locked
Client Push - HTTP 401 (Access Denied) on WEBDAV access to SCCM RRS feed

  • Question

  • Hi,

    I am trying to push SCCM 2012 Client to XP SP3 machines with prerequisites installed from my Win2k8R2 SCCM Server. The installation fails with HTTP error 401 (access denied).  The same issue with 2003 and 2008 Servers. I double checked my Network Access Account, tried to log in on a problem machine using it.  Security Event Log is clean on SCCM Server. I have two MPs and connection is failing to both.

    Any help will be appreciated. 

    -Alex

    Here is a snip from my ccmsetup.log (names are changed).

    <![LOG[Searching for a valid online MP...]LOG]!><time="16:23:27.827+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="ccmsetup.cpp:8811">
    <![LOG[Checking the URL 'HTTP://SCCM02.domain.tld:80/CCM_Client/ccmsetup.cab']LOG]!><time="16:23:27.827+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="ccmsetup.cpp:8840">
    <![LOG[PROPFIND 'HTTP://SCCM02.domain.tld:80/CCM_Client']LOG]!><time="16:23:27.827+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="httphelper.cpp:802">
    <![LOG[Got 401 challenge Retrying with Windows Auth...]LOG]!><time="16:23:27.827+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="httphelper.cpp:1283">
    <![LOG[PROPFIND 'HTTP://SCCM02.domain.tld:80/CCM_Client']LOG]!><time="16:23:27.827+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="httphelper.cpp:802">
    <![LOG[Failed to correctly receive a WEBDAV HTTP request.. (StatusCode at WinHttpQueryHeaders: 401)]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="3" thread="3048" file="httphelper.cpp:1365">
    <![LOG[Failed to check url HTTP://SCCM02.domain.tld:80/CCM_Client/ccmsetup.cab. Error 0x80004005]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="3" thread="3048" file="httphelper.cpp:1592">
    <![LOG[Accessing the URL 'HTTP://SCCM02.domain.tld:80/CCM_Client/ccmsetup.cab' failed with 80004005]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="2" thread="3048" file="ccmsetup.cpp:8878">
    <![LOG[Checking the URL 'HTTP://SCCM01.domain.tld:80/CCM_Client/ccmsetup.cab']LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="ccmsetup.cpp:8840">
    <![LOG[PROPFIND 'HTTP://SCCM01.domain.tld:80/CCM_Client']LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="httphelper.cpp:802">
    <![LOG[Got 401 challenge Retrying with Windows Auth...]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="httphelper.cpp:1283">
    <![LOG[PROPFIND 'HTTP://SCCM01.domain.tld:80/CCM_Client']LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="1" thread="3048" file="httphelper.cpp:802">
    <![LOG[Failed to correctly receive a WEBDAV HTTP request.. (StatusCode at WinHttpQueryHeaders: 401)]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="3" thread="3048" file="httphelper.cpp:1365">
    <![LOG[Failed to check url HTTP://SCCM01.domain.tld:80/CCM_Client/ccmsetup.cab. Error 0x80004005]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="3" thread="3048" file="httphelper.cpp:1592">
    <![LOG[Accessing the URL 'HTTP://SCCM01.domain.tld:80/CCM_Client/ccmsetup.cab' failed with 80004005]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="2" thread="3048" file="ccmsetup.cpp:8878">
    <![LOG[Next retry in 10 minute(s)...]LOG]!><time="16:23:27.842+240" date="07-17-2012" component="ccmsetup" context="" type="0" thread="3048" file="ccmsetup.cpp:7554">

    ....


    Alex Ignatenko | MCITP:Lync 2010, Messaging, Server 2008 | MCTS:UC Voice, Virtualisation, SCCM, SCOM, OCS | MCSE: Security


    • Edited by Alenat Thursday, July 19, 2012 7:20 PM
    Tuesday, July 17, 2012 8:56 PM

Answers

  • The issue is resolved:

    We added the following accounts with permissions to the ACL for \\...\Microsoft Configuration Manager\Client folder

    LOCAL SERVICE    <READ>

    IUSR                     <READ>

    restarted IIS using iisreset

    After that Push installation started successfully.

    Thank you Sean for the help.

    -Alex


    Alex Ignatenko | MCITP:Lync 2010, Messaging, Server 2008 | MCTS:UC Voice, Virtualisation, SCCM, SCOM, OCS | MCSE: Security

    • Marked as answer by Alenat Thursday, July 19, 2012 7:12 PM
    Thursday, July 19, 2012 7:12 PM

All replies

  • Updates:

    Actually 2008 Servers are affected too. 

    I put a Client machine to the same subnet as ConfigMgr to avoid any possible router effects - that did not help.

    -Alex


    Alex Ignatenko | MCITP:Lync 2010, Messaging, Server 2008 | MCTS:UC Voice, Virtualisation, SCCM, SCOM, OCS | MCSE: Security

    Thursday, July 19, 2012 4:07 PM
  • Only new installation of clients is having issues ? How about other downloads packages and applications ? 

    Anoop C Nair - @anoopmannur :: MY Site:  www.AnoopCNair.com :: FaceBook:  ConfigMgr(SCCM) Page :: Linkedin:  Linkedin<

    Thursday, July 19, 2012 4:14 PM
  • This is the weirdest thing - as soon as I install the Client (via script) the machine can get applications installed, reports to MP - no issues at all, just Client Push fails!

    I tried to uninstall the client and push again - the same error (401). 


    Alex Ignatenko | MCITP:Lync 2010, Messaging, Server 2008 | MCTS:UC Voice, Virtualisation, SCCM, SCOM, OCS | MCSE: Security

    Thursday, July 19, 2012 4:56 PM
  • The issue is resolved:

    We added the following accounts with permissions to the ACL for \\...\Microsoft Configuration Manager\Client folder

    LOCAL SERVICE    <READ>

    IUSR                     <READ>

    restarted IIS using iisreset

    After that Push installation started successfully.

    Thank you Sean for the help.

    -Alex


    Alex Ignatenko | MCITP:Lync 2010, Messaging, Server 2008 | MCTS:UC Voice, Virtualisation, SCCM, SCOM, OCS | MCSE: Security

    • Marked as answer by Alenat Thursday, July 19, 2012 7:12 PM
    Thursday, July 19, 2012 7:12 PM