none
SCCM update from 1802 to 1902 RRS feed

  • Question

  • Hi,

    We are trying to update SCCM primary site from 1802 to 1902,

    1902 updates package ,Current Status - Downloading and Show status - download update package cab file not started

    dmpdownloader every 5 mins we are seeing the below error.

    ERROR: Failed to download Admin UI content payload with exception: Access to the path 'C:\Program Files\Microsoft Configuration Manager\AdminUIContentPayload\ConfigMgr.AdminUIContent.AUC' is denied.

    Failed to call AdminUIContentDownload. error = [error code: -2147024891, error message: Access is denied.]

    Please suggest on the same.

    Regards,

    Manikandan

    Sunday, September 22, 2019 9:16 AM

Answers

  • The above error is pretty clear. You need to determine why the process is being denied access to that file. Anti-virus is a common culprit. You can use tools like procmon or Process Explorer as well. This could also be the result of non-standard permissions. Have you reviewed the permissions on the file and compared them to your lab?

    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by smanif123 Monday, September 23, 2019 1:21 PM
    Sunday, September 22, 2019 3:43 PM

All replies

  • Hi Manikandan,

    Try to restart the SMS_EXECUTIVE service and check again the dmpdownloader.log log file.

    You can also try with CMUpdateReset tool, follow these steps: https://www.prajwaldesai.com/sccm-update-reset-tool-cmupdatereset-tool/

    Regards,

    SAAD Youssef

    ______

    Please remember to mark the replies as answer if they help, thank you!

    Sunday, September 22, 2019 10:14 AM
  • HI SAAD Youssef,

    I tried to reset using updatereset tool and force delete, and restarted SMS_Executive and rebooted server.

    Also we tried to remove service connection point and added but still not working.

    Regards,

    Manikandan

    Sunday, September 22, 2019 10:50 AM
  • The above error is pretty clear. You need to determine why the process is being denied access to that file. Anti-virus is a common culprit. You can use tools like procmon or Process Explorer as well. This could also be the result of non-standard permissions. Have you reviewed the permissions on the file and compared them to your lab?

    Jason | https://home.configmgrftw.com | @jasonsandys

    • Marked as answer by smanif123 Monday, September 23, 2019 1:21 PM
    Sunday, September 22, 2019 3:43 PM
  • Hello Manikandan,

    The default permissions on folder "AdminUIContentPayload" are shown below.

       
    • Sharing permissions
      SYSTEM: Full Control
      Administrators: Full control
    • NTFS permissions
      SYSTEM: Full
      Control Administrators: Full control: Full Control

     
    Check that if they are the same as in your environment.
     
    Check if the account used for updating has been assigned a security role that includes Updates packages with both Modify and Read permissions and has been assigned to Default scope. 
     
    And as Jason mentioned, don't forget to check if an AV software is blocking access.
     
    Hope my answer could help you and look forward to your feedback.
     
    Best Regards,
    Ray

      

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, September 23, 2019 1:40 AM
  • Hi Ray,

    We have uninstalled the AV, Now we are able to see Download completed and prerequisites completed. but still the below error occurs in dmpdownloader every 5 mins.

    ERROR: Failed to download Admin UI content payload with exception: Access to the path 'C:\Program Files\Microsoft Configuration Manager\AdminUIContentPayload\ConfigMgr.AdminUIContent.AUC' is denied.

    Failed to call AdminUIContentDownload. error = [error code: -2147024891, error message: Access is denied.]

    And also in the download all are not download, can you please suggest the same.

    Regards,

    Manikandan


    Monday, September 23, 2019 12:38 PM
  • Hi Ray,

    the account we are using is part of the Full administrator role. any other specific role we need to check ?

    Regards,

    Manikandan 

    Monday, September 23, 2019 1:32 PM
  • The account you use is irrelevant. These are all background processes using the local System account as that's what ConfigMgr runs as.

    Jason | https://home.configmgrftw.com | @jasonsandys

    Monday, September 23, 2019 3:06 PM
  • Same answer as above. Anti-virus is just one possible culprit with access issues. You need to check the permissions as well as noted.

    Also, have you rebooted since removing the AV?

    Have you used any tools to help identify access issues and their source?


    Jason | https://home.configmgrftw.com | @jasonsandys

    Monday, September 23, 2019 3:07 PM