locked
Client Activity Inactive RRS feed

  • Question

  • I have been rolling out SCCM at my company.

    We have a Primary in MA and a secondary in GA, TX, OR.

    The Primary and 2 secondaries in TX and OR Have been going alomg pretty well. Little to no issues with pushing out the client and EP.

    The secondary in GA is a different story. I have tried to install the client on 5 computers. Each one says it has the client but

    it is marked as inactive right away.

    The ClientIDManagerStartup log on one of the clients is full of:

    RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup 8/14/2012 4:21:48 PM 5432 (0x1538)
    RegTask: Failed to send registration request. Error: 0x87d00231 ClientIDManagerStartup 8/14/2012 4:21:48 PM 5432 (0x1538)

    Any ideas where I can check to track this issue down?

    Wednesday, August 15, 2012 12:31 AM

Answers

  • This has been fixed. It took a call to MS but the 2nd level engineer found the issue.

    WE had a watchguard firewall that was blocking http requests from one of our sites back to the primary sccm server.

    Once I added the primary sccm server to the exception list on the secondary site watchguard everything started to work.

    • Marked as answer by NTP-Paul Friday, September 7, 2012 12:41 AM
    Thursday, September 6, 2012 9:29 PM

All replies

  • Hi,

    Are there any errors in the Site System Status? I would start by verifying that my Management Point is working.

    Regards,
    Jörgen


    -- My System Center blog ccmexec.com -- Twitter @ccmexec

    Wednesday, August 15, 2012 5:28 AM
  • HI Jorgen

    I have all green checks under Site status and Component status.

    Wednesday, August 15, 2012 12:24 PM
  • Any other ideas on this?
    Thursday, August 16, 2012 1:59 PM
  • do mplist and mpcert look OK for the secondary site?

    What are the boundary's like for the site that isn't working. Does the client machine fall in the boundary and is the boundary group set for site assignment.

    Saturday, August 18, 2012 6:33 PM
  • 0x87d00231 is "transient error". This typically happens when there's a network communication problem of some kind back to the management point or a problem with the MP itself. I'd verify that clients have connectivity back to the management point. The MPLIST URL is a good place to start; try http://yourmp/sms_mp/.sms_aut?MPLIST in a browser.

    If this succeeds, that means there's something else wrong with your MP. I'd check MP_Framework.log and MP_Registration.log for failures. If this fails, that indicates a network issue (firewall perhaps) or something fundamentally broken in the MP (MP_Framework.log is a good place to start here as well).

    Hope this helps.

    Monday, August 20, 2012 7:52 PM
  • Mplist and MPcert look ok.

    Where are the MP_Framework and MP_Registration logs located?

    I couldn't find them.

    Tuesday, August 21, 2012 2:54 PM
  • They can be found on the MP, in the \SMS_CCM folder - or %windir%\CCM if the client was installed before the MP was installed.

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, August 21, 2012 3:19 PM
  • Ok, I found the MP_Framework and I dont see any errors.

    I still do not see the MP_registration log.

    I did find a clientauth.log that has many of these errors in it:

    Error verifying message from client 'GUID:F6FBA8B8-99DE-474F-A20D-53C628BE74E7' (0x87d00238).

    Encountered database error while verifying headers for client 'GUID:C7C2D8FA-97B7-4708-BDAB-08416ADA41A6' (0x87d00238).

    I tried reinstalling the secondary site and nothing changed. Still have the problem

    Tuesday, August 21, 2012 9:04 PM
  • Any other ideas on this?
    Monday, August 27, 2012 3:45 PM
  • try to set in the registry on the client key HKLM\SOFTWARE\MICROSOFT\CCM\SMSSLP to point to the SCCM server, may be the client can not find MP hence these problem
    Monday, August 27, 2012 4:08 PM
  • I found another Log I didn't find before. The MP_RegistrationManager.log

    CCMValidateAuthHeaders failed (0x87d0029b) to validate headers for client 'GUID:AB9E6683-DB89-410B-9869-1C88EA1C4421'.

    I cant figure this out. The other 2 secondary sites I had no problem. Only with this one.

    If it could be a firewall issue what should I look for?

    Monday, August 27, 2012 8:21 PM
  • Jho, I tried what you suggested but it didn't work
    Monday, August 27, 2012 9:33 PM
  • Any more help with this one? I am about to call MS
    Thursday, August 30, 2012 1:07 PM
  • Encountered database error while verifying headers for client 'GUID:C7C2D8FA-97B7-4708-BDAB-08416ADA41A6' (0x87d00238).

    Just a complete shot in the dark: which version of SNAC (SQL native client) is installed on the secondary? The SQL 2008 R2 one? If so: uninstall it and install the SQL 2008 one (not the "R2" one). It *might* help.

    Torsten Meringer | http://www.mssccmfaq.de

    Thursday, August 30, 2012 1:26 PM
  • It is the R2 one. But if I unistall it will I have to set up the 2008 one manually?

    That was was configured with the install of the secondary.

    Thursday, August 30, 2012 1:33 PM
  • Yes, that's a manual thing then. The 2008 SNAC can be found here http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=16177

    Torsten Meringer | http://www.mssccmfaq.de

    Thursday, August 30, 2012 2:01 PM
  • Thanks for the suggestion but I can see me screwing the manual configuration up and creating issues that weren't there before.
    Thursday, August 30, 2012 2:03 PM
  • This has been fixed. It took a call to MS but the 2nd level engineer found the issue.

    WE had a watchguard firewall that was blocking http requests from one of our sites back to the primary sccm server.

    Once I added the primary sccm server to the exception list on the secondary site watchguard everything started to work.

    • Marked as answer by NTP-Paul Friday, September 7, 2012 12:41 AM
    Thursday, September 6, 2012 9:29 PM