters to accomodate different needs.  I couldn't exactly tell what exact parameter that you need.  Could you paste the ccmsetup.log here so we can see what errors that you get? This way, we can provide better thought.

    Thanks,
    Minh.

    Minh
     
  • Thursday, November 05, 2009 7:43 PMBrennan1 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    <![LOG[==========[ ccmsetup started in process 7872 ]==========]LOG]!><time="13:58:40.215+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:8849">
    <![LOG[Version: 4.0.6221.1000]LOG]!><time="13:58:40.215+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:1907">
    <![LOG[GetAdaptersAddressess entry point is supported.]LOG]!><time="13:58:40.215+300" date="11-04-2009" component="ccmsetup" context="" type="0" thread="6772" file="ccmiputil.cpp:118">
    <![LOG[DhcpGetOriginalSubnetMask entry point not supported.]LOG]!><time="13:58:40.215+300" date="11-04-2009" component="ccmsetup" context="" type="2" thread="6772" file="ccmiputil.cpp:169">
    <![LOG[Unable to retrieve AD site membership]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="lsad.cpp:462">
    <![LOG[Attempting to query AD for assigned site code]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="0" thread="6772" file="lsad.cpp:1766">
    <![LOG[Command line: "C:\Documents and Settings\Administrator\Desktop\ccmsetup.exe" ]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:3941">
    <![LOG[Ccmsetup was run without any user parameters specified.  Assume AUTO sitecode and run without registering ccmsetup as a service.]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:3959">
    <![LOG[CCMHTTPPORT:    80]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:7847">
    <![LOG[CCMHTTPSPORT:    443]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:7862">
    <![LOG[CCMHTTPSSTATE:    2147483648]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:7880">
    <![LOG[CCMHTTPSCERTNAME:    ]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:7908">
    <![LOG[FSP:    ]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:7923">
    <![LOG[No MP or source location has been explicitly specified.  Trying to discover a valid content location...]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:4271">
    <![LOG[Current directory is not a valid source location.]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:4288">
    <![LOG[Looking for an MP source through SLP...]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:4303">
    <![LOG[IPv6 entry points already initialized.]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="0" thread="6772" file="ccmiputil.cpp:75">
    <![LOG[DHCP entry points already initialized.]LOG]!><time="13:58:40.230+300" date="11-04-2009" component="ccmsetup" context="" type="0" thread="6772" file="ccmiputil.cpp:139">
    <![LOG[Unable to retrieve AD site membership]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="lsad.cpp:462">
    <![LOG[Attempting to query AD for assigned site code]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="0" thread="6772" file="lsad.cpp:1766">
    <![LOG[Couldn't find an MP source through SLP.]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:4315">
    <![LOG[No valid source or MP locations could be indentified to download content from.Ccmsetup.exe cannot continue.]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="3" thread="6772" file="ccmsetup.cpp:4326">
    <![LOG[Invalid ccmsetup command line: "C:\Documents and Settings\Administrator\Desktop\ccmsetup.exe" ]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="3" thread="6772" file="ccmsetup.cpp:4405">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='100' will not be sent.]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:9169">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='307' will not be sent.]LOG]!><time="13:58:40.246+300" date="11-04-2009" component="ccmsetup" context="" type="1" thread="6772" file="ccmsetup.cpp:9169">
    Lossless Audio Addict
     
  • Saturday, November 07, 2009 9:04 PMCarol BaileyMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    If they are in a workgroup, have you checked "How to Install Configuration Manager Clients on Workgroup Computers": http://technet.microsoft.com/en-us/library/bb680962.aspx ?  This also reminds you to configure a Network Access account, and lists the features that aren't supported for workgroup computers.

    Key to installing clients in workgroups is making sure that they can access a server locator point - if they can't find this through the WINS that they are registering with, then specify it on the command line with CCMSetup.  Looking at your log file entries, I think this might be what's missing.  Make sure that you have a server locator point installed and then try the following:
    CCMSetup.exe SMSSITECODE=<sitecode> SMSSLP=<servername_or_IP>

    You don't need to specify /MP unless you want to download client installation files from a management point other than the default one in the specified site - the client will find it automatically, so my advice is keep the command simple and don't specify it.  After the client is installed, it will complete site assignment and receive policy, which includes setting local policy for the software update point.


    - Carol


    This posting is provided “AS IS” with no warranties and confers no rights
     
  • Tuesday, November 10, 2009 9:10 PMBrennan1 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    I added the SLP Role on the site server and kicked off a install using the parameters suggested. In checking the log it looked like it should be working but no such luck.


    <![LOG[==========[ ccmsetup started in process 1040 ]==========]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:8849">
    <![LOG[Version: 4.0.6221.1000]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:1907">
    <![LOG[Command line parameters for ccmsetup have been specified.  No registry lookup for command line parameters is required.]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:3932">
    <![LOG[Command line: "C:\WINDOWS\ccmsetup\ccmsetup.exe" /runservice  SMSSITECODE=SPD SMSSLP=SPSMGT01.softpro.corp]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:3941">
    <![LOG[CCMHTTPPORT:    80]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:7847">
    <![LOG[CCMHTTPSPORT:    443]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:7862">
    <![LOG[CCMHTTPSSTATE:    2147483648]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:7880">
    <![LOG[CCMHTTPSCERTNAME:    ]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:7908">
    <![LOG[FSP:    ]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:7923">
    <![LOG[No MP or source location has been explicitly specified.  Trying to discover a valid content location...]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:4271">
    <![LOG[Current directory is not a valid source location.]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:4288">
    <![LOG[Looking for an MP source through SLP...]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:4303">
    <![LOG[GetAdaptersAddressess entry point is supported.]LOG]!><time="15:30:54.484+300" date="11-09-2009" component="ccmsetup" context="" type="0" thread="2608" file="ccmiputil.cpp:118">
    <![LOG[DhcpGetOriginalSubnetMask entry point not supported.]LOG]!><time="15:30:54.500+300" date="11-09-2009" component="ccmsetup" context="" type="2" thread="2608" file="ccmiputil.cpp:169">
    <![LOG[Unable to retrieve AD site membership]LOG]!><time="15:30:54.515+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="lsad.cpp:462">
    <![LOG[Attempting to query AD for assigned site code]LOG]!><time="15:30:54.515+300" date="11-09-2009" component="ccmsetup" context="" type="0" thread="2608" file="lsad.cpp:1766">
    <![LOG[Couldn't find an MP source through SLP.]LOG]!><time="15:30:54.546+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:4315">
    <![LOG[No valid source or MP locations could be indentified to download content from.Ccmsetup.exe cannot continue.]LOG]!><time="15:30:54.546+300" date="11-09-2009" component="ccmsetup" context="" type="3" thread="2608" file="ccmsetup.cpp:4326">
    <![LOG[Invalid ccmsetup command line: "C:\WINDOWS\ccmsetup\ccmsetup.exe" /runservice  SMSSITECODE=SPD SMSSLP=SPSMGT01.softpro.corp]LOG]!><time="15:30:54.546+300" date="11-09-2009" component="ccmsetup" context="" type="3" thread="2608" file="ccmsetup.cpp:4405">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='100' will not be sent.]LOG]!><time="15:30:54.546+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:9169">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='307' will not be sent.]LOG]!><time="15:30:54.546+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="2608" file="ccmsetup.cpp:9169">
    <![LOG[Failed to start the ccmsetup service (1053)]LOG]!><time="15:30:54.671+300" date="11-09-2009" component="ccmsetup" context="" type="3" thread="1560" file="ccmsetup.cpp:3356">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='301' will not be sent.]LOG]!><time="15:30:54.671+300" date="11-09-2009" component="ccmsetup" context="" type="1" thread="1560" file="ccmsetup.cpp:9169">
    Lossless Audio Addict
     
  • Tuesday, November 10, 2009 9:21 PMReddy Surendar Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    No valid source or MP locations could be indentified to download content from.Ccmsetup.exe cannot continue

    Client is unable to retrieve MP, is this site published in AD ? MP server has required access on your system container ?
    Surendar Reddy
     
  • Wednesday, November 11, 2009 12:41 AMMinh Luong Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    If this is an AD extended environment, and the machine is domain-joined, and when ccmsetup is run without any parameter (this is what first log indicates), then the machine will be able to automatically locate a download source, which is usually the share on the MP (or a share that the user specifies, this will require a "/source" parameter), and also automatically a site code (assume that you create proper boundaries within the hierarchy; otherwise, you will need to specify a site code in the command line).  However, from you communication with Carol, I would assume that your machine is a work-group machine.

    If it is a work-group machine, you will need to give the machine an SLP to locate the MP to download client bits (or use the "/source" parameter so the client can download from this source; of course, your machine needs to have access to this source).  You will need to install an SLP on the site server and register it to WINS. 

    Thanks,
    Minh.
    Minh
     
  • Wednesday, November 11, 2009 2:23 PMCarol BaileyMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    You don't need to register the SLP in WINS if you're specifying it on the command line.  Did you notice in the log file "Invalid ccmsetup command line: "C:\WINDOWS\ccmsetup\ccmsetup.exe" /runservice  SMSSITECODE=SPD SMSSLP=SPSMGT01.softpro.corp" ?

    Check the CCMSetup properties (http://technet.microsoft.com/en-us/library/bb680980.aspx) - there's /service and /noservice but not a /runservice.  Did you include this parameter?  If you want to run CCMSetup as a service using the local system account, then this is the default and no need to specify anything.  Only if you want to prevent CCMSetup from running as service should you specify /noservice.

    I'm not that familiar with this particular log file, but I can't see from it that the client is actually using the specified sever locator point that it will need (to find installation files and complete site assignment) and an invalid property can stop CCMSetup from reading the other properties. Also check that the FQDN you're specifying for the server locator point resolves correctly from this client.


    - Carol


    This posting is provided “AS IS” with no warranties and confers no rights
     
  • Thursday, November 12, 2009 6:58 PMBrennan1 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    I am checking a couple of things and will report back.

    One odd item, I did not specify /Run service. All the parameters I used are below.


    CCMSetup.exe SMSSITECODE=SPD SMSSLP=SPSMGT01.softpro.corp

     
  • Thursday, November 19, 2009 10:56 PMBrennan1 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Finally figured it out, added entried to the LMhosts file and for some reason that did the trick. I already had entried in the hosts file so not sure why I needed any additional.

     
  • Tuesday, November 24, 2009 2:31 AMCarol BaileyMSFTUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Good to hear it's working now - so to sum up for other customers, you used a server locator point because this client is in a workgroup, installed the client using CCMSetup.exe SMSSITECODE=<sitecode> SMSSLP=<servername_or_IP>, and got name resolution working on the client for the site system servers by using the LMHosts file.