locked
Client systems loose contact to SCE server RRS feed

  • Question

  • Every morning, about 5 of total 150 client systems have a status of "not yet contacted". When monitoring one of this "not yet contacted" systems with the health explorer, there is no error or warning. We have just to execute a computer script like "inventory collection" on such a system, and after a few seconds, the status of the client changed from "not yet contacted" to OK. We have SCE 2007 SP1 installed with Hotfix Package 954049.

     

    Any advice? Thank you in advance for any help!

    Franz

    Friday, October 31, 2008 8:16 AM

Answers

  • Hi,

     

    Perform following steps on problematic clients:

     

    1).Click Start, click Run, type cmd in the Open box, and then click OK.
    2).At the command prompt, type net stop wuauserv, and then press ENTER.
    3).Click Start, click Run, type regedit in the Open box, and then click OK.
    4).Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
    5)In the right pane of Registry Editor, delete the following registry entries:
    • PingID
    • AccountDomainSid
    • SusClientId
    6) Quit Registry Editor.
    7) At the command prompt, type net start wuauserv, and then press ENTER.
    8) At the command prompt, type wuauclt.exe /resetauthorization /detectnow, and then press ENTER.
    9) Wait 10 minutes for a detection cycle to finish.

    HTH.

    Wednesday, November 5, 2008 3:34 AM

All replies

  • Hi Franz,

     

    1. Open dsa.msc on server to check whether clients were added in "SCE Managed Computers" group

    2. Run rsop.msc on clients to check whether the GPOs: SCE Managed Computers Group Policy& System Center Essentials All Computers Policy had been applied correctly on clients.
    Check that the client is configured to use the SCE server for Windows Updates.  The following registry entries should be set to https://<SCEServerFQDN>:8531
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUServer
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\WUStatusServer

    3. Check whether the required ports for communication between clients and server had been opened, or disable the firewall as a test.

    4. Is there a proxy server in your scenario? If not, please ensure there is no proxy setting in IE and run proxycfg -d (netsh winhttp reset proxy in vista)command on problematic SCE clients.

    5. Run wuauclt /detectnow and reportnow on the SCE agents.

    HTH.
    Monday, November 3, 2008 3:52 AM
  • Hi Jie

     

    Thank you for your help! Have verified point 1, 2, and 4 (there is no proxy ath this time, and there was never a proxy server configured) of your list: All OK. Point 5: Like I mentioned, when running wuauclt /detectnow either from the SCE Server or the client, the status changes from "not yet contacted" to OK in about one minute. But it's not optimal that this has to be done for about 10 (always different!) client systems every day.

     

    Point 4 (Firewall): I'm not sure about all required ports and program exceptions and have posted this question here: http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=4084911&SiteID=17. Perhaps, an answer to this question will solve this issue as well.

     

    best regards,

    Franz

     

    Tuesday, November 4, 2008 4:07 PM
  • Hi,

     

    Perform following steps on problematic clients:

     

    1).Click Start, click Run, type cmd in the Open box, and then click OK.
    2).At the command prompt, type net stop wuauserv, and then press ENTER.
    3).Click Start, click Run, type regedit in the Open box, and then click OK.
    4).Locate and then click the following registry subkey:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate
    5)In the right pane of Registry Editor, delete the following registry entries:
    • PingID
    • AccountDomainSid
    • SusClientId
    6) Quit Registry Editor.
    7) At the command prompt, type net start wuauserv, and then press ENTER.
    8) At the command prompt, type wuauclt.exe /resetauthorization /detectnow, and then press ENTER.
    9) Wait 10 minutes for a detection cycle to finish.

    HTH.

    Wednesday, November 5, 2008 3:34 AM