locked
Problem with site assignment RRS feed

  • Question

  • Hello,

    I have a problem with site assignment, I created boundary (ip address range), added it to boundary group, this group is set for site assignment, I install client via push, open Configuration Manager, see site code, but if I press Find site, error is appeared - "CM did not find a site", but in the console I see code for a client computer and status of client is Yes. Why did it happen?

    In the ClientLocation:

    <![LOG[Assigned Site is CM1]LOG]!><time="15:43:28.453-240"




    • Edited by Andev Friday, June 6, 2014 12:04 PM
    Friday, June 6, 2014 11:49 AM

All replies

  • This single line does not contain an error and has nothing to do with your initial question. Examine ClientLocation.log and LocationServices.log.

    Torsten Meringer | http://www.mssccmfaq.de

    Friday, June 6, 2014 12:04 PM
  • Are you trying to install the client on the same domain as the SCCM server or another domain. In that case you must first extend the AD schema before you can successfully install the client.

    Friday, June 6, 2014 12:09 PM
  • Are you trying to install the client on the same domain as the SCCM server or another domain. In that case you must first extend the AD schema before you can successfully install the client.

    schema was extended, container was created, same domain

    Friday, June 6, 2014 12:57 PM
  • This single line does not contain an error and has nothing to do with your initial question. Examine ClientLocation.log and LocationServices.log.

    Torsten Meringer | http://www.mssccmfaq.de

    ClientLocation last messages:

    <![LOG[Getting Assigned Site]LOG]!>
    <![LOG[Assigned Site is CM1]LOG]!>
    <![LOG[Autodiscover Site]LOG]!>
    <![LOG[Client is set to use HTTPS when available. The current state is 224.]LOG]!>

    LocationServices (last messages):

    <![LOG[Refreshing the Management Point List for site CM1]LOG]!>
    <![LOG[Retrieved management point encryption info from AD.]LOG]!>
    <![LOG[Raising event:

    instance of CCM_CcmHttp_Status
    {
    ClientID = "GUID:4B7DC29F-35A1-4C5F-B93F-2BE99DDE963D";
    DateTime = "20140606123725.184000+000";
    HostName = "SCCM.contoso.com";
    HRESULT = "0x00000000";
    ProcessID = 4164;
    StatusCode = 0;
    ThreadID = 4008;
    };
    ]LOG]!>
    <![LOG[Refreshing trusted key information]LOG]!>
    <![LOG[The MP name retrieved is 'SCCM.contoso.com' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>']LOG]!>
    <![LOG[MP 'SCCM.contoso.com' is compatible]LOG]!>
    <![LOG[Refreshed Root Site Code from AD]LOG]!>
    <![LOG[Attempting to refresh TRK from AD]LOG]!>
    <![LOG[Refreshed TRK from AD]LOG]!>
    <![LOG[Raising event:

    instance of CCM_CcmHttp_Status
    {
    ClientID = "GUID:4B7DC29F-35A1-4C5F-B93F-2BE99DDE963D";
    DateTime = "20140606123725.229000+000";
    HostName = "SCCM.contoso.com";
    HRESULT = "0x00000000";
    ProcessID = 4164;
    StatusCode = 0;
    ThreadID = 4008;
    };
    ]LOG]!>
    <![LOG[Persisting the management point authentication information in WMI]LOG]!>
    <![LOG[Persisted Management Point Authentication Information locally]LOG]!>
    <![LOG[Failed to verify message. Sending MP [SCCM.contoso.com.] not in cached MPLIST.]LOG]!>
    <![LOG[MPLIST requests are throttled for 00:59:59]LOG]!><
    <![LOG[Failed to verify message. Sending MP [SCCM.contoso.com] not in cached MPLIST.]LOG]!>
    <![LOG[MPLIST requests are throttled for 00:59:59]LOG]!>

    instance of CCM_CcmHttp_Status
    {
    ClientID = "GUID:4B7DC29F-35A1-4C5F-B93F-2BE99DDE963D";
    DateTime = "20140606123725.229000+000";
    HostName = "SCCM.contoso.com";
    HRESULT = "0x00000000";
    ProcessID = 4164;
    StatusCode = 0;
    ThreadID = 4008;
    };
    ]LOG]!>
    <![LOG[Persisting the management point authentication information in WMI]LOG]!>
    <![LOG[Persisted Management Point Authentication Information locally]LOG]!>
    <![LOG[Failed to verify message. Sending MP [SCCM.contoso.com.] not in cached MPLIST.]LOG]!><time="16:37:25.237-240" date="06-06-2014" component="LocationServices" context="" type="2" thread="4008" file="lssecurity.cpp:1744">
    <![LOG[MPLIST requests are throttled for 00:59:59]LOG]!>

    Friday, June 6, 2014 1:06 PM
  • after some time I tried again to press Find Site and site was found successfully, but no policy is arrived, and one of 2 clients doesn't have GUID... amazing
    Friday, June 6, 2014 1:22 PM
  • AD team changed LAN manager authentication level policy without notifying, could please describe which policy should be used on domain controllers, sccm servers, clients?
    Monday, June 9, 2014 7:54 AM
  • The auth level should be unrelated. Are the clients approved? What does clientidstartupmanager.log tell?

    Torsten Meringer | http://www.mssccmfaq.de

    Monday, June 9, 2014 8:40 AM
  • The auth level should be unrelated. Are the clients approved? What does clientidstartupmanager.log tell?

    Torsten Meringer | http://www.mssccmfaq.de

    I found topics describing this problem:

    http://www.myitforum.com/forums/m216724-print.aspx

    http://social.technet.microsoft.com/Forums/forefront/en-US/0e0db90b-a1fd-4e32-b23a-bf69e5f76417/sccm-2007r3-client-push-installation-fails-wmi

    Clients are approved, but do not recieve policy. 

    In the log a lot of errors (repeating)

    RegTask: Failed to send registration request message. Error: 0x87d00309

    firewall and antivirus are disabled. MP is accessible using http.
    • Edited by Andev Monday, June 9, 2014 8:46 AM
    Monday, June 9, 2014 8:43 AM
  • I tried to use psexec to run "net use" to attach network share located on SCCM server under local system account with no success.

    In the book - "Clients use the SMB protocol to send status messages"

    • Edited by Andev Monday, June 9, 2014 12:27 PM
    Monday, June 9, 2014 12:02 PM
  • In my lab where SCCM doesn't have problems I have thse same situation with coneccting shared folder under local system, so problem with registering clients is not related to this, continue investigating...
    Tuesday, June 10, 2014 5:19 AM
  • Tested same LAN manager configs in my test lab, client is installed, so problem is not related to this, contine investigating...

    who knows how to troubleshoot client registration?


    • Edited by Andev Tuesday, June 10, 2014 8:09 AM
    Tuesday, June 10, 2014 8:09 AM
  • I installed WireShark to test connections between sccm and client, 

    found the following on the SCCM side in the moment when client sends registration request:

    HTTP 1563 HTTP/1.1 401 Unauthorized  (text/html)

    details show problem with authentication using NTLM, error - invalid credentials

    and next

    HTTP 59 HTTP/1.1 200 OK  (text/plain) (application/octet-stream)

    details show that client sends domain\name$ and Kerberos is used.

    So there is no problem with authentication.

    • Edited by Andev Tuesday, June 10, 2014 11:50 AM
    Tuesday, June 10, 2014 10:23 AM