locked
Migrate Clients to new SCCM 2012 server RRS feed

  • Question


  • I am having some issues migrating my new client to my new SCCM 2012 server. I am doing a side by side migration from SCCM 2007 R3.


    • Old server is no longer publishing to AD and MP is not published to DNS
    • Old boundary has been removed, new boundary has been setup on new server
    • New server has full rights to the system management container and is successfully creating objects.
    • New server is publishing to AD and MP is published to DNS
    • New Server MP works, confirmed
    • FSP setup and working

    Client Install properties being used are 

    SMSSITECODE=AUS SMSMP=2012SMSSERVER.DOMAIN.COM FSP=2012SMSSERVER.DOMAIN.COM DNSSUFFIX=DOMAIN.COM DISABLESITEOPT=FALSE

    I have confirmed the boundaries with this command and there are no overlaps or duplicates.

    difde -f adSubnetBoundaries.txt -d "cn=system manageme
    nt,cn=system,dc=domain,dc=com" -l name,objectClass,whenChanged,mSSMSRoamingBoun
    daries -r (objectClass=msSMSSite)"

    Client Push works ok, client does install but when it attempts to register it fails as it is still refers to the old management point. Do I have to remove the old site and MP? Old site code is BNE new site code is AUS

    This is from the LocationServices.log

    <![LOG[LSGetAssignedSiteFromDirectories: Found assigned site code <BNE> by Group Policy]LOG]!><time="14:07:29.152-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:1752">
    <![LOG[LSIsSiteCompatible : Verifying Site Compatibility for <BNE>]LOG]!><time="14:07:29.152-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:5061">
    <![LOG[Current AD forest name is ROOT.LOCAL, domain name is domain.com]LOG]!><time="14:07:29.165-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:818">
    <![LOG[Retrieved lookup MP [2012SMSSERVER.domain.com] from Registry]LOG]!><time="14:07:29.166-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:2104">
    <![LOG[Attempting to retrieve lookup MP(s) from AD]LOG]!><time="14:07:29.175-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:2110">
    <![LOG[Current AD forest name is ROOT.LOCAL, domain name is domain.com]LOG]!><time="14:07:29.180-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:818">
    <![LOG[Domain joined client is in Intranet]LOG]!><time="14:07:29.181-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:896">
    <![LOG[The MP name retrieved is '2007SMSSERVER.domain.com' with version '6487' and capabilities '<Capabilities SchemaVersion="1.0">
    </Capabilities>']LOG]!><time="14:07:29.451-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsadcache.cpp:334">
    <![LOG[MP '2007SMSSERVER.domain.com' is compatible]LOG]!><time="14:07:29.451-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsadcache.cpp:339">
    <![LOG[Lookup Management Points from AD:]LOG]!><time="14:07:29.452-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsutils.h:205">
    <![LOG[Name: '2007SMSSERVER.domain.com' HTTPS: 'N' ForestTrust: 'N']LOG]!><time="14:07:29.452-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsutils.h:211">
    <![LOG[Retrieved lookup MP(s) from AD]LOG]!><time="14:07:29.452-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:2136">
    <![LOG[Current AD forest name is ROOT.LOCAL, domain name is domain.com]LOG]!><time="14:07:29.462-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:818">
    <![LOG[Domain joined client is in Intranet]LOG]!><time="14:07:29.462-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:896">
    <![LOG[LSGetSiteVersionFromAD : Successfully retrieved version '4.00.6487.0000' for site 'BNE']LOG]!><time="14:07:29.472-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:4960">
    <![LOG[LSIsSiteVersionCompatible : Site Version '4.00.6487.0000' is not compatible.]LOG]!><time="14:07:29.473-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:5023">
    <![LOG[LSIsSiteCompatible : Site <BNE> Version '4.00.6487.0000' is not compatible.]LOG]!><time="14:07:29.473-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="lsad.cpp:5126">
    <![LOG[LSVerifySiteAssignment : Client cannot be assigned to site <BNE>.]LOG]!><time="14:07:29.473-600" date="03-21-2013" component="LocationServices" context="" type="3" thread="3576" file="lsad.cpp:5160">
    <![LOG[Sending Fallback Status Point message, STATEID='607'.]LOG]!><time="14:07:29.473-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="3576" file="fspclientdeployassign.cpp:48">
    


    • Edited by _Russo_ Thursday, March 21, 2013 4:11 AM
    Thursday, March 21, 2013 4:01 AM

Answers

  • I went back through the logs again this morning and it seems that it is now starting to look for the right MP from Active Directory but won't assign it, I am assuming it has just taken some time for it to update.

    I reinstalled the client and it now seems to be pulling from the right MP now and everything seems to be working. Thanks everyone for your help :)

    • Marked as answer by _Russo_ Thursday, March 21, 2013 11:03 PM
    Thursday, March 21, 2013 11:02 PM

All replies

  • Bit of a development, I found part of the issue of the GPO adding a registry key GPRequestedSiteAssignmentCode, which was put in from the original deployment via GPO. After deleting the key or changing the site it discovered it however still gives me some issue for the MP.

    <![LOG[LSGetAssignedSiteFromDirectories: Found assigned site code <AUS> by Group Policy]LOG]!><time="15:04:30.109-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:1752">
    <![LOG[LSIsSiteCompatible : Verifying Site Compatibility for <AUS>]LOG]!><time="15:04:30.109-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:5061">
    <![LOG[Current AD forest name is ROOT.LOCAL, domain name is DOMAIN.COM]LOG]!><time="15:04:30.121-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:818">
    <![LOG[Retrieved lookup MP [2012SMSSERVER.DOMAIN.COM] from Registry]LOG]!><time="15:04:30.122-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:2104">
    <![LOG[Attempting to retrieve lookup MP(s) from AD]LOG]!><time="15:04:30.129-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:2110">
    <![LOG[Current AD forest name is ROOT.LOCAL, domain name is DOMAIN.COM]LOG]!><time="15:04:30.132-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:818">
    <![LOG[Domain joined client is in Intranet]LOG]!><time="15:04:30.132-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:896">
    <![LOG[The MP name retrieved is '2012SMSSERVER.DOMAIN.COM' with version '7804' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>']LOG]!><time="15:04:30.522-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsadcache.cpp:334">
    <![LOG[MP '2012SMSSERVER.DOMAIN.COM' is compatible]LOG]!><time="15:04:30.522-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsadcache.cpp:339">
    <![LOG[Lookup Management Points from AD:]LOG]!><time="15:04:30.522-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsutils.h:205">
    <![LOG[Name: '2012SMSSERVER.DOMAIN.COM' HTTPS: 'N' ForestTrust: 'N']LOG]!><time="15:04:30.522-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsutils.h:211">
    <![LOG[Retrieved lookup MP(s) from AD]LOG]!><time="15:04:30.522-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:2136">
    <![LOG[Current AD forest name is ROOT.LOCAL, domain name is DOMAIN.COM]LOG]!><time="15:04:30.530-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:818">
    <![LOG[Domain joined client is in Intranet]LOG]!><time="15:04:30.530-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:896">
    <![LOG[LSGetSiteVersionFromAD : Successfully retrieved version '5.00.7804.1000' for site 'AUS']LOG]!><time="15:04:30.540-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:4960">
    <![LOG[LSIsSiteVersionCompatible : Site Version '5.00.7804.1000' is compatible.]LOG]!><time="15:04:30.541-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:5028">
    <![LOG[LSIsSiteCompatible : Site <AUS> Version '5.00.7804.1000' is compatible.]LOG]!><time="15:04:30.541-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:5131">
    <![LOG[LSVerifySiteAssignment : Client can be assigned to site <AUS>.]LOG]!><time="15:04:30.541-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="9936" file="lsad.cpp:5168">
    <![LOG[Failed to refresh security settings over AD with error 0x87d00215.]LOG]!><time="15:06:16.157-600" date="03-21-2013" component="LocationServices" context="" type="2" thread="7064" file="lsad.cpp:4634">
    <![LOG[Retrieved lookup MP [2012SMSSERVER.DOMAIN.COM] from Registry]LOG]!><time="15:06:16.157-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:2104">
    <![LOG[Attempting to retrieve lookup MP(s) from AD]LOG]!><time="15:06:16.157-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:2110">
    <![LOG[Lookup Management Points from AD:]LOG]!><time="15:06:16.157-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsutils.h:205">
    <![LOG[Name: '2007SMSSERVER.DOMAIN.COM' HTTPS: 'N' ForestTrust: 'N']LOG]!><time="15:06:16.157-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsutils.h:211">
    <![LOG[Retrieved lookup MP(s) from AD]LOG]!><time="15:06:16.157-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:2136">
    <![LOG[Attempting to retrieve site information from lookup MP(s) via HTTP]LOG]!><time="15:06:16.166-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lssecurity.cpp:6022">
    <![LOG[LSGetSiteInformationFromManagementPoint('AUS'): Assignment Site Code [AUS], Version [5.00.7804.1000], Capabilities [<Capabilities SchemaVersion="1.0"/>], Client Operational Settings [<ClientOperationalSettings><Version>5.00.7804.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>192</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers></CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert></SiteSigningCert></SecurityConfiguration></ClientOperationalSettings>].]LOG]!><time="15:06:16.243-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lssecurity.cpp:6051">
    <![LOG[Refreshed security settings over MP]LOG]!><time="15:06:16.243-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:4699">
    <![LOG[No security settings update detected.]LOG]!><time="15:06:16.247-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lssecurity.cpp:5070">
    <![LOG[Retrieved lookup MP [2012SMSSERVER.DOMAIN.COM] from Registry]LOG]!><time="15:06:16.268-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:2104">
    <![LOG[Attempting to retrieve lookup MP(s) from AD]LOG]!><time="15:06:16.268-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:2110">
    <![LOG[Lookup Management Points from AD:]LOG]!><time="15:06:16.268-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsutils.h:205">
    <![LOG[Name: '2007SMSSERVER.DOMAIN.COM' HTTPS: 'N' ForestTrust: 'N']LOG]!><time="15:06:16.268-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsutils.h:211">
    <![LOG[Retrieved lookup MP(s) from AD]LOG]!><time="15:06:16.268-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:2136">
    <![LOG[Default Management Points from AD:]LOG]!><time="15:06:16.275-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsutils.h:205">
    <![LOG[Name: '2007SMSSERVER.DOMAIN.COM' HTTPS: 'N' ForestTrust: 'N']LOG]!><time="15:06:16.276-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsutils.h:211">
    <![LOG[Persisting the default management points in WMI]LOG]!><time="15:06:16.276-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:3692">
    <![LOG[Current AD site of machine is AU-GoldCoast]LOG]!><time="15:06:16.404-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:746">
    <![LOG[No Location Reply received from 2007SMSSERVER.DOMAIN.COM]LOG]!><time="15:06:16.444-600" date="03-21-2013" component="LocationServices" context="" type="2" thread="7064" file="lssecurity.cpp:5562">
    <![LOG[Persisted Default Management Point Locations locally]LOG]!><time="15:06:16.448-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:3783">
    <![LOG[Attempting to retrieve local MPs from the assigned MP]LOG]!><time="15:06:16.453-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:3594">
    <![LOG[Current AD site of machine is AU-GoldCoast]LOG]!><time="15:06:16.457-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:746">
    <![LOG[No Location Reply received from 2007SMSSERVER.DOMAIN.COM]LOG]!><time="15:06:16.493-600" date="03-21-2013" component="LocationServices" context="" type="2" thread="7064" file="lssecurity.cpp:5562">
    <![LOG[Current AD site of machine is AU-GoldCoast]LOG]!><time="15:06:16.500-600" date="03-21-2013" component="LocationServices" context="" type="1" thread="7064" file="lsad.cpp:746">

    The client says it is connected to the site, but it isn't connecting to the right MP and causing it not to work.

    • Edited by _Russo_ Thursday, March 21, 2013 5:13 AM
    Thursday, March 21, 2013 5:09 AM
  • Did you remove the GPO from the domain?

    What MP does it say it is connected to now in the properties of the client in the control panel applet?

    Do your boundaries overlap between the two sites?


    Jason | http://blog.configmgrftw.com

    Thursday, March 21, 2013 2:31 PM
  • GPO has been removed, and that part installs ok now.

    The MP in control panel says the old SCCM 2007 server not the new one. The boundaries do not overlap....Has me stumped.

    Thursday, March 21, 2013 10:13 PM
  • Is your CM12 MP functioning, check MPControl log.on the site server, and are there any OS or Network firewalls blocking communication?




    Rob Marshall | UK | My Blog | WMUG | File CM12 Feedback | CM12 Docs | CM12 Release Notes

    Thursday, March 21, 2013 10:18 PM
  • CM12 MP is working fine, no errors in MPControl.log, No firewalls either are blocking the comms.

    Able to get to these no issue

    http://<MPname>/sms_mp/.sms_aut?mplist
    http://<MPname>/sms_mp/.sms_aut?mpcert

    And the MP is listed in the Systems Management OU in AD
    • Edited by _Russo_ Thursday, March 21, 2013 10:24 PM
    Thursday, March 21, 2013 10:23 PM
  • Are you sure you cleared the registry settings set by the GPO: http://t3chn1ck.wordpress.com/2012/10/05/configmgr-client-gpo-assignment-removal/ ?


    Jason | http://blog.configmgrftw.com


    Thursday, March 21, 2013 10:29 PM
  • Definitely, there are 3 reg keys it adds in.
    Thursday, March 21, 2013 10:50 PM
  • I went back through the logs again this morning and it seems that it is now starting to look for the right MP from Active Directory but won't assign it, I am assuming it has just taken some time for it to update.

    I reinstalled the client and it now seems to be pulling from the right MP now and everything seems to be working. Thanks everyone for your help :)

    • Marked as answer by _Russo_ Thursday, March 21, 2013 11:03 PM
    Thursday, March 21, 2013 11:02 PM