locked
Correct policy not applied / PolicyEvaluator.log flooding RRS feed

  • Question

  • Hello all, 

    (Not quite sure Title to give this)

    Background: New Computer (laptop) scenario, applying Win7x64SP1 (up to March '15 updates integrated into WIM during build & capture). TS applications and configurations all apply successfully during OSD. 

    Problem: After a few restarts and confirming GPOs applied next step is a quick check software center and client.  This is empty and states 'IT Organization' not our company name. I would usually assume site assignment/boundary issues but the location of the site is the same for 100+ other clients, which are fine. Logs suggest correct site assignment (we have only one MP). Very occasionally an application might appear in the software centre but not the 25+ I would normally expect to see..

    The laptop fan and util is high so something is being processed (we already integrate roll-up 2775511 into the WIM). Uninstalling the ccm client drops the fan and util, so it surely must be that. 

    PolicyEvaluator.log is flooding every second, example attached. I only ever see Policy Version 1.00 whereas other systems I see different versions. Let me know what other logs I might post in order to get some help - it would be appreciated!

    Nickcx

    ====

    Raising event:
    instance of CCM_PolicyAgent_PolicyEvaluationComplete
    {

                ClientID = "GUID:55c69f19-6ca5-457a-ad03-d0375c878fc8";
                DateTime = "20150415110320.493000+000";
                PolicyNamespace = "\\\\.\\ROOT\\CCM\\Policy\\Machine\\RequestedConfig";
                PolicyPath = "CCM_Policy_Policy5.PolicyID=\"Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_255d6e0f-c3dc-457e-88db-57aaf5146809/VI\",PolicySource=\"SMS:I01\",PolicyVersion=\"1.00\"";
                ProcessID = 6016;
                ThreadID = 2868;
    };

                PolicyAgent_PolicyEvaluator  15/04/2015 12:03:20  2868 (0x0B34)
    Policy state for [CCM_Policy_Policy5.PolicyID="{026e30c8-ebaa-4e0c-ad8f-4cbdf3eca163}",PolicyVersion="388.00",PolicySource="SMS:I01"] is currently [DownloadStarted;{1C48B9CF-4B6C-4C00-B011-125F561548B8}]     PolicyAgent_PolicyEvaluator  15/04/2015 12:03:20  6160 (0x1810)
    Updating policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_1147a560-f69a-4886-b5f8-db54d44bde96/VI",PolicySource="SMS:I01",PolicyVersion="1.00"    PolicyAgent_PolicyEvaluator  15/04/2015 12:03:20          6568 (0x19A8)
    Applying policy Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_1147a560-f69a-4886-b5f8-db54d44bde96/VI       PolicyAgent_PolicyEvaluator  15/04/2015 12:03:21  6568 (0x19A8)
    Raising event:
    instance of CCM_PolicyAgent_PolicyRuleApplied
    {
                ClientID = "GUID:55c69f19-6ca5-457a-ad03-d0375c878fc8";
                DateTime = "20150415110321.525000+000";
                PolicyID = "Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_1147a560-f69a-4886-b5f8-db54d44bde96/VI";
                PolicyNamespace = "\\\\.\\ROOT\\CCM\\Policy\\Machine\\RequestedConfig";
                PolicySource = "SMS:I01";
                PolicyVersion = "1.00";
                ProcessID = 6016;
                RuleCondition = "";
                RuleID = "{Rule_Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_1147a560-f69a-4886-b5f8-db54d44bde96/VI}";
                ThreadID = 6568;
    };

                PolicyAgent_PolicyEvaluator  15/04/2015 12:03:21  6568 (0x19A8)
    Applied policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_1147a560-f69a-4886-b5f8-db54d44bde96/VI",PolicySource="SMS:I01",PolicyVersion="1.00"    PolicyAgent_PolicyEvaluator  15/04/2015 12:03:21          6568 (0x19A8)
    Raising event:
    instance of CCM_PolicyAgent_PolicyEvaluationComplete
    {
                ClientID = "GUID:55c69f19-6ca5-457a-ad03-d0375c878fc8";
                DateTime = "20150415110321.528000+000";
                PolicyNamespace = "\\\\.\\ROOT\\CCM\\Policy\\Machine\\RequestedConfig";
                PolicyPath = "CCM_Policy_Policy5.PolicyID=\"Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_1147a560-f69a-4886-b5f8-db54d44bde96/VI\",PolicySource=\"SMS:I01\",PolicyVersion=\"1.00\"";
                ProcessID = 6016;
                ThreadID = 6568;
    };

                PolicyAgent_PolicyEvaluator  15/04/2015 12:03:21  6568 (0x19A8)
    Policy state for [CCM_Policy_Policy5.PolicyID="ScopeId_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/AuthList_E977EFEE-46BE-4F66-93E0-023F62906473/VI",PolicyVersion="8.00",PolicySource="SMS:I01"] is currently [DownloadStarted;{98EE20E7-7DD0-47B9-90E8-5187D4A8F2A9}]    PolicyAgent_PolicyEvaluator  15/04/2015 12:03:21  5252 (0x1484)
    Updating policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_50f865ba-e25d-44e3-a310-62bfa73e4352/VI",PolicySource="SMS:I01",PolicyVersion="1.00"    PolicyAgent_PolicyEvaluator  15/04/2015 12:03:21          6632 (0x19E8)
    Applying policy Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_50f865ba-e25d-44e3-a310-62bfa73e4352/VI        PolicyAgent_PolicyEvaluator  15/04/2015 12:03:22  6632 (0x19E8)
    Raising event:
    instance of CCM_PolicyAgent_PolicyRuleApplied
    {
                ClientID = "GUID:55c69f19-6ca5-457a-ad03-d0375c878fc8";
                DateTime = "20150415110322.641000+000";
                PolicyID = "Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_50f865ba-e25d-44e3-a310-62bfa73e4352/VI";
                PolicyNamespace = "\\\\.\\ROOT\\CCM\\Policy\\Machine\\RequestedConfig";
                PolicySource = "SMS:I01";
                PolicyVersion = "1.00";
                ProcessID = 6016;
                RuleCondition = "";
                RuleID = "{Rule_Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_50f865ba-e25d-44e3-a310-62bfa73e4352/VI}";
                ThreadID = 6632;
    };

                PolicyAgent_PolicyEvaluator  15/04/2015 12:03:22  6632 (0x19E8)
    Applied policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_50f865ba-e25d-44e3-a310-62bfa73e4352/VI",PolicySource="SMS:I01",PolicyVersion="1.00"    PolicyAgent_PolicyEvaluator  15/04/2015 12:03:22          6632 (0x19E8)
    Raising event:
    instance of CCM_PolicyAgent_PolicyEvaluationComplete
    {
                ClientID = "GUID:55c69f19-6ca5-457a-ad03-d0375c878fc8";
                DateTime = "20150415110322.645000+000";
                PolicyNamespace = "\\\\.\\ROOT\\CCM\\Policy\\Machine\\RequestedConfig";
                PolicyPath = "CCM_Policy_Policy5.PolicyID=\"Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_50f865ba-e25d-44e3-a310-62bfa73e4352/VI\",PolicySource=\"SMS:I01\",PolicyVersion=\"1.00\"";
                ProcessID = 6016;
                ThreadID = 6632;
    };


    • Edited by Nick CX Wednesday, April 15, 2015 11:43 AM updates
    Wednesday, April 15, 2015 11:18 AM

Answers

  • In the end I worked out what was causing this.. I was running a number of Software Update baselines against machines and this was causing large CPU and disk activities and delaying the process of 'normal' policy download. Since the estate at where I work is so poorly patched I wanted to get the best view against 2011, 2012, 2013 etc year updates (CritSec) Turning off the baselines returned client activity to normal and I will revisit the best way to check compliance. 

    Lesson: be wary of running software baselines (with many updates) against machines.

    • Marked as answer by Nick CX Thursday, May 28, 2015 1:24 PM
    Thursday, May 28, 2015 1:24 PM

All replies

  • That indicates that the client is currently downloading policies. This should take a couple of minutes only. Applications and the software center branding should appear then. 

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, April 15, 2015 11:46 AM
  • Torsten, 

    That's what I would have expected but the log just continues to fill and no applications. I notice also the CCM client Actions has only Machine Policy and User Policy - indicative of perhaps a site assignment issue but clientlocation and location services all suggest correct site assignment - no other clients on this site have issues. 

    Policy versions are always 1.00 where on a working client I might see something like: 

    Thanks

    ==

    Raising event:
    instance of CCM_PolicyAgent_PolicyEvaluationComplete
    {
    ClientID = "GUID:B79D925C-2C44-4167-94C7-5BA0BFD3F7BC";
    DateTime = "20150415124053.818000+000";
    PolicyNamespace = "\\\\.\\ROOT\\ccm\\Policy\\Machine\\RequestedConfig";
    PolicyPath = "CCM_Policy_Policy5.PolicyID=\"{026e30c8-ebaa-4e0c-ad8f-4cbdf3eca163}\",PolicySource=\"SMS:I01\",PolicyVersion=\"389.00\"";
    ProcessID = 1844;
    ThreadID = 4744;
    };


    Wednesday, April 15, 2015 12:44 PM
  • I wanted to pick this one up again to see if I can get to the bottom of why this is happening; I am more than concerned that it might spread and at a complete loss to explain it (I will be opening a case for help but help is asked for here, too!)

    Today I deployed W7x64SP1 to a Dell Latitude E7250 successfully. Again the Software Center is not being populated with the 20-odd 'default' Available applications or Software Updates. The Log endlessly repeat as per below.

    The CM console does not give  Heartbeat DDR, Scan or Status Message timestamp or Scan just Policy Request. 

    Eventually after 24+ hours the issue seems to go away. I tested whether it was 'my' image (not captured) with a vanilla W8.1x64 DVD install but the same thing happens for the laptop. Could it be hardware related? Seems unlikely, no?

    POLICYAGENT.LOG

    Policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_52e9100e-6c0a-4071-9715-7fba8118eca2/VI",PolicySource="SMS:I01",PolicyVersion="1.00" is already deleted. PolicyAgent_PolicyDownload 4/29/2015 12:59:20 PM 3308 (0x0CEC)
    Download of policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_6c2afd35-5900-4be5-a252-5e5fe4090bab/VI",PolicySource="SMS:I01",PolicyVersion="1.00" completed (DTS Job ID: {B7FA9E71-3477-4D2D-A0A4-DD4CC996B75B}) PolicyAgent_PolicyDownload 4/29/2015 12:59:20 PM 5912 (0x1718)
    Raising event:
    instance of CCM_PolicyAgent_PolicyDownloadSucceeded
    {
    ClientID = "GUID:eba3c931-f68e-4b0a-87cc-220b342fb4d0";
    DateTime = "20150429115920.052000+000";
    DownloadMethod = "BITS";
    DownloadSource = "http://[MY MP]/SMS_MP/.sms_pol?Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_6c2afd35-5900-4be5-a252-5e5fe4090bab/VI.SHA256:CBE12136EA096D28E48FC6A655F40175890801F195354682EAE2536D6ADFBCC7";
    PolicyNamespace = "\\\\.\\ROOT\\ccm\\policy\\machine\\requestedconfig";
    PolicyPath = "CCM_Policy_Policy5.PolicyID=\"Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_6c2afd35-5900-4be5-a252-5e5fe4090bab/VI\",PolicySource=\"SMS:I01\",PolicyVersion=\"1.00\"";
    ProcessID = 6852;
    ThreadID = 5912;
    };
    PolicyAgent_PolicyDownload 4/29/2015 12:59:20 PM 5912 (0x1718)
    Policy CCM_Policy_Policy5.PolicyID="Site_BEBD3B8D-19A8-422B-BBE9-9ECCE2A830DC/SUM_6c2afd35-5900-4be5-a252-5e5fe4090bab/VI",PolicySource="SMS:I01",PolicyVersion="1.00" is already deleted. PolicyAgent_PolicyDownload 4/29/2015 12:59:20 PM 5912 (0x1718)
    Download of policy CCM_Policy_Policy5.PolicyID="{0E3DB62F-E90B-4A11-BEDC-3256838BE1C4}",PolicySource="SMS:I01",PolicyVersion="3.00" completed (DTS Job ID: {58A5BB0A-AA70-4F20-85B9-5EA7A9D3E15C}) PolicyAgent_PolicyDownload 4/29/2015 12:59:20 PM 5428 (0x1534)
    Raising event:
    instance of CCM_PolicyAgent_PolicyDownloadSucceeded
    {
    ClientID = "GUID:eba3c931-f68e-4b0a-87cc-220b342fb4d0";
    DateTime = "20150429115920.063000+000";
    DownloadMethod = "BITS";
    DownloadSource = "http://[MY MP]/SMS_MP/.sms_pol?{0E3DB62F-E90B-4A11-BEDC-3256838BE1C4}.SHA256:3810111100B4D5FB067DBE5B934E3FFA6A698CD6715B4D8AF7EE015B752D2349";
    PolicyNamespace = "\\\\.\\ROOT\\ccm\\policy\\machine\\requestedconfig";
    PolicyPath = "CCM_Policy_Policy5.PolicyID=\"{0E3DB62F-E90B-4A11-BEDC-3256838BE1C4}\",PolicySource=\"SMS:I01\",PolicyVersion=\"3.00\"";
    ProcessID = 6852;
    ThreadID = 5428;
    };
    PolicyAgent_PolicyDownload 4/29/2015 12:59:20 PM 5428 (0x1534)

    STATUSAGENT.LOG

    Raising event (#1 of 1):
    instance of CCM_PolicyAgent_PolicyRuleApplied
    {
    ClientID = "GUID:eba3c931-f68e-4b0a-87cc-220b342fb4d0";
    DateTime = "20150429120200.964000+000";
    PolicyID = "{ED372ED8-1824-4656-AA32-A9FCAF412C02}";
    PolicyNamespace = "\\\\.\\ROOT\\ccm\\policy\\machine\\requestedconfig";
    PolicySource = "SMS:I01";
    PolicyVersion = "4.00";
    ProcessID = 6852;
    RuleCondition = "";
    RuleID = "{Rule_{ED372ED8-1824-4656-AA32-A9FCAF412C02}}";
    ThreadID = 5652;
    };
    StatusAgent 4/29/2015 1:02:00 PM 5652 (0x1614)
    Successfully raised 1 event(s) StatusAgent 4/29/2015 1:02:00 PM 5652 (0x1614)
    Raising event (#1 of 1):
    instance of CCM_PolicyAgent_PolicyEvaluationComplete
    {
    ClientID = "GUID:eba3c931-f68e-4b0a-87cc-220b342fb4d0";
    DateTime = "20150429120200.972000+000";
    PolicyNamespace = "\\\\.\\ROOT\\ccm\\policy\\machine\\requestedconfig";
    PolicyPath = "CCM_Policy_Policy5.PolicyID=\"{ED372ED8-1824-4656-AA32-A9FCAF412C02}\",PolicySource=\"SMS:I01\",PolicyVersion=\"4.00\"";
    ProcessID = 6852;
    ThreadID = 5652;
    };
    StatusAgent 4/29/2015 1:02:00 PM 5652 (0x1614)
    Successfully raised 1 event(s) StatusAgent 4/29/2015 1:02:00 PM 5652 (0x1614)

    Wednesday, April 29, 2015 12:08 PM
  • That's most likely not hardware related. 
    And it's hard to troubleshoot because there are no obvious errors in the log. 

    Torsten Meringer | http://www.mssccmfaq.de

    Wednesday, April 29, 2015 12:11 PM
  • In the end I worked out what was causing this.. I was running a number of Software Update baselines against machines and this was causing large CPU and disk activities and delaying the process of 'normal' policy download. Since the estate at where I work is so poorly patched I wanted to get the best view against 2011, 2012, 2013 etc year updates (CritSec) Turning off the baselines returned client activity to normal and I will revisit the best way to check compliance. 

    Lesson: be wary of running software baselines (with many updates) against machines.

    • Marked as answer by Nick CX Thursday, May 28, 2015 1:24 PM
    Thursday, May 28, 2015 1:24 PM