none
Cannot access the console after upgrade RRS feed

  • 问题

  • Hello,

    One Administrator which was previously using the SCCM Console 1902 without issue got denied on the 1906 SCCM Console...

    What could be wrong? Any log besides SMSADMINUI.log where I find :

    [77, PID:17728][08/14/2019 14:45:44] :Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException\r\nThe SMS Provider reported an error.\r\n at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.GetInstance(String objectPath) at Microsoft.ConfigurationManagement.AdminConsole.CollectionMenuActions.ClearDeploymentLocks.IsClearDeploymentLocksEnabled(Object sender, ScopeNode scopeNode, ActionDescription action, ResultObjectBase resultObj)\r\nConfigMgr Error Object: instance of SMS_ExtendedStatus { Description = "Error retrieving object CollectionID=UCP0084A"; ErrorCode = 2151811598; File = "x:\\bt\\1021052\\repo\\src\\siteserver\\sdk_provider\\smsprov\\SspInterface.h"; Line = 1199; Operation = "GetObject"; ParameterInfo = "SMS_CollectionSettings.CollectionID=\"UCP0084A\""; ProviderName = "ExtnProv"; StatusCode = 2147749890; }; \r\nSystem.Management.ManagementException\r\nNot found \r\n at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) at System.Management.ManagementObject.Initialize(Boolean getObject) at System.Management.ManagementBaseObject.get_wbemObject() at System.Management.PropertyData.RefreshPropertyInfo() at System.Management.PropertyDataCollection.get_Item(String propertyName) at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName) at System.Management.ManagementBaseObject.get_Item(String propertyName) at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.GetInstance(String objectPath)\r\nManagementException details: instance of SMS_ExtendedStatus { Description = "Error retrieving object CollectionID=UCP0084A"; ErrorCode = 2151811598; File = "x:\\bt\\1021052\\repo\\src\\siteserver\\sdk_provider\\smsprov\\SspInterface.h"; Line = 1199; Operation = "GetObject"; ParameterInfo = "SMS_CollectionSettings.CollectionID=\"UCP0084A\""; ProviderName = "ExtnProv"; StatusCode = 2147749890; }; \r\n

    ...

    [2, PID:4928][08/15/2019 10:36:49] :System.Runtime.InteropServices.COMException\r\nThe RPC server is unavailable. (Exception from HRESULT: 0x800706BA)\r\n   at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)

       at System.Management.ManagementScope.InitializeGuts(Object o)

       at System.Management.ManagementScope.Initialize()

       at System.Management.ManagementObject.Initialize(Boolean getObject)

       at System.Management.ManagementObject.InvokeMethod(String methodName, ManagementBaseObject inParameters, InvokeMethodOptions options)

       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.ExecuteMethod(String methodClass, String methodName, Dictionary`2 methodParameters, Boolean traceParameters)\r\n

    not sure it is related to the installation of the console!!! except the Exception from HRESULT: 0x800706BA which seems pointing to a firewall issue. But as this is happening only for some user accounts not all it is strange...

    If I am using any of my own accounts on his workstations it is working fine... I am able to open the console 1906...

    Thanks,
    Dom


    Security / System Center Configuration Manager Current Branch / SQL









    • 已编辑 Felyjos 2019年8月15日 22:21
    2019年8月15日 15:33

答案

  • It has been resolved by using the FQDN properly typed...

    Thanks,
    Dom


    Security / System Center Configuration Manager Current Branch / SQL

    • 已标记为答案 Felyjos 2019年8月26日 18:11
    2019年8月26日 18:11

全部回复

  • Hello,

    I tried...

    To verify namespace connectivity

    1. On the computer where the SMS      Provider is installed, click Start, click Run, and then type      wbemtest.

    1. Click Connect, type \\<siteserver>\root\sms,      and then click Connect.

    1. Click Enum Classes,      click Recursive, and then click OK.

    1. In the Query Result      list, double-click SMS_ProviderLocation.

    1. Click Instances, and      then double-click the line that contains the target site code. For      example, SMS_ProviderLocation.SiteCode="ABC."

    1. In the Properties      section, locate the NamespacePath line. You might have to      double-click this line to see the whole line.

    1. Copy the NamespacePath      value to the clipboard. For example, copy the following value:

    \\Server1\root\sms\site_ABC

    To verify server connectivity

    1. Close all WBEMtest windows from the preceding procedure.

    1. Click Connect, paste the NamespacePath that you copied in the preceding procedure, and then click Login.

    1. Click Enum Classes, click Recursive, and then click OK.

    1. In the Query Result list, double-click SMS_Site.

    Everything works perfectly with the user account... but still not able to launch the console

    Thanks,
    Dom


    Security / System Center Configuration Manager Current Branch / SQL




    • 已编辑 Felyjos 2019年8月15日 22:22
    2019年8月15日 17:39
  • Hi Dom,

    Error 0x800706BA= The RPC server is unavailable.

    An RPC exception from the console means that it's not able to access WMI on the SCCM server, due to a connection or a permissions issue.

    What is the commonality of these accounts that cannot open the console? Also, please verify the accounts are still in the AD group.

    Best Regards,
    Tina 

    Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    2019年8月16日 7:11
  • Hello Tina,

    "An RPC exception from the console means that it's not able to access WMI on the SCCM server, due to a connection or a permissions issue."

    As some users are able to access the console I would think more of a permissions issues. Which permissions could be checked... the account is in the "Local administrators" Group on the desktop, even it has been added to the "Remote Desktop Users" Group 

    The accounts which have access to the console on this desktop are the desktop support group ONLY.

    All others do not have access. 

    Yes the account is in the AD Configmgr ISS SRV Group

    On other desktops Desktops Support Group, Servers Support Group have access to the console without issue with both type of accounts.

    The desktop is on a subnet which is used by the server group and I am also on the same subnet and from my desktop it works fine.

    Thanks,

    Dom


    Security / System Center Configuration Manager Current Branch / SQL



    • 已编辑 Felyjos 2019年8月16日 14:10
    2019年8月16日 13:43
  • Hello,

    Still trying to resolve this issue which seems to be a permissions issue this happened nowhere else anymore... the local administrators group has been checked but it seems to be something else...

    Trying to review the permissions on the components and folders!!! After the upgrade some SCCM Folder required Admin rights...

    Thanks,

    Dom


    Security / System Center Configuration Manager Current Branch / SQL

    2019年8月20日 16:00
  • It has been resolved by using the FQDN properly typed...

    Thanks,
    Dom


    Security / System Center Configuration Manager Current Branch / SQL

    • 已标记为答案 Felyjos 2019年8月26日 18:11
    2019年8月26日 18:11