none
SCDPM 2019 Agent Deployment is failing with Error 319 / 400 / 33221 RRS feed

  • Question

  • Hi All,
    Good Day!!!,

    We recently started Deploying SCDPM 2019 into one of our client site.

    About DPM environment?  DPM is 2019 10.19.58.0
    What is the operating system version of your DPM server? DPM Server is running Windows 2019

    Server deployment is completed but when we start with Agent Deployment we are getting following errors

    1.Error 319:The agent operation failed because of communication error
    2.Error 400: The DPM server was unable to retrieve information about the remote system using the Windows Management 
    Instrumentation (WMI) service
    3.Error 33221: DPM could not connect to the Service control Manager on these server

    By default All windows machine firewall is on Off State, 90% of computers are windows 10, 10% with Windows 8 Versions.

    Here are the some more details from DPMRACurr.log file

    0CA8  1078 11/28 05:30:00.528 03 runtime.cpp(1434) WARNING Failed: Hr: = [0x80070002] : 

    Encountered Failure: : lVal : HRESULT_FROM_WIN32( ::RegGetValueW((( HKEY ) (ULONG_PTR)((LONG)0x80000002) ), L"Software\

    \Microsoft\\Microsoft Data Protection Manager\\Configuration", L"CredentialPassingAllowed", 0x00000010, 0, &dwRegValue, 

    &dwBuffer) )


    0F60 3888 11/28 05:00:00.988 03 schannelutils.cpp(129) D6478098-24E1-4412-BA0F-73BF3C120CC0

    WARNING Failed: Hr: = [0x80070002] : Unable to open RegKey [HKLM\Software\Microsoft\Microsoft Data Protection Manager\Agent

    \2.0\Certificates\SCDPM.DemoAD.com]

    0F60 04F0 11/28 05:00:00.988 29 dpmra.cpp(220) [000001FDCE4EE0D0] NORMAL MTA Temp location Path 

    = [D:\Microsoft System Center\DPM\DPM\temp\MTA\]


    thanks in Advance

    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Friday, December 13, 2019 1:19 PM

All replies

  • Hello,

    Are these Windows 10 & Windows 8 clients domain-joined computers?

    If the firewall is disabled (both big ones and Windows Firewall/third party firewall), make sure all the client's DNS forward and reverse are resolved by the DPM server.

    nslookup "Computer.domain.com"
    
    nslookup <IP Address of Computer>

    Have you tried installing the DPM agent manually to see if it works?

    1. From the Command Prompt, type DPMAgentInstaller.exe <DPMServerName> to install the protection agent on the protected computer.

    2. Then attach the protection agent to the DPM server by using the Protection Agent Installation Wizard. Verify the following:

    • <ServerName> is online and remotely accessible from the DPM server.
    • If a firewall is enabled on <ServerName>, that it is not blocking WMI requests from the DPM server.
    • The WMI service on <ServerName> is running.

    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:

    Friday, December 13, 2019 2:17 PM
  • Hi Leon Laude,

    Good Day!!!,

    As suggested we tried to check DNS record already it was correct only.

    • <ServerName> is online and remotely accessible from the DPM server. - Yes we can able to access
    • If a firewall is enabled on <ServerName>, that it is not blocking WMI requests from the DPM server.--Firewall is disabled in all computer 
    • The WMI service on <ServerName> is running. --this services is running already

    We yet to try Manual Agent install .

    Apart from that what else need to check.

    thanks,


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Monday, December 16, 2019 1:45 PM
  • When trying to push the DPM agent to the Windows clients, check the System and Application logs on the client computers for any warnings/errors.

    Also make sure the time synchronization is correct on both DPM server and Windows clients.

    If you have any antivirus software, try disabling it (some may even require temporary uninstallation).


    Blog: https://thesystemcenterblog.com LinkedIn:

    Monday, December 16, 2019 2:26 PM
  • Hi Leon Laude,

    Good Day!!!,

    As recommended we verified Client DNS host record is perfectly resolving from DPM Server

    Both Name & IP of the client are correctly updated to DNS when we resolve from DPM Server

    We tried to install agent manually and attach to DPM Server but we got an error

    Attach protected computer KESAVAN-IT-2013.Domain.com failed:Error 346: DPM is unable to retrieve the configuration information from KESAVAN-IT-2013.Domain.com.Recommended action: Ensure that the Windows Management Instrumentation (WMI) service is started. If the firewall is turned on, on KESAVAN-IT-2013.Domain.com make sure that an exception for WMI is created

    thanks in advance,


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Friday, December 20, 2019 12:33 PM
  • Please note that Windows 8 clients are not supported with DPM 2019, but Windows 10 clients are supported so make sure you try the protection agent installation with your Windows 10 clients.

    The errors still indicate that connectivity issues exist, do you have any ”big firewall” (not Windows Firewall) that may block the communication?

    Also check that you don’t have any Group Policies with restrictions.


    Blog: https://thesystemcenterblog.com LinkedIn:

    Friday, December 20, 2019 12:53 PM
  • Hi Leon Laude,

    Good Day!!!

    we have all windows 10 computers only for agent installation from SCDPM 2019.

    Additionally here are errors we can see on DPMRACurr.log

    schannelutils.cpp(129) 89CB8036-5611-4AE8-AA60-E70C27DBB71E
    WARNING Failed: Hr: = [0x80070002] :Unable to open RegKey [HKLM\Software\Microsoft\Microsoft Data Protection Manager\Agent\2.0\Certificates\computer.com]

    WARNING Failed: Hr: = [0x80070002] : Encountered Failure: : lVal : HRESULT_FROM_WIN32( ::RegGetValueW((( HKEY ) (ULONG_PTR)((LONG)0x80000002) ), L"Software

    \\Microsoft\\Microsoft Data Protection Manager\\Configuration", L"CredentialPassingAllowed", 0x00000010, 0, &dwRegValue, &dwBuffer) )

    WARNING Parameter: 

    [0x80070002], FilePath = \\?\Volume{85454ffd-225c-4d9f-ae11-5838bc20c7cf}\df718b16-29df-45a4-bf9f-b8ea45b1eeaf\FailedFiles.dat
    210C 0550 12/19 10:00:20.016 18 fswrapper.cpp(932) [0000008D294FECA0] F03C5BD7-5737-4F7F-8F77-77DC900CE373

    thanks in advance,


    Regards, Kesavan K M. Please remember to mark the replies as answers if they help.

    Friday, December 20, 2019 5:07 PM