已答复 SCCM 2007 client installation issues

  • Tuesday, January 17, 2012 8:00 PM
     
     
    SCCM has been installed on our network for several months now, and it has successfully installed clients on all but two of the machines (out of about 50). I can't figure out what the error is (WinHttpQueryHeaders:403?), and have tested thoroughly that these computers can connect to the SCCM server. Here is my error log:


    <![LOG[==========[ ccmsetup started in process 7504 ]==========]LOG]!><time="11:52:42.429+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:9010">
    <![LOG[Version: 4.0.6487.2000]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:2068">
    <![LOG[Command line parameters for ccmsetup have been specified.  No registry lookup for command line parameters is required.]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4093">
    <![LOG[Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4102">
    <![LOG[CCMHTTPPORT:    80]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:8008">
    <![LOG[CCMHTTPSPORT:    443]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:8023">
    <![LOG[CCMHTTPSSTATE:    127]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:8041">
    <![LOG[CCMHTTPSCERTNAME:    ]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:8069">
    <![LOG[FSP:    SCCM.domain.COM]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:8084">
    <![LOG[CCMFIRSTCERT:    1]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:8126">
    <![LOG[Config file:      C:\Windows\ccmsetup\MobileClient.tcf]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4497">
    <![LOG[Retry time:       10 minute(s)]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4498">
    <![LOG[MSI log file:     ]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4499">
    <![LOG[MSI properties:    INSTALL="ALL" SMSSITECODE="LG1" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="127" FSP="SCCM.domain.COM" CCMFIRSTCERT="1"]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4500">
    <![LOG[Source List:]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4508">
    <![LOG[                  \\SCCM.domain.COM\SMSClient]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4515">
    <![LOG[                  \\SCCM\SMSClient]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4524">
    <![LOG[MPs:]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4527">
    <![LOG[                  SCCM.domain.COM]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:4542">
    <![LOG[Updated security on object C:\Windows\ccmsetup\.]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3696" file="ccmsetup.cpp:8849">
    <![LOG[Sending Fallback Status Point message, STATEID='100'.]LOG]!><time="11:52:42.444+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3696" file="ccmsetup.cpp:9326">
    <![LOG[State message with TopicType 800 and TopicId {8291AE30-4972-4EE2-AE3D-6D78052A534C} has been sent to the FSP]LOG]!><time="11:52:42.569+480" date="01-17-2012" component="FSPStateMessage" context="" type="1" thread="3696" file="fsputillib.cpp:730">
    <![LOG[Running as user "SYSTEM"]LOG]!><time="11:52:42.585+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:2690">
    <![LOG[Detected 592631 MB free disk space on system drive.]LOG]!><time="11:52:42.585+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:463">
    <![LOG[DetectWindowsEmbeddedFBWF() Detecting OS Version]LOG]!><time="11:52:42.585+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:509">
    <![LOG[Client OS Version is 6.1, Service Pack Version 1]LOG]!><time="11:52:42.585+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:533">
    <![LOG[Client OS is not a supported Windows Embedded Platform]LOG]!><time="11:52:42.585+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:535">
    <![LOG[Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again.]LOG]!><time="11:52:42.585+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:2774">
    <![LOG[Successfully ran BITS check.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:7105">
    <![LOG[The 'Certificate Store' is empty in the registry, using default store name 'MY'.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmcert.cpp:204">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates  present in 'MY' store of 'Local Computer'.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:3518">
    <![LOG[3 certificate(s) found in the 'MY' certificate store.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:3547">
    <![LOG[The 'MY' of 'Local Computer' store has 3 certificate(s).
    Using custom selection criteria based on the machine name.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:3586">
    <![LOG[Machine name is 'SLIPPY.domain.com'.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1919">
    <![LOG[There are no certificate(s) that meet the criteria.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1748">
    <![LOG[Performing search that includes SAN2 extensions...]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1955">
    <![LOG[Checking if certificate issued to 'SLIPPY.domain.com' is valid for ConfigMgr usage.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1233">
    <![LOG[SSL Registry key Software\Microsoft\CCM not found, assuming Client SSL is disabled.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="2" thread="3800" file="ccmutillib.cpp:134">
    <![LOG[The certificate issued to 'SLIPPY.domain.com' has 'Client Authentication' capability.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:432">
    <![LOG[Checking if certificate issued to 'SLIPPY.domain.com' is valid for ConfigMgr usage.]LOG]!><time="11:52:42.647+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1233">
    <![LOG[The certificate issued to 'SLIPPY.domain.com' has 'Client Authentication' capability.]LOG]!><time="11:52:42.663+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:432">
    <![LOG[Found a certificate with subject name as ‘SLIPPY’, but will continue to look for the certificate with subject name as ‘SLIPPY.domain.com’.]LOG]!><time="11:52:42.663+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1284">
    <![LOG[Checking if certificate issued to 'SLIPPY.domain.com' is valid for ConfigMgr usage.]LOG]!><time="11:52:42.663+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:1233">
    <![LOG[The certificate issued to 'SLIPPY' has 'Client Authentication' capability.]LOG]!><time="11:52:42.709+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:432">
    <![LOG[Using the certificate issued to 'SLIPPY'.]LOG]!><time="11:52:42.709+480" date="01-17-2012" component="ccmsetup" context="" type="0" thread="3800" file="ccmcert.cpp:3631">
    <![LOG[Failed to successfully complete HTTP request. (StatusCode at WinHttpQueryHeaders: 403)]LOG]!><time="11:52:43.162+480" date="01-17-2012" component="ccmsetup" context="" type="3" thread="3800" file="ccmsetup.cpp:5969">
    <![LOG[Sending Fallback Status Point message, STATEID='308'.]LOG]!><time="11:52:43.162+480" date="01-17-2012" component="ccmsetup" context="" type="1" thread="3800" file="ccmsetup.cpp:9326">
    <![LOG[State message with TopicType 800 and TopicId {E4065F32-FD81-4E53-9D83-429B72A4E16A} has been sent to the FSP]LOG]!><time="11:52:43.162+480" date="01-17-2012" component="FSPStateMessage" context="" type="1" thread="3800" file="fsputillib.cpp:730">


    Any help would be much appreciated.



    Also, this is the error on the SCCM server log (ccm.log):

     

     

     Line 11367: ======>Begin Processing request: "KWAKGDLK", machine name: "SLIPPY"  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.752 2012 Pacific Standard Time><thread=3312 (0xCF0)>

     Line 11369: ---> Attempting to connect to administrative share '\\SLIPPY.domain.com\admin$' using account 'domain\admincredentials'~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.784 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11371: ---> Connected to administrative share on machine SLIPPY.domain.com using account 'domain\admincredentials '~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.831 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11372: ---> Attempting to make IPC connection to share <\\SLIPPY.domain.com\IPC$> ~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.831 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11373: ---> Searching for SMSClientInstall.* under '\\SLIPPY.domain.com\admin$\'~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.831 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11376: ---> Unable to connect to WMI (r) on remote machine "SLIPPY", error = 0x8004100e.  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.956 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11377: ---> Creating \ VerifyingCopying exsistance of destination directory \\SLIPPY\admin$\ccmsetup.~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.956 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11378: ---> Copying client files to \\SLIPPY\admin$\ccmsetup.~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.971 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11379: ---> Copying file "C:\Program Files (x86)\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "\\SLIPPY\admin$\ccmsetup\MobileClient.tcf"  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:40.987 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11380: ---> Updated service "ccmsetup" on machine "SLIPPY".  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:41.237 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11381: ---> Started service "ccmsetup" on machine "SLIPPY".  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:42.596 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11382: ---> Deleting SMS Client Install Lock File '\\SLIPPY.domain.com\admin$\SMSClientInstall.LG1'~  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:42.596 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11383: ---> Completed request "KWAKGDLK", machine name "SLIPPY".  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:42.596 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11384: Deleted request "KWAKGDLK", machine name "SLIPPY"  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:42.596 2012 Pacific Standard Time><thread=3312 (0xCF0)>

    Line 11385: <======End request: "KWAKGDLK", machine name: "SLIPPY".  $$<SMS_CLIENT_CONFIG_MANAGER><Tue Jan 17 11:52:42.596 2012 Pacific Standard Time><thread=3312 (0xCF0)>


All Replies

  • Wednesday, January 18, 2012 1:29 AM
     
     Answered

    Hope, you're using native mode.

    403 error means the access to the that resource is forbidden for some reason. Have checked the certificate stores and verified the certificates?

    Try to remove the certificates and request for new ones.


    Anoop C Nair - @anoopmannur

    MY BLOG:  http://anoopmannur.wordpress.com

    User Group:  ConfigMgr Professionals

    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked As Answer by StephenBates Wednesday, January 18, 2012 7:34 PM
    •  
  • Wednesday, January 18, 2012 1:03 PM
     
     

    Please also verify access to CRL. The state 308 sent to FSP could/might/purhaps refere to CRL is not accessible or certificate is revoked for the selected cert.

    (can see you have 3 cert. in the computerstore. Are they all needed? If not delete/move them).

    Which parameter did you use regarding cert. at ccmsetup?

  • Wednesday, January 18, 2012 7:34 PM
     
     
    I removed all certificates on the problematic computer, manually requested a new certificate for "ConfigMgr Client Certificate" and it now works. Many thanks.