locked
Client Migration Problem RRS feed

  • Question

  • Hi...

    I'm in the middle of doing a migration from SCCM 2007 to SCCM 2012. I'm trying to migrate the Configuration Manager Clients at this point. Most workstations are upgrading the clients via a push from the Console just fine. Some however act like they've been upgraded yet the Console still shows the Client Type is "None" and Client is "No". In the Push Information it shows the following:

    Last Installation Error:0

    Last Request Attempt: 7/9/2012 10:51 AM

    Last Status: Complete

    If I go to the workstation, I can see that Configuration Manager 2012 client is installed along with Forefront Protection. 

    I've tried re-installing the client via a Push several times with no changes. Here is what CCM.log shows after the last push:

     Execute query exec [sp_CP_GetPushRequestMachine] 2097152086~  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.386+240><thread=4408 (0x1138)>
    Successfully retrieved information for machine AUGERDELL07 from DB  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.391+240><thread=4408 (0x1138)>
    Execute query exec [sp_CP_GetPushRequestMachineIP] 2097152086~  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.393+240><thread=4408 (0x1138)>
    Execute query exec [sp_CP_GetPushRequestMachineResource] 2097152086~  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.397+240><thread=4408 (0x1138)>
    Execute query exec [sp_CP_GetPushMachineName] 2097152086~  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.400+240><thread=4408 (0x1138)>
    Received request: "2097152086" for machine name: "AUGERDELL07" on queue: "Incoming".  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.403+240><thread=4408 (0x1138)>
    Stored request "2097152086", machine name "AUGERDELL07", in queue "Processing".  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.406+240><thread=4408 (0x1138)>
    Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152086, 1~  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.410+240><thread=4408 (0x1138)>
    ----- Started a new CCR processing thread. Thread ID is 0xa68. There are now 8 processing threads  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.414+240><thread=4408 (0x1138)>
    Submitted request successfully  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.417+240><thread=4408 (0x1138)>
    Getting a new request from queue "Incoming" after 100 millisecond delay.  $$<SMS_CLIENT_CONFIG_MANAGER><07-09-2012 13:00:15.420+240><thread=4408 (0x1138)>
    Waiting for change in directory "C:\Program Files\Microsoft Configuration Manager\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout).  $

    Any help is greatly appreciated :) 


    Thanks... Frank

    Monday, July 9, 2012 5:15 PM

All replies

  •  

    First check if client firewall is On and its blocking anything for installation and communication with MP.

    Go to control panel of client and see Config Manager icon is there or not. if yes than open and see Site tab, if its taking correct site code or not.

    if still you have any problem send me Locationservices.log and Clientlocation.log.

    also let me know

    what is Client OS version

    Is it existing SCCM 2007 client or new to SCCM 2012


    Regards, PBC

    Tuesday, July 10, 2012 7:57 AM
  • Hi PBC...

    Thank you for responding to me :) 

    1 - Firewall is turned off on all clients and servers. Its a group policy in our domain. I've double checked to confirm :) 

    2 - Config Manager IS installed on the computer. I can see the process running in Task Manager. I've gone into the Control Panel, saw the Configuration Manager and upon running it, I've confirmed that it is the 2012 Config Manager. The Site code also reflects my SCCM 2012 Site Code

    3 - You can download the LocationServices.log and ClientLocation.log file from the workstation at this link - https://dl.dropbox.com/u/18912302/SCCMLogs.zip

    4 - All workstations that this is happening on is Windows 7 Pro 64 bit. 

    5 - The workstation was a SCCM 2007 client and was migrated to SCCM 2012. 

    I really appreciate the help! :) 


    Thanks... Frank

    Tuesday, July 10, 2012 2:09 PM
  • Still hoping someone can help! Not sure why this happening and what I can do to correct it. What has me worried the most is that it says FEP is un-managed. 

    Thanks... Frank

    Wednesday, July 11, 2012 6:52 PM
  • How many actions items are present in control panel configmgr applet? Have you tried to initiate "Discovery Data Collection Cycle"? Have you verified other logs like ClientIDManagerStartup.log, clientlocation.log and locationservices.log for more details on client communication with MP.

    Check Agent Name and Agent Time through the properties of the client in the console so that you can come to know whether heartbeat discovery is working or not....


    Anoop C Nair - @anoopmannur :: MY Site:  www.AnoopCNair.com :: FaceBook:  ConfigMgr(SCCM) Page :: Linkedin:  Linkedin<

    Thursday, July 12, 2012 2:16 AM
  • Ok... So one thing I've found in the ClientIDManagerStartup.log file is the following message:

    <![LOG[[RegTask] - Server rejected registration request: 3]LOG]!><time="10:40:17.610+240" date="07-12-2012" component="ClientIDManagerStartup" context="" type="3" thread="3380" file="regtask.cpp:1662">
    

    I think this might be my issue. Any suggestions on how I can trouble shoot this?


    Thanks... Frank

    Thursday, July 12, 2012 3:05 PM
  • As an update to this, I went to the MP_Registration.log file on the MP and searched for the machine in question. This is what I got:

    ]LOG]!><time="11:04:57.016+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="6056" file="event.cpp:729">
    <![LOG[MP Reg: Registration request body is invalid.]LOG]!><time="11:04:57.018+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="6056" file="regtask.cpp:1705">
    <![LOG[MP Reg: Registration failed.]LOG]!><time="11:04:57.018+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="6056" file="regtask.cpp:166">
    <![LOG[MP Reg: Processing completed. Completion state = 0]LOG]!><time="11:04:57.027+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="6056" file="regtask.cpp:204">
    <![LOG[Processing Registration request from Client 'GUID:6C6D4EEC-790A-423E-93B5-E79BC83B91AC']LOG]!><time="11:05:17.410+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="7100" file="regtask.cpp:965">
    <![LOG[Begin validation of Certificate [Thumbprint 272365296274002511B3D11E7CA9B8EEE5A5DF6F] issued to 'CHEFPAUL06']LOG]!><time="11:05:17.413+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="7100" file="ccmcert.cpp:1169">
    <![LOG[Completed validation of Certificate [Thumbprint 272365296274002511B3D11E7CA9B8EEE5A5DF6F] issued to 'CHEFPAUL06']LOG]!><time="11:05:17.416+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="1" thread="7100" file="ccmcert.cpp:1310">
    <![LOG[MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b010a, In-band Cert SubjectName = CHEFPAUL06]LOG]!><time="11:05:17.416+240" date="07-12-2012" component="MP_RegistrationManager" context="Registration" type="2" thread="7100" file="regtask.cpp:859">
    <![LOG[Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of MpEvent_CertInvalidChain
    {
    	ClientID = "GUID:6AE4906D-5512-4398-ABCA-DAC9C5A9103A";
    	DateTime = "20120712150517.418000+000";
    	MachineName = "PREP-SCCM12.domain.org";
    	ProcessID = 2388;
    	SiteCode = "STA";
    	SubjectName = "CHEFPAUL06";
    	ThreadID = 7100;
    	Win32ErrorCode = 2148204810;
    


    Thanks... Frank

    Thursday, July 12, 2012 3:39 PM
  • Is there any one that can give additional assistance?? It would greatly be appreciated! :) 

    Thanks... Frank

    Monday, July 16, 2012 7:25 PM
  • "MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b010a"
    That error translates to: A certificate chain could not be built to a trusted root authority. Are you using http or https mode?

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, July 17, 2012 7:23 AM
  • "MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b010a"
    That error translates to: A certificate chain could not be built to a trusted root authority. Are you using http or https mode?

    Torsten Meringer | http://www.mssccmfaq.de

    Torsten...

    Thanks for the reply... I'm using http, which is another reason why I'm scratching my head on this one. 

    Every workstation that has the SCCM client installed on it, but SCCM reports there isn't a client installed, has this problem. 


    Thanks... Frank

    Tuesday, July 17, 2012 1:37 PM
  • "MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b010a"
    That error translates to: A certificate chain could not be built to a trusted root authority. Are you using http or https mode?

    Torsten Meringer | http://www.mssccmfaq.de

    I just went back into Administration - Site Configuration -> Sites -> Properties of the Site Name -> Client computer Communication

    I have HTTPS or HTTP selected but there is a check mark in both:

    - Use PKI client certificate ( client authentication capability) when available

    - Clients check the certiifcate revocation list ( CRL ) for site systems

    Question 1 - Is it possible that its first trying to connect over SSL ( HTTPS ) failing for some reason, and then its not even trying HTTP? Remember, not every client has this issue.. Only about 20% of my clients

    Question 2 - If I remove both check marks from the "Use PKI" and "Clients check..." will it not try to communicate over HTTPS at all? I want to make sure too that I by doing this I wont kill communication with the 80% of clients that can communicate and dont have this problem. 

    Thanks in advance! :) 


    Thanks... Frank

    Tuesday, July 17, 2012 7:48 PM
  • Still hoping I can get some help with this

    Thanks... Frank

    Thursday, July 19, 2012 1:33 PM
  • I was having this exact same issue.  On the machines having this issue, I stopped the ccmexec service and ran,  ccmsetup /uninstall.  After that I ran the ccmdelcert command.  Once all of that was done, I did the client push to those machines again.  The machines then show up in the SCCM console with a client assigned to the correct site and they show as "active".  Hopefully this helps.
    Thursday, July 19, 2012 1:41 PM