locked
Deploying Application with Task Sequence fails when using Execute Runbook step from MDT RRS feed

  • Question

  • Hello,

    I have following issue.

    When I try to run a task sequence that uses the step Execute Runbook and deploy that task sequence to a device, everything works fine.

    But if I add that task sequence to a application and deploy it I get following error in smsts.log: (It seems that it's not using the NAA account at all when deployed with an application)

    Runnbook ID = 2e9b5ed3-f021-49a5-bf14-a354c0d66bf0 InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    Runbook parameter mode = AUTO InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    Unexpected response from web service: 401 Unauthorized InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <html xmlns="http://www.w3.org/1999/xhtml"> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <head> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <title>401 - Unauthorized: Access is denied due to invalid credentials.</title> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <style type="text/css"> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <!-- InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    fieldset{padding:0 15px 10px 15px;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    h1{font-size:2.4em;margin:0;color:#FFF;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    h2{font-size:1.7em;margin:0;color:#CC0000;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF; InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    background-color:#555555;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    #content{margin:0 0 0 2%;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    .content-container{background:#FFF;width:96%;margin-padding:10px;} InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    --> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    </style> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    </head> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <body> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <div id="header"><h1>Server Error</h1></div> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    <div id="content"> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
     <div class="content-container"><fieldset> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
      <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
      <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
     </fieldset></div> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    </div> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    </body> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    </html> InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    InstallSoftware 30-07-2020 10:23:35 880 (0x0370)
    Wait 10 secs before retry - Attempt: 1 InstallSoftware 30-07-2020 10:23:35 880 (0x0370)

    Any idea on how I can get this step to authenticate with the NAA account when TS is a part of a Application deployment?

    Thursday, July 30, 2020 8:59 AM

All replies

  • Hi,

    Thanks for posting in TechNet. I will do more research about this issue, and will let you know if there is any update.


    Best regards,
    Larry

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, July 31, 2020 2:56 AM
  • Hi,


    The following thread describes a similar issue, and possible causes of this issue include but are not limited to:

    1. NAA need be added in orchestrator “system group” which you have already tried.
    2. Another cause for this issue may be MDT version is too older for your SCCM version. In this case, you may need to try the latest version of MDT.

    Execute Runbook task step failing

    Execute runbook from SCCM TS

    For more details about SCCM Network access account, see:
    Network access account




    Best Regards,
    Larry

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, July 31, 2020 3:54 AM
  • The task sequence works fine when deploying it directly (I see in the smsts.log the NAA account being used), so it can't be a permission issue.

    We are running MDT 8456 and MEMCM 2002 so we are on the latest versions.

    Friday, July 31, 2020 7:04 AM