Лучший отвечающий
Cannot access the console after upgrade

Вопрос
-
Hello,
One Administrator which was previously using the SCCM Console 1902 without issue got denied on the 1906 SCCM Console...
What could be wrong? Any log besides SMSADMINUI.log where I find :
not sure it is related to the installation of the console!!! except the Exception from HRESULT: 0x800706BA which seems pointing to a firewall issue. But as this is happening only for some user accounts not all it is strange...[77, PID:17728][08/14/2019 14:45:44] :Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException\r\nThe SMS Provider reported an error.\r\n at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.GetInstance(String objectPath) at Microsoft.ConfigurationManagement.AdminConsole.CollectionMenuActions.ClearDeploymentLocks.IsClearDeploymentLocksEnabled(Object sender, ScopeNode scopeNode, ActionDescription action, ResultObjectBase resultObj)\r\nConfigMgr Error Object: instance of SMS_ExtendedStatus { Description = "Error retrieving object CollectionID=UCP0084A"; ErrorCode = 2151811598; File = "x:\\bt\\1021052\\repo\\src\\siteserver\\sdk_provider\\smsprov\\SspInterface.h"; Line = 1199; Operation = "GetObject"; ParameterInfo = "SMS_CollectionSettings.CollectionID=\"UCP0084A\""; ProviderName = "ExtnProv"; StatusCode = 2147749890; }; \r\nSystem.Management.ManagementException\r\nNot found \r\n at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_wbemObject() at System.Management.PropertyData.RefreshPropertyInfo() at System.Management.PropertyDataCollection.get_Item(String propertyName) at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at System.Management.ManagementBaseObject.get_Item(String propertyName) at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.GetInstance(String objectPath)\r\nManagementException details: instance of SMS_ExtendedStatus { Description = "Error retrieving object CollectionID=UCP0084A"; ErrorCode = 2151811598; File = "x:\\bt\\1021052\\repo\\src\\siteserver\\sdk_provider\\smsprov\\SspInterface.h"; Line = 1199; Operation = "GetObject"; ParameterInfo = "SMS_CollectionSettings.CollectionID=\"UCP0084A\""; ProviderName = "ExtnProv"; StatusCode = 2147749890; }; \r\n
...
[2, PID:4928][08/15/2019 10:36:49] :System.Runtime.InteropServices.COMException\r\nThe RPC server is unavailable. (Exception from HRESULT: 0x800706BA)\r\n at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
at System.Management.ManagementScope.InitializeGuts(Object o)
at System.Management.ManagementScope.Initialize()
at System.Management.ManagementObject.Initialize(Boolean getObject)
at System.Management.ManagementObject.InvokeMethod(String methodName, ManagementBaseObject inParameters, InvokeMethodOptions options)
at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.ExecuteMethod(String methodClass, String methodName, Dictionary`2 methodParameters, Boolean traceParameters)\r\n
If I am using any of my own accounts on his workstations it is working fine... I am able to open the console 1906...
Thanks,
Dom
Security / System Center Configuration Manager Current Branch / SQL
- Изменено Felyjos 15 августа 2019 г. 22:21
15 августа 2019 г. 15:33
Ответы
-
It has been resolved by using the FQDN properly typed...
Thanks,
DomSecurity / System Center Configuration Manager Current Branch / SQL
- Помечено в качестве ответа Felyjos 26 августа 2019 г. 18:11
26 августа 2019 г. 18:11
Все ответы
-
Hello,
I tried...
To verify namespace connectivity
- On the computer where the SMS Provider is installed, click Start, click Run, and then type wbemtest.
- Click Connect, type \\<siteserver>\root\sms, and then click Connect.
- Click Enum Classes, click Recursive, and then click OK.
- In the Query Result list, double-click SMS_ProviderLocation.
- Click Instances, and then double-click the line that contains the target site code. For example, SMS_ProviderLocation.SiteCode="ABC."
- In the Properties section, locate the NamespacePath line. You might have to double-click this line to see the whole line.
- Copy the NamespacePath value to the clipboard. For example, copy the following value:
\\Server1\root\sms\site_ABC
To verify server connectivity
- Close all WBEMtest windows from the preceding procedure.
- Click Connect, paste the NamespacePath that you copied in the preceding procedure, and then click Login.
- Click Enum Classes, click Recursive, and then click OK.
- In the Query Result list, double-click SMS_Site.
Everything works perfectly with the user account... but still not able to launch the console
Thanks,
Dom
Security / System Center Configuration Manager Current Branch / SQL
- Изменено Felyjos 15 августа 2019 г. 22:22
15 августа 2019 г. 17:39 -
Hi Dom,
Error 0x800706BA= The RPC server is unavailable.
An RPC exception from the console means that it's not able to access WMI on the SCCM server, due to a connection or a permissions issue.
What is the commonality of these accounts that cannot open the console? Also, please verify the accounts are still in the AD group.
Best Regards,
TinaPlease remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
16 августа 2019 г. 7:11 -
Hello Tina,
"An RPC exception from the console means that it's not able to access WMI on the SCCM server, due to a connection or a permissions issue."
As some users are able to access the console I would think more of a permissions issues. Which permissions could be checked... the account is in the "Local administrators" Group on the desktop, even it has been added to the "Remote Desktop Users" Group
The accounts which have access to the console on this desktop are the desktop support group ONLY.
All others do not have access.
Yes the account is in the AD Configmgr ISS SRV Group
On other desktops Desktops Support Group, Servers Support Group have access to the console without issue with both type of accounts.
The desktop is on a subnet which is used by the server group and I am also on the same subnet and from my desktop it works fine.
Thanks,
Dom
Security / System Center Configuration Manager Current Branch / SQL
- Изменено Felyjos 16 августа 2019 г. 14:10
16 августа 2019 г. 13:43 -
Hello,
Still trying to resolve this issue which seems to be a permissions issue this happened nowhere else anymore... the local administrators group has been checked but it seems to be something else...
Trying to review the permissions on the components and folders!!! After the upgrade some SCCM Folder required Admin rights...
Thanks,
Dom
Security / System Center Configuration Manager Current Branch / SQL
20 августа 2019 г. 16:00 -
It has been resolved by using the FQDN properly typed...
Thanks,
DomSecurity / System Center Configuration Manager Current Branch / SQL
- Помечено в качестве ответа Felyjos 26 августа 2019 г. 18:11
26 августа 2019 г. 18:11