none
FEP 2010 client in Locally removed collection while all is ok.

    질문

  • Hi,

    I have read a lot about this issue but most of the topics have not been awnsered.

    i deployed FEP 2010 on sccm 2007 R3 with FEP reporting to SQL 2008 R2, for the client computer it was an upgrade from FCS to FEP.

    The client computer now retains in the locally removed collection for unknown reasons.

    The client works as expected, the client is updated on interval and i can schedule scans\ etc from SCCM. It All works.

    i have tried the following;

    • Refresh Hardware from client configuration manager.
    • Checked SCCM logs
    • Checked client computer logs
    • Checked FEP 2010 Install logs
    • Checked FEP 2010 policies and updates
    • Updated FEP Collection memberships
    • Rebooted machine
    • Reinstalled configuration client
    • Reinstalled FEP 2010

    SQL reporting shows this information which is not correct, how can i force an update ?

    Forefront Endpoint Protection Client
    Not installed
     
    Antimalware Protection
    Not installed
     
    Real-time Protection
    Real-time Protection not enabled
     
    Antimalware definitions

    Antimalware definitions out of date

    • 편집됨 Benwijs 2012년 4월 13일 금요일 오후 1:20
    2012년 4월 13일 금요일 오후 1:06

답변

  • Hi,

    Please try suggestions below:

    1. Verify if "Allow clients to upload files" check box was checked, in BITS upload option on the IIS web directory CCM_Incoming
    2. Removed BITS extensions, MP on SCCM server, reboot and reinstalled them in order to reset BITS service

    Regards


    Rick Tan

    TechNet Community Support

    • 답변으로 표시됨 Benwijs 2012년 4월 20일 금요일 오전 8:43
    2012년 4월 19일 목요일 오전 5:27

모든 응답

  • open the resource explorer on the client and then take a look at the hardware and make sure that the fep shows up in the add/remove programs, if not there start troubleshooting harware inventory. re run full hardware inventory, try it form sccm client center. also if your client is on a server 2008 core it will never show up correctly, know issue with ms.

    2012년 4월 13일 금요일 오후 1:31
  • Hi Tomek,

    Thanks for the helpfull  tips, i checked resource eplorer and found that it only reports FCS as installed. Als the last software scan is set to 6th of March.

    I dont know how to run a hardware inventory from the SCCM server. I believe i would need 3rd party tooling for that ?

    Any way i can iniate a software scan ? i already performed them from the client computer.

    2012년 4월 13일 금요일 오후 1:54
  • one of the most userful 3rd party tool to use with SCCM is the "SCCM client center", download it and use that to run a full hardware inventory on the client, its a very useful tool for anything to do with sccm. and make sure its the hardware scan, a full harware scan, not a resync, that you are running on the client.

    • 답변으로 제안됨 gojensen 2013년 5월 7일 화요일 오전 8:11
    • 답변으로 제안 취소됨 gojensen 2013년 5월 7일 화요일 오전 8:11
    2012년 4월 13일 금요일 오후 2:30
  • or if you like you can do it via WMI, taken from:

    http://social.technet.microsoft.com/Forums/en-US/configmgrinventory/thread/89b7a106-dc5d-4768-9072-5b944ad35ff3/

    ***************************************************************************

    Open wbemtest and connect to root\ccm\invagt. Enum classes | recursive -> ok. Doubleclick InventoryActionStatus. Click Instances. Highlight the entry that contains {00000000-0000-0000-0000-000000000001}. Click delete. Close all wbemtest windows. Initiate a hardware inventory.

    Watch InventoryAgent.log for

    Inventory: Opening store for action {00000000-0000-0000-0000-000000000001} ...
    Inventory: Delta report without a previous Full report; will do a Full report.
    Inventory: Action=Hardware ReportType=Full

    ************************************************************************

    2012년 4월 13일 금요일 오후 2:35
  • Hi,

    I read that reinstalling the client would trigger a new inventory. Which i have already done, whta could be the reason this wouldnt work ?

    I would rather not go trough the procedure above, as i cant find any codumentation that backs it up.

    2012년 4월 13일 금요일 오후 3:06
  • Do a clean uninstall of the sccm client (run ccmsetup.exe /uninstall) watch the ccmsetup.log to make sure that it uninstalls successfully and then install it. The install will then run a full hardware scan. did you get a chance to get sccm client center, if so this would definetly work for you without all the extra work. and as always keep in mind if the client's wmi is corrupted then its a different story. you would have to repair it.
    • 답변으로 제안됨 Rick TanModerator 2012년 4월 16일 월요일 오전 2:09
    • 답변으로 제안 취소됨 Benwijs 2012년 4월 16일 월요일 오전 10:50
    2012년 4월 13일 금요일 오후 4:00
  • Ok i

    • uninstalled the client
    • readded the machine to the domain
    • repaired WMI
    • deleted machine from SCCM
    • made exceptions in the firewall,  (file +printer sharing and wmi on client pc)
    • Added machine to sccm via the import wizard
    • pushed SCCM client from server to pc.

    Placed pc in a newly created collection, applied fep policy to same collection.. Now the pc is stuck in installation pending, and the recourse explorer is still not being populated with any information.

    I checked the following logs and found this ;

    on client machine in C:\Windows\System32\CCM\Logs\inventoryagent.log

    <![LOG[Inventory: Successfully sent report. Destination:mp:MP_SinvEndpoint, ID: {66497548-D1CA-4017-97D0-8EDB668B48F8}, Timeout: 80640 minutes MsgMode: Signed, Not Encrypted]LOG]!><time="14:19:54.595+-120" date="04-16-2012" component="InventoryAgent" context="" type="1" thread="3952" file="agentstate.cpp:2038">

    On sccm management point D:\Program Files\SMS_CCM\Logs\mp_relay.log

    Inv: Discovery Data Manager (Trusted) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Data Loader (Trusted) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\auth\dataldr.box MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Discovery Data Manager (Registration) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\regreq MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Software Inventory Processor (Site Trusted) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\auth\sinv.box MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Status Manager maps to d:\Program Files\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Software Metering Processor Usage (Site) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\swmproc.box\usage MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Client Configuration Record (Incoming) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\ccr.box MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Distribution Manager (Incoming) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\distmgr.box\incoming MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: State System (Incoming) maps to d:\Program Files\Microsoft Configuration Manager\inboxes\auth\statesys.box\incoming MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv: Site Server Inventory Collection maps to d:\Program Files\Microsoft Configuration Manager\inboxes\inventry.box MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)
    Inv-Relay Task: Processing message body MP_RelayEndpoint 4/17/2012 12:18:14 PM 2148 (0x0864)

    On sccm management pointD:\Program Files\SMS_CCM\Logs\mp_hinv.log

    <![LOG[Date property year value is less than 1980 - 16010101000000.000000+***; year will be adjusted by MIF processing on site server]LOG]!><time="16:56:42.882+-60" date="02-21-2012" component="MP_HinvEndpoint" context="Inv Task Execute" type="2" thread="2764" file="hinvproc.cpp:1019">
    <![LOG[Hinv Task: Translate report attachment to file "d:\Program Files\Microsoft Configuration Manager\inboxes\auth\dataldr.box\H31L8RR1.MIF" returned 0]LOG]!><time="16:56:42.897+-60" date="02-21-2012" component="MP_HinvEndpoint" context="Inv Task Execute" type="1" thread="2764" file="hinvtask.cpp:71">
    <![LOG[Hinv Retry: ******************* End of Task *********************]LOG]!><time="16:56:42.897+-60" date="02-21-2012" component="MP_HinvEndpoint" context="Inv Task Execute" type="1" thread="2764" file="hinvtask.cpp:83">

    On sccm site server D:\Program Files\Microsoft Configuration Manager\Logs\dataldr.log

    Checking inbox for any MIFs to process...  $$<SMS_INVENTORY_DATA_LOADER><Tue Apr 17 10:24:45.466 2012 W. Europe Daylight Time><thread=2684 (0xA7C)>
    Waiting for a MIF...  $$<SMS_INVENTORY_DATA_LOADER><Tue Apr 17 10:24:45.466 2012 W. Europe Daylight Time><thread=2684 (0xA7C)>

    Strange is the fact that the hinv.log has its last entry from 02-21-2012

    Even though the inventoryagent.log send out an report, and the mp.relay log shows it is recieving information.

    • Checked firewall settings on client\ MP  and site server, should be fine.
    • Checked component status on client\ MP  and site server, all ok
    • All services required for SCCM are running.
    • I added a second client machine (Win XP) to the sccm infrastrucuture, same result.

    I am getting kind of lost now.


    • 편집됨 Benwijs 2012년 4월 17일 화요일 오후 12:31
    2012년 4월 16일 월요일 오전 10:50
  • Hi,

    Thank you for the post.

    On the client computer, please register dlls and recompile the mofs for WMI service following command below:

    net stop winmgmt /y
    cd %windir%\system32\wbem
    for /f %s in ('dir /b *.dll') do regsvr32 /s %s
    wmiprvse /regserver
    winmgmt /regserver
    net start winmgmt
    for /f %s in ('dir /s /b *.mof *.mfl') do mofcomp %s

    Then reboot computer and run Hardware Inventory via SCCM client applet.

    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support

    2012년 4월 18일 수요일 오전 6:58
  • Hi Rick,

    Thanks for that, i already tried rerigtring the DLL's but i did it again following your steps. However the outcome is the same.

    on client : C:\Windows\System32\CCM\Logs\InventoryAgent.log
    -Creates discovery data records (DDRs) and hardware and software inventory records

    <![LOG[Collection: 13/14 inventory data items successfully inventoried.]LOG]!><time="09:42:52.648+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="1992" file="collectiontask.cpp:266">
    <![LOG[Inventory: Collection Task completed in 0.922 seconds]LOG]!><time="09:42:52.648+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="1992" file="agentstate.cpp:787">
    <![LOG[Inventory: 1 Collection Task(s) failed.]LOG]!><time="09:42:52.648+-120" date="04-18-2012" component="InventoryAgent" context="" type="2" thread="1992" file="agentstate.cpp:801">
    <![LOG[Inventory: Temp report = C:\Windows\system32\CCM\Inventory\Temp\eca958fb-f2a3-46d8-8d30-606a5a1beccf.xml]LOG]!><time="09:42:52.648+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="1992" file="agentstate.cpp:2152">
    <![LOG[Inventory: Starting reporting task.]LOG]!><time="09:42:52.648+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="reporttask.cpp:240">
    <![LOG[Reporting: 11 report entries created.]LOG]!><time="09:42:52.773+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="reporttask.cpp:260">
    <![LOG[Inventory: Reporting Task completed in 0.125 seconds]LOG]!><time="09:42:52.773+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="agentstate.cpp:854">
    <![LOG[Inventory: Successfully sent report. Destination:mp:MP_DdrEndpoint, ID: {8EF7C0AA-9383-44C7-B520-EB544A3F2FBE}, Timeout: 80640 minutes MsgMode: Signed, Not Encrypted]LOG]!><time="09:42:52.851+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="agentstate.cpp:2038">
    <![LOG[Inventory: Cycle completed in 2.140 seconds]LOG]!><time="09:42:53.211+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="agentstate.cpp:1528">
    <![LOG[Inventory: Action completed.]LOG]!><time="09:42:53.211+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="agentstate.cpp:1538">
    <![LOG[Inventory: ************************ End of message processing. ************************]LOG]!><time="09:42:53.226+-120" date="04-18-2012" component="InventoryAgent" context="" type="1" thread="2680" file="agentendpoint.cpp:409">

    On sccm management point D:\Program Files\SMS_CCM\Logs\mp_relay.log
    -Copies files that are collected from the client.

    <![LOG[Inv-Relay Task: Processing message body]LOG]!><time="09:42:53.865+-120" date="04-18-2012" component="MP_RelayEndpoint" context="Inv Task Execute" type="1" thread="5884" file="mphandler.cpp:231">


    On sccm management point D:\Program Files\SMS_CCM\Logs\mp_hinv.log
    -Converts XML hardware inventory records from clients and copies the files to the site server

    Empty\ nothing there since 21-2-2012

    Checked folders in D:\Program Files\Microsoft Configuration Manager\inboxes\auth\dataldr.box. but these are all empty.

    Where does the message go ? According to http://blogs.technet.com/b/sudheesn/archive/2010/05/31/troubleshooting-sccm-part-ii-hardware-inventory.aspx and Technet sites, mp_hinv.log should show something. What is the proccess that handles this step ?

    2012년 4월 18일 수요일 오전 8:39
  • can you post the whole inventoryagent.log not just the partial, or specifically look for the following:

    Inventory: *********************** Start of message processing. ***********************

    and

    Inventory: ************************ End of message processing. ************************

    post what's inbetween those. use trace32 so it the logs looks much cleaner

    2012년 4월 18일 수요일 오후 8:44
  • Hi,

    Please try suggestions below:

    1. Verify if "Allow clients to upload files" check box was checked, in BITS upload option on the IIS web directory CCM_Incoming
    2. Removed BITS extensions, MP on SCCM server, reboot and reinstalled them in order to reset BITS service

    Regards


    Rick Tan

    TechNet Community Support

    • 답변으로 표시됨 Benwijs 2012년 4월 20일 금요일 오전 8:43
    2012년 4월 19일 목요일 오전 5:27
  • Hi Rick,

    I checked C:\Windows\System32\CCM\Logs\ccmexec.log on the client and gave this message, which indicated BITS issues.

    OutgoingMessage(Queue='mp_mp_hinvendpoint', ID={5F9CEC58-B211-4D3F-A140-9F479AD4A38F}): In pending state, will retry in 300 seconds.

    So i already reinstalled BITS.

    This was the missing link, after performing steps in IIS the problem was solved.

    "Verify if "Allow clients to upload files" check box was checked, in BITS upload option on the IIS web directory CCM_Incoming "

    thanks to all others aiding me with this issue.

    2012년 4월 20일 금요일 오전 8:42