Configuration Manager General Forum

How to change the site code

Tue, 24 Nov 2009 19:49:06 Z

Hello,

I am trying to move a Client from the site DTS to the site TST.
I have
- uninstall the previous Client
- delete the machine from DTS and TST
- discover the machine from the TST (Test) server
- the machine appear on TST after 5 minutes
- let the machine one day
- right click on the machine and try Install Client
also
- ran ccmsetup /Mp:configmgrtest smssitecode=tst

I see the ccmsetup running...
but after three days the machine is still pointing to DTS???

The boudries have been added on the TST test server and removed from DTS

I have the ccmsetup.log on the machine which looks good with the site code TST

quote:

MSI PROPERTIES are INSTALL="ALL" SMSSITECODE="TST" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0" CCMFIRSTCERT="0" SMSPUBLICROOTKEY=0602000000A4000052534131000400000100010005C07A2BF73797FAACDDB
F3EC830CC471F88E675FF2D22E495264BB62A412DCE11118D8D61DBD5F3C5A4128CB08279DEFB3
E4092D0F966F49DF8253F5D38911C99B095F4700C9737DC1F965FAC29AD577A3705438B79CD71B0
B4B75DF2BE68C4A4A5F69C4229D94B3969DF3A64D88AD1149557490B324310AC5A43C0E52FA5C1 INSTALL=ALL

quote:

Installation succeeded.

but the smscliui.log shows still the old site DTS..

quote:

Current Assigned Site: DTS
Attempt to update the assigned site has failed. Error: 0X80040001
SMS Site code has not been changed. smscliui 11/23/2009 1:08:21 PM 2720 (0x0AA0)

but not in the Start > Control panel > Configuration Manager > General tab tghe managment point is still CONFIGMGRDTS the old server
in the Start > Control panel > Configuration Manager > Advanced tab it is still DTS the old site

I have
- uninstall the previous Client
- delete the machine from DTS and TST
- discover the machine from the TST (Test) server
- the machine appear on TST after 5 minutes
- ran ccmsetup /Mp:configmgrtest smssitecode=tst RESETKEYINFORMATION=TRUE

Waiting the end of ccmsetup process... + msiexec
same old site ... Any log to check for this issue?

quote:

PolicyAgent.log
Requesting policy from authority 'SMS:DTS' PolicyAgent_RequestAssignments 11/23/2009 1:54:37 PM 1972 (0x07B4)

ClientLocation.log
Setting Assigned Site ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Assigning client to site 'DTS' ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Getting Assigned Site ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Client is currently not assigned to any site ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Removing client site assignments ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Raising event:
instance of CCM_RemoteClient_Reassigned
{
DateTime = "20091123214422.826000+000";
LastAssignedSite = "";
NewAssignedSite = "DTS";
ProcessID = 4316;
ThreadID = 4940;
};
ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Client assigned to site 'DTS' ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Discover Default MP ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Site Code is DTS; Management Point is CONFIGMGRDTS.AD.MEDCTR.UCLA.EDU ClientLocation 11/23/2009 1:44:22 PM 4940 (0x134C)
Current Management Point is CONFIGMGRDTS.AD.MEDCTR.UCLA.EDU with version 6221 and capabilities: <Capabilities SchemaVersion="1.0">
</Capabilities>. ClientLocation 11/23/2009 1:46:47 PM 5936 (0x1730)

smscliui.log
Current Assigned Site: DTS smscliui 11/23/2009 1:54:16 PM 4808 (0x12C8)

Checking the ClientLocation.log it seems removing the old site but reassigning the same old site ...!!!
Should I reboot the Client?

Another try:
ccmsetup /uninstall -- done
ccmclean /all -- done
ccmdelcert -- done
reboot

Wait a night ( about 8 hours)
When I run ccmsetup /mp:configmgrtest smssitecode=TST RESETKEYINFORMATION=TRUE
Still going to the old DTS site...

One quick question:
- if the machine is out of boundaries but in OU structure of the old Server which is the order it will be treated...

Thanks,
Dom

Altiris Support / System Center Configuration Manager Support

SCCM 2007 Constant Despooler error 4406

Fri, 20 Nov 2009 16:55:27 Z

Good morning,

I have just installed a SCCM 2007 server and have begun configuring my secondary sites. I had just done an install at our sister company a few weeks back and it went flawless, but not so much this time around. Many of my secondary sites are CONSTANTLY getting the following error:

SMS_DESPOOLER 4406: SMS Despooler received an instruction and package file from site XXX that contains either software distribution data or inter-site replication data, however either the signature on the package or the hash algorithm ID used for the signature is not valid, the despooler will delete the instruction and the package file.

On one secondary server last night alone it occured at 2:41AM, 4:02 AM, 5:17 AM, 6:17 AM, 9:17 AM etc. Another one had it occur at similar times...no 2:41 but 4:02 AM, 5:17, 6:17, 9:17.

Any idea what could be happening here? I have done many searches and not come up with much of anything. Thanks in advance.

Problems building a collection.

Wed, 25 Nov 2009 17:28:08 Z

I want to have all systems in our network and not have anything that is in the Executive Branch. I tried went to the Queries area and built a query that shows everything in that AD OU. I then tried to build a sub-select query off of that.

Here's what the query looks like:

select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from SMS_R_System inner join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SYSTEM.Name not in (select distinct SMS_G_System_SYSTEM.Name, SMS_R_System.LastLogonUserName from SMS_R_System inner join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_R_System.SystemOUName = "int.chickasaw.net/CNHQ/Executive Branch")

I'm not even sure if I'm doing this right.

How often to update Collection membership

Wed, 25 Nov 2009 18:26:03 Z

Apologies if this has already been posted and answered, but I couldn't find anything via the search.

I've been thinking about how often we should update our collections, and at the moment its once per day which isn't working out (patience problems)...
I'm thinking once every 6 hours, and don't foresee any problems with this increased frequency as it will only be searching the DB for existing machines in SCCM DB, right?

Is there a standard recommendation? Or any consequences to the increased frequency?

Thanks in advance for any help.

How do you make PXE show whats its downloading?

Wed, 25 Nov 2009 16:17:36 Z

At the end of demo 4 when the guy PXE boots the machine it has detailed info about what files are downloading. like \SMSImages\SMSPKG\CMS00001\boot.CMS0001.wim The geek in me wants that cool stuff.

http://blogs.technet.com/kevinremde/archive/2009/11/11/CLI312.aspx

How to handle computer where the client is not installing?

Sun, 22 Nov 2009 01:29:04 Z

We have about 1700 workstations and servers. The report shows about 400 non-clients with failed installation. Randomly looking at ccmsetup.log, reasons vary from missing SP4 on 2000, to all kinds of issues like permissions issues, MSI installer version etc.
Short of writing a script to collect the logs, mine and analyze the failure reason, what other option do we have?
BTW, we deployed Office 2007 this weekend to 500 computers with installed clients, and had close to 98% success rate. Life is good!
Once again, thanks for all the tremendous help provided here, this forum rocks!

CSMSAMDiscoveryTask

Wed, 25 Nov 2009 16:49:49 Z

Whilst trying to set up Out of Band management for ConfigMgr 2007 SP1 I noticed the following entry in amtopmgr.log:

Error: CSMSAMTDiscoveryTask::Execute, discovery to (192.168.11.11-)failed     SMS_AMT_OPERATION_MANAGER    25/11/2009 16:17:58    3344 (0x0D10)
Auto-worker Thread Pool: Error, Can not execute the task successfully after try it 3 times. Remove it from task list.    SMS_AMT_OPERATION_MANAGER    25/11/2009 16:17:58    3344 (0x0D10)
STATMSG: ID=7207 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_AMT_OPERATION_MANAGER" SYS=VSERV05 SITE=WOL PID=5448 TID=3344 GMTDATE=Wed Nov 25 16:17:58.054 2009 ISTR0="discover" ISTR1="" ISTR2="0x       0" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0    SMS_AMT_OPERATION_MANAGER    25/11/2009 16:17:58    3344 (0x0D10)
Error: CSMSAMTDiscoveryTask::Execute, discovery to (192.168.11.11-)failed     SMS_AMT_OPERATION_MANAGER    25/11/2009 16:17:58    1448 (0x05A8)
Auto-worker Thread Pool: Error, Can not execute the task successfully after try it 3 times. Remove it from task list.    SMS_AMT_OPERATION_MANAGER    25/11/2009 16:17:58    1448 (0x05A8)
STATMSG: ID=7207 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_AMT_OPERATION_MANAGER" SYS=VSERV05 SITE=WOL PID=5448 TID=1448 GMTDATE=Wed Nov 25 16:17:58.054 2009 ISTR0="discover" ISTR1="" ISTR2="0x       0" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0    SMS_AMT_OPERATION_MANAGER    25/11/2009 16:17:58    1448 (0x05A8)

What does this CSMSAMTDiscoveryTask do? And, what would cause this error?

Thanks,

Rolf.

Change SQL Server

Wed, 25 Nov 2009 15:04:52 Z

Hello,

We've been running Configuration Manager for a few months now, but the Console has been horribly laggy. After some research, it looks like having the SQL Server and the ConfigMgr server running on the same box causes lots of issues. In this case, we want to move the SQL Server to another box we have. Just installed SQL on it, but now I need to know how to move everything over so that I don't start seeing errors spitting out at me. Can someone tell me the easiest way to do this?

THanks,

Distribution Point Issue-Urgent

Wed, 25 Nov 2009 15:58:37 Z

Hello All,

Is there any log file or report available in SCCM 2007, which I can use to see which particular DPs are available to MP

Because I have few PDPs created on Application servers, but none of my machine is communicating to PDP for package download. Machine keep trying to contact SCCM Site server itself for package download.

Kindly Help

SCCM and Server share used as PDPs

Wed, 25 Nov 2009 14:50:52 Z

I ma using Server share as Protected DPs. DO i need to install IIS on the machines used as server shares?

out of band console not working

Wed, 03 Dec 2008 17:01:25 Z

I succeeded to provision some computers (amtstatus=3) but the oobconsole can not connect to any of these machines. The system goes busy-connecting-disconnected.
The oobconsole.log contains one error :
[3/12/2008 17:51:44] :GetAMTPowerState fail with result:0x80072EE9

I can open the webinterface of the managementcontroller using https://j-feys-xp2.hhr.be:16993, but I can't log on. No user/password combination is accepted.

the amtopmgr.log contains a configuration code :
Finished provision on AMT device j-feys-xp2.hhr.be with configuration code (65534)! SMS_AMT_OPERATION_MANAGER 3/12/2008 12:11:04 7548 (0x1D7C)

Does anyone know what these resultcodes mean ?

ps: I created my own provisioning certificate with a windows 2008 enterprise certificate server.

Cannot connect to Provisioned client

Wed, 25 Nov 2009 13:39:43 Z

I did create a OU and gave the site server full control permissions on this object and descendend objects. I moved the computer account to that OU.

The computer is provisioned I can start the console.

The user is configured on the OOB component.

[4][25-11-2009 14:35:48] :IMR_SOLOpenTCPSession2 with user = EU\ala_admin fail with result:0xD, description:Socket Error

MEBx and AMT Provisioning and Discovery accounts

Wed, 25 Nov 2009 15:15:17 Z

We're trying to set up Out-of-Band management through ConfigMgr 2007 SP1. Not surprisingly perhaps, there are some issues.
We are using an internal CA, and at this stage I need to enter the thumbprint hash manually. When you do this, you are forced to change the AMT password (=MEBx password?).

Now, when it comes to filling out the Out of Band Management properties, it gets confusing for me.
There is the MEBx account, there are 'AMT user accounts' and 'AMT Provisioning and Discovery accounts'.

In the ConfigMgr online library, under 'About the MEBx account', it says under the 'Account and Password Creation' section:

The MEBx account is named admin , and by default, the password is admin . Your manufacturer might provide a customized password, or you might have specified your choice of password in AMT. If the MEBx password is other than admin , specify an AMT Provisioning and Discovery Account on the Out of Band Management Configuration Properties: Provisioning Settings Tab . ...
Configuration Manager might change the MEBx password during the provisioning process, depending on whether it has been changed previously on the AMT-based computer and on the version of AMT. Specify your choice for an alternative MEBx password on the Out of Band Management Properties: General Tab . If you import AMT-based computers that have already been provisioned, specify the MEBx password by using the Import Computer for Out of Band Management Wizard.

Am I correct in thinking that the MEBx password is what you want the AMT password to be after provisioning, and that the 'AMT Provisioning and Discovery' accounts are what the AMT password could be before provisioning?

Thanks,

Rolf.

Error in Active Directory System Discovery (0x80005010)

Tue, 10 Nov 2009 13:31:21 Z

Hi,

I've configured Active Directory System Discovery in a SCCM 2007 R2 SP2 configuration. I see several SCCM clients being populated with OU information, but others do not. I've taken a look in the adsysdis.log. There it states for a very large number of computer accounts:

INFO: discovered object with ADsPath = 'LDAP://<domain controller>/<DN computerobject>'
WARN: Could not get property (domain) for system (0x80005010)

Afterwards there is no entry that states a ddr is written for this computer object and the SCCM client object is not populated with information.
Can someone explain what exactly is the issue, and how to solve it?

WQL Query Help

Fri, 20 Nov 2009 21:10:29 Z

Why can't SCCM just use SQL for it's collection queries? Doesn't it store and convert all the WMI info into SQL tables anyway??

I'm trying to get a list of all machines used by users in a certain AD group. The SQL works fine but I can't get the WQL to work. Anyone more familiar with WQL care to lend a hand?

declare @GroupName varchar(256)

set @GroupName = 'ALL-GMs'

SELECT
dbo.v_R_System.ResourceID,
dbo.v_R_System.Active0,
dbo.v_R_System.Client0,
dbo.v_R_System.Name0,
dbo.v_R_System.Operating_System_Name_and0,
dbo.v_R_System.SMS_Unique_Identifier0,
dbo.v_R_User.Full_User_Name0,
dbo.v_RA_User_UserGroupName.User_Group_Name0

FROM dbo.v_R_User
INNER JOIN dbo.v_RA_User_UserGroupName
ON dbo.v_R_User.ResourceID = dbo.v_RA_User_UserGroupName.ResourceID
RIGHT OUTER JOIN dbo.v_R_System ON dbo.v_R_User.User_Name0 = dbo.v_R_System.User_Name0

WHERE (dbo.v_RA_User_UserGroupName.User_Group_Name0 = 'MyDomain\' + @GroupName)

Thanks!

SCCM Cross Forest Management

Wed, 25 Nov 2009 14:20:54 Z

In my scenario my I have SCCM setup in one of the forest and I want to manage clients in following situations:

1) Clients in multiple forests with no trust to the forest where SCCM is deployed?

2) Clients in multiple forests with trust to the forest where SCCM is deployed?

3) Clients in workgroup?

Is it possible to achieve the above and what is the best way to do it?

SCCM and Forefront for dummies ;)

Tue, 10 Nov 2009 15:48:50 Z

Hi, we have a running SCCM site, but we're not happy with our current malware solution and was thinking of trying out Forefront.

Does anyone have a dummies guide on how to setup Forefront, and how to get it to interact with SCCM?

Our one SCCM server is configured to deliver Windows updates and such to our clients...

I've found a few tips on how to get these two to work together, but nothing really on how to get Forefront to work in the first place - so thanks in advance for any pointers :)

Service account for discovery

Wed, 11 Nov 2009 06:45:04 Z

Is there a way to configure the service account that is used to perform user discovery (for instance) in a trusted domain? (I want to discover users from a trusted domain to do some user targetting; computers are in the same "resource" domain as sccm).

Uninstall client from Primary Server?

Tue, 24 Nov 2009 23:50:00 Z

Hi
By a mistake I've installed the SCCM client on all my Primary servers. Usually I would run the "ccmsetup.exe /uninstall". But I'm unsure if that's the right thing to do on the Server. Wouldn't like to mess anything up. Does anybody know the right way to remove the client?.
Thanks

Secondary Site Failing all Prerequiste Checks

Tue, 24 Nov 2009 14:31:57 Z

I've upgraded my Primary Site and one of my Secondary Sites with no problems, which is against the laws of Murphy. So of course my last secondary site has to fail the prerequisite check and by fail I mean it failed everything even domain membership, Short File Name 8.3 support. So i'm tring to figured out why the prerequisite is broken. I've rebooted the server. Extracted the update again, redownloaded the updates. Check that the machine and my account is local admin. And i'm still stumped. I browsed around the site and Google with not much luck on finding similar issues.

Cannot get computer provisioned

Wed, 25 Nov 2009 11:08:38 Z

ON SCHEDULE OOBMgmt 24-11-2009 18:45:57 3988 (0x0F94)
BEGIN oobmgmt 24-11-2009 18:45:57 3988 (0x0F94)
CAMTProvisionEndpoint::GetProvisionSettings: GetObject() failed: 80041002 oobmgmt 24-11-2009 18:45:57 3988 (0x0F94)
!! AutoProvision policy disabled. oobmgmt 24-11-2009 18:45:57 3988 (0x0F94)
END oobmgmt 24-11-2009 18:45:57 3988 (0x0F94)
BEGIN oobmgmt 25-11-2009 11:00:07 2288 (0x08F0)
Retrying to activate the device. oobmgmt 25-11-2009 11:00:07 2288 (0x08F0)
Raising event:
[SMS_CodePage(850), SMS_LocaleID(1043)]
instance of SMS_OOBMgmt_StartConfig_Failure
{
ClientID = "GUID:a938086b-8d7e-46e9-befe-91a50378ab29";
DateTime = "20091125100007.922000+000";
ErrorCode = "1";
FailureCategory = "None certificate is valid between device and server certificate hash.";
MachineName = "W031-7325";
ProcessID = 1032;
SiteCode = "VEL";
ThreadID = 2288;
};
oobmgmt 25-11-2009 11:00:07 2288 (0x08F0)
Failed to Call CheckCertificate provider method, 80041001 oobmgmt 25-11-2009 11:00:07 2288 (0x08F0)
Upload manufacturing data state message sent successfully. TopicType = STATE_TOPICTYPE_AMT_CLIENT_DATA_SYNCHRONIZE, Root Certificate Hash = , AMT Core Version = 3.2.10 oobmgmt 25-11-2009 11:00:07 2288 (0x08F0)
END oobmgmt 25-11-2009 11:00:08 2288 (0x08F0)

Failed Client deployment not reporting back to FSP

Mon, 23 Nov 2009 21:45:47 Z

i have about 400 failed clients, and only 22 entries in the FSP report.
Am i looking at a permission issue?

double ccr entries for clients

Tue, 24 Nov 2009 08:16:37 Z

Hi,
Please help me out with sccm client installations.
Everything is working fine in sccm server.
But client installations take some time as when checked i came to know that there are more than 11,000 ccr which needs to be processed.
We have a total of 550-600 computers in our environment.
Then how come 11,000 ccr is being processed.
When checked there are multiple entries for a single computer.
Please help why is this behavior of sccm during client installation.
Thanx

Irshad

irshadahmed

[DBNETLIB][ConnectionOpen (PreLoginHandshake()).]General network error.

Thu, 19 Nov 2009 12:08:12 Z

Hi,

I am investigating following error:

MPDB ERROR - CONNECTION PARAMETERS
SQL Server Name     : FISHEL03002
SQL Database Name   : SMS_P02
Integrated Auth     : True

MPDB ERROR - EXTENDED INFORMATION
MPDB Method         : Init()
MPDB Method HRESULT : 0x80004005
Error Description   : [DBNETLIB][ConnectionOpen (PreLoginHandshake()).]General network error. Check your network documentation.
OLEDB IID           : {0C733A8B-2A1C-11CE-ADE5-00AA0044773D}
ProgID              : Microsoft OLE DB Provider for SQL Server

MPDB ERROR - INFORMATION FROM DRIVER
Native Error no. : 11
Error State : 1
Class (Severity) : 16

Because I am not SCCM specialist myself (only DBA ...) I need basic advice to which way to go firewall, SQL or SCCM or something else.

BR,

JoukoK

WU Agent Version Error

Wed, 25 Nov 2009 05:19:59 Z

I am facing problem in my new SCCM Clients that the WU Agent is found in old version 5.4.3790.2180 & demands for latest version 7.1.6001.65. when i tried to install manually it comes up with error 0x8024d007, i have also downloaded the WU Agent from microsoft & overwrite it & initiate the installation again but no heal. i dont understand why previously it was registering itself to the 7.1xxxxxxxxx & now to 5.4xxxxxxxxxxxxx. below is the log of one of my client. plz help

<![LOG[Its a WSUS Update Source type ({926F192A-969D-41E5-8487-CCAE46C02FB3}), adding it.]LOG]!><time="16:00:50.460+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2224" file="sourcemanager.cpp:1339">
<![LOG[Unable to read existing resultant WUA policy. Error = 0x80070002.]LOG]!><time="16:00:50.460+000" date="11-24-2009" component="WUAHandler" context="" type="2" thread="2224" file="sourcemanager.cpp:1017">
<![LOG[Enabling WUA Managed server policy to use server: http://SCCM.KESC.COM.PK:8530]LOG]!><time="16:00:50.460+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2224" file="sourcemanager.cpp:1045">
<![LOG[Waiting for 2 mins for Group Policy to notify of WUA policy change...]LOG]!><time="16:00:50.523+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2224" file="sourcemanager.cpp:1051">
<![LOG[Waiting for 30 secs for policy to take effect on WU Agent.]LOG]!><time="16:00:56.648+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2224" file="sourcemanager.cpp:1115">
<![LOG[Added Update Source ({926F192A-969D-41E5-8487-CCAE46C02FB3}) of content type: 2]LOG]!><time="16:01:26.664+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2224" file="sourcemanager.cpp:1372">
<![LOG[WU Agent version too low (5.4.3790.2180), needs to be at least: 7.1.6001.65]LOG]!><time="16:01:26.711+000" date="11-24-2009" component="WUAHandler" context="" type="3" thread="2224" file="cwuahandler.cpp:872">
<![LOG[Its a WSUS Update Source type ({926F192A-969D-41E5-8487-CCAE46C02FB3}), adding it.]LOG]!><time="16:31:28.071+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2768" file="sourcemanager.cpp:1339">
<![LOG[Existing WUA Managed server was already set (http://SCCM.KESC.COM.PK:8530), skipping Group Policy registration.]LOG]!><time="16:31:28.087+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2768" file="sourcemanager.cpp:1032">
<![LOG[Added Update Source ({926F192A-969D-41E5-8487-CCAE46C02FB3}) of content type: 2]LOG]!><time="16:31:28.103+000" date="11-24-2009" component="WUAHandler" context="" type="1" thread="2768" file="sourcemanager.cpp:1372">
<![LOG[WU Agent version too low (5.4.3790.2180), needs to be at least: 7.1.6001.65]LOG]!><time="16:31:28.118+000" date="11-24-2009" component="WUAHandler" context="" type="3" thread="2768" file="cwuahandler.cpp:872">
<![LOG[Its a WSUS Update Source type ({926F192A-969D-41E5-8487-CCAE46C02FB3}), adding it.]LOG]!><time="10:01:00.912+000" date="11-25-2009" component="WUAHandler" context="" type="1" thread="1584" file="sourcemanager.cpp:1339">
<![LOG[Existing WUA Managed server was already set (http://SCCM.KESC.COM.PK:8530), skipping Group Policy registration.]LOG]!><time="10:01:01.131+000" date="11-25-2009" component="WUAHandler" context="" type="1" thread="1584" file="sourcemanager.cpp:1032">
<![LOG[Added Update Source ({926F192A-969D-41E5-8487-CCAE46C02FB3}) of content type: 2]LOG]!><time="10:01:01.147+000" date="11-25-2009" component="WUAHandler" context="" type="1" thread="1584" file="sourcemanager.cpp:1372">
<![LOG[WU Agent version too low (5.4.3790.2180), needs to be at least: 7.1.6001.65]LOG]!><time="10:01:01.178+000" date="11-25-2009" component="WUAHandler" context="" type="3" thread="1584" file="cwuahandler.cpp:872">

Lenovo T61 AMT issue

Mon, 23 Jun 2008 16:22:44 Z

I'm having trouble configuring AMT on my new SCCM 2007 SP1 install - maybe I'm just doing it wrong, but I thought I would see if anyone had any tips.

I have a new, single site SCCM 2007 SP1 install, in native mode, with the OOB role installed. Certificates are correctly generated and installed (at least, I'm not seeing any cert related errors, and native mode communications work perfectly). My T61 is running AMT 2.6 (upgraded the firmware) so I installed the WsMAN translator, which logs as correctly installed when the SCCM server starts up.

I've gone into the AMT BIOS and changed the password from default (I'm looking to provision in-band) and configured the AMT server IP and port (tried both 16992 and 9971...not clear on which to use) as well as name and domain for the client itself. I added a discovery account with the correct new password to SCCM.

When I run a management controller discovery for the client in SCCM, nothing happens. Nothing even gets logged, as far as success or failure. It turns out I have an established connection from server to client on 16992 (I can see it in netstat) but nothing further happens. The connection never seems to disconnect either...I'm seeing it right now, about half an hour from the last discovery attempt. I do notice that when I boot my client, the AMT status is reported as disabled, even though I've enabled it in BIOS and the hardware is detected in Windows, with drivers and everything properly installed. Should it show disabled until it gets provisioned, or is this one of my issues? I would think it's working properly if the ports are available for connection...

If there is a failure somewhere, should I be seeing some kind of incorrect password, could not communicate, invalid certificate...something along those lines? I get absolutely zero feeback from any server side logs, but there is a line in my client side "oobmgmt.log":

CAMTProvisionEndpoint::GetProvisionSettings: GetObject() failed: 80041002

This occurs on every boot sequence for the client, not on every management controller discovery attempt.

Does anyone have any tips? Anyone had any success with the T61 and AMT? I'm not 100% hung up on making this work, I'm just playing with new functionality. But it sure would be a nice to have feature.

Thanks,

Andrew

SCCM Client not installing anymore

Tue, 11 Nov 2008 21:02:28 Z

Recently at my work, we have noticed that the SCCM Client is not automatically installing. We did find when we tried to manually run it, we got the error below:

--------------------------------------------------------------

<![LOG[Failed to send HTTP request. (Error at WinHttpSendRequest: 12029)]LOG]!><time="14:09:53.470+300" date="11-11-2008" component="ccmsetup" context="" type="2" thread="2976" file="ccmsetup.cpp:5745">
<![LOG[Can't connect to or retrieve file: http://sccmserver.ourdomain.org/CCM_Client/ccmsetup.cab. Will attempt a retry...]LOG]!><time="14:09:53.470+300" date="11-11-2008" component="ccmsetup" context="" type="2" thread="2976" file="ccmsetup.cpp:5781">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="14:09:53.470+300" date="11-11-2008" component="ccmsetup" context="" type="0" thread="2976" file="ccmsetup.cpp:8191">
<![LOG[Failed to send HTTP request. (Error at WinHttpSendRequest: 12029)]LOG]!><time="14:20:14.848+300" date="11-11-2008" component="ccmsetup" context="" type="2" thread="2976" file="ccmsetup.cpp:5745">
<![LOG[Can't connect to or retrieve file: http://sccmserver.ourdomain.org/CCM_Client/ccmsetup.cab. Will attempt a retry...]LOG]!><time="14:20:14.848+300" date="11-11-2008" component="ccmsetup" context="" type="2" thread="2976" file="ccmsetup.cpp:5781">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="14:20:14.848+300" date="11-11-2008" component="ccmsetup" context="" type="0" thread="2976" file="ccmsetup.cpp:8191">

--------------------------------------------------------------

I am not sure why the site is pointing to an http:// address, which would be external. I would think it would point to an internal server. I can not find where to configure this information or where it even pulls from.

I did go through and ran the CCMSETUP file indicating where the source files are located. It did start to install the CONFIGURATION MANAGER, but never got a GUID. Under the ACTIONS tab, the only two items listed are the MACHINE POLICY and USER POLICY evaluation cycles. Any idea why it didnt complete?

Any information is greatly appreciated!

can’t see any machines in SCCM 2007 collection

Mon, 23 Nov 2009 09:05:58 Z

I installed SCCM 2007 SP2 in my LAB entailment. I installed DC, member server with SQL & SCCM 2007 SP2 and some VISTA, XP clients.

But I can’t see any machines in SCCM 2007 collection. As any settings to search/ discover machines from domain.

I want to upgrade Vista clients to Windows 7 using SCCM,

Regards

SCCM 2007 R2 - Run it on virtual machine?

Tue, 24 Nov 2009 13:59:07 Z

I will install SCCM 2007 R2 soon. My question is regarding "hardware" requirements since I'm installing in a virtual environment.

My idea:
"Main server" = 1CPU, 2GB RAM, 100GB disk
SQL (Clustered) = It will be enough, if 1 Gbps is ok?
WSUS server = located on other site (10 mbps)
DP's on all site to minimize WAN traffic.
Approx 3000 Clients
Everything is connected via MPLS WAN. Lowest speed (512 kbps), highest (10 Mbps). "Main server" will have 100Mbps into the MPLS cloud.

It will be used (initially) for patching and inventory. Since it's virtual it's rather easy to add more hardware, so I wan't to start off with ok hardware (not oversized).

Clients not using BDP

Thu, 19 Nov 2009 17:17:27 Z

we have one remote site on relatively slow link. I setup a protected BDP on that site (2003 server), and left the SDP un protected. Packages are properly copied to the BDP, however according to the execmgr log, the clients still look at the SDP for assigned packages. I read few articles here regarding the BDP, unfortunately none apply to my situation.
Is there a way to "force" clients into a specific BDP?

General security concerns

Tue, 24 Nov 2009 01:56:50 Z

I work for a financial center, where some machines are very secured, hence no C$ or Admin$ shares, strict directory permissions etc, and various other limitations. I can setup those machines manually by log in interactively, however what would be the functionality level of the client in such environment?

a couple of question about a project that i am palning

Thu, 05 Nov 2009 12:34:30 Z

Hello to all,
I have a project that raises up some questions and i will like you professional advices at the matter.
i am planning to deply SCCM 2007 at a client that does not have DHCP at his network and also work in side his network with a Dat 1 X Switches.
about the No DHCP i know that there will be problems with the deployments (OS = APP) is there a way of working around this ? i was thinking to add all the workstation manualy in the SCCM ..
and about the Dat 1 X , has anyone encountert this and had issuses with it? if so how can i work around it ?
thanks in advance for your help.

Mkuriel

Adding SCCM clients in Multi Forest Environment

Tue, 24 Nov 2009 14:39:25 Z

We currently have SCCM installed in a single forest environment. We are in the process of adding clients from a seperate forest. We will be creating a 2 way trust and the domain and forest are in windows 2003 native mode. What do I need to add this clients in a separate forest? Will I need to add a SCCM server in the additional forest? Can I add the clients without installing an SCCM server in the site?

Thank you in advance.

Harris

I need to create a collection in SCCM for all servers from a certain IP Range.

Mon, 23 Nov 2009 18:00:02 Z

HI, I am very new to SQL and SCCM and I need to set up a collection in SCCM 2007 based on IP range, however when using the querry this comes back with no results.
The site has already been set up by my collegues and there are standard collections in place, but I need to create a seperate collection of jus the windows servers from a particular location.
My Querry is very simple first on all "servers" and this works and filters out the workstations from the servers.
The next step is I am filtering on AD site Names and this is filtering again - no errors.
However the moment I try to run the following querry: SMS_R_System.IPAddresses like "10.(percentage sign).31.(percentage sign)" This shows no reults what so ever. There must be some other way of doing this or my query is invalid - though I get no error messages just no results.

I have been trawling my way through different responses and fixes and nothing seems to work. Does someone have any suggestions for me or can point me in the right direction?

Any help greatly appreciated.

SP2 installation problem, due to netbios domainname change

Sun, 22 Nov 2009 11:57:50 Z

The SP2 installation fails when creating (if not already existing) the users in the database for the site server. (NETBIOSDOMAINNAME\SiteServerName$)

The step fails because the NETBIOSDOMAINNAME used is an old version of the domain name. The FQDN domain name unchanged.
e.g. domain.test in short is DOMAIN but to make sure the LAB domain in short is also recognizable we renamed the NETBIOS domainname to DOMAINTEST.

It our LAB situation the setup log displays that is trying to create a user for DOMAIN\SiteServerName$ instead of DOMAINTEST\SiteServerName$ (which exists already).

Is there a location in DB or on the site server where the NETBIOSNAME is stored, and can it be adjusted to correct the problem?
I found a location in the registry of the site server but altering that (even after reboot) did not change the behaviour.

Collection for Java Runtime

Tue, 24 Nov 2009 04:35:38 Z

I have different versions of JRE installed on the network, specifically JRE 1.6 update 16 and JRE 1.5 update 18. Some computers have only have 1.6 update 16 while while others have both. I want to create a collection that contains only computers with JRE 1.6 update 16 and below (below meaning within 1.6.x). This collection will not contain computers that have both JRE versions.

I'm having a tough time figuring out how to create this collection. I tried using file versions and also add/remove programs values, but they both pull in computers with both versions.

Any ideas would be appreciated.

-JD

Creating a collection of Windows XP Embedded devices

Mon, 23 Nov 2009 16:36:09 Z

I'm having a hard time doing something that I think should be simple. I can't seem to find the exact version number that Windows XP Embedded has so that I can create a query for a collection. Has anyone else done this before?

This report has a chart, but the Microsoft Office Web Components required to view charts are not installed on the Reporting Point

Mon, 23 Nov 2009 15:31:38 Z

Hi,

I have this error message when launching a chart report. My SCCM server (MP, DP, RP) is x64 bit and IIS is version 7. SCCM is SCCM SP2. I cant find any adminscripts folder in my system. What should I do?

"This report has a chart, but the Microsoft Office Web Components required to view charts are not installed on the Reporting Point. Please contact your administrator."

AD System Group Discovery not updating System OU Name on computer object when computer moves OU

Thu, 19 Nov 2009 11:03:41 Z

2 related questions.

1. We have noticed that computer objects (active clients) in ConfigMgr are not getting their System OU Name discovery data updated when a computer account is moved from one OU to another, and AD System Group Discovery runs. Since we are basing some of our Software Updates collections on AD OU name, these systems are not falling into their required collections.

2. On a few occasions we are also seeing duplicate computer objects being created. One new record from AD System Discovery, which contains the correct 'new' System OU Name, and one 'old' computer object from before the computer account was moved to a different OU in AD. The heartbeat discovery of this second object is still updating e.g. showing new heartbeats, but the computer object still shows the old System OU Name from before the computer account was moved in AD. If we delete both objects and run a Discovery Data Collection Cycle from the client, and AD System Group Discovery, then we get one new record with the correct 'new' set of System OU names.

This duplicates issue is happening in both our Central Primary Site and our other child Primary site. Both sites are set to create new client records for duplicate hardware IDs, and there is a possibility we're seeing the duplicate records on machines that have been re-imaged and redeployed at some point.

It's my understanding that it is AD System Group Discovery that updates the System OU Name property on client objects. We have this set to run every 4 hours. I'm not seeing any errors in the adsysgrp.log. Any idea why discovery is not updating the System OU Name information when a computer account moves OU? As far as I understand it, nothing additional is required to happen from the client end for this property to get updated.

SCCM clients do not detect PDPs

Fri, 20 Nov 2009 05:35:39 Z

I have one SCCM Site Server having DP as server share on D drive-smspkgd$. There are 5 other Servers (Domain Controllers) acting as PDPs protected by IP SUbnet as site boundaries. SCCM clients are not able to detect PDPs but are downloading package contents from Site Server DP ie. smspkgd$. WOrst of all they are not directly accsseing the contents from smspkgd$ but checking each and every drive of site server (like smspkgc$, smspkge$, smspkgf$) for package contents.
Please tell why this is happening?