I'm in the process of configuring the XP firewall to support the Client Push installation method that SCCM offers. At the moment I'm quite happy with the result. The SCCM client agents are installed properly on my reference machines.
To secure that the WMI functionality is up and running I have (prior to the client agent installation) run wbemtest with following parameter (from server to client, and vice versa):
\\host\root\cimv2
I successfully contacted that specific namespace on both ends. But when I trace the log I find the following error which still indicates that something is wrong:
CWmi::Connect(): ConnectServer(Namespace) failed. - 0x8004100e SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Unable to connect to WMI (r) on remote machine "SCCMCLIENT03", error = 0x8004100e. SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
Why do I get this? What am I missing here? I got the feeling of WMI functioning the way it should.
Any hints on this one?
In an MSDN-article (http://msdn.microsoft.com/en-us/library/aa389286(VS.85).aspx) I read the following lines:
"If the user account that is on Computer A is not an administrator on Computer B, but the user account has Remote Enable permission on Computer B"
Those lines are part of an article which describes how to configure Remote administrations properly. For that to work, does the computer account of my Central Site Server has to be part of the local administrators group on every client?
Regards,
Fredrik
CCM.log
Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 2408 (0x0968)
Getting a new request from queue "Incoming" after 100 millisecond delay. SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 2408 (0x0968)
======>Begin Processing request: "TI11WDUE", machine name: "SCCMCLIENT03" SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 1704 (0x06A8)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 1704 (0x06A8)
---> Attempting to connect to administrative share '\\SCCMCLIENT03.spost.nu\admin$' using account 'spost.nu\SA-SCCM_ClientPush' SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 1704 (0x06A8)
Received request: "HPS6133J" for machine name: "SCCMCLIENT02" on queue: "Incoming". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 2408 (0x0968)
Stored request "HPS6133J", machine name "SCCMCLIENT02", in queue "Processing". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 2408 (0x0968)
---> Connected to administrative share on machine SCCMCLIENT03.spost.nu using account 'spost.nu\SA-SCCM_ClientPush' SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 1704 (0x06A8)
---> Attempting to make IPC connection to share <\\SCCMCLIENT03.spost.nu\IPC$> SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 1704 (0x06A8)
---> Searching for SMSClientInstall.* under '\\SCCMCLIENT03.spost.nu\admin$\' SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:13 1704 (0x06A8)
---> System OS version string "5.1.2600" converted to 5,10 SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Service Pack version from machine "SCCMCLIENT03" is 3 SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
CWmi::Connect(): ConnectServer(Namespace) failed. - 0x8004100e SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Unable to connect to WMI (r) on remote machine "SCCMCLIENT03", error = 0x8004100e. SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Creating \ VerifyingCopying exsistance of destination directory \\SCCMCLIENT03\admin$\system32\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Copying client files to \\SCCMCLIENT03\admin$\system32\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Copying file "d:\Program Files\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "\\SCCMCLIENT03\admin$\system32\ccmsetup\MobileClient.tcf" SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Copying file "d:\Program Files\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "\\SCCMCLIENT03\admin$\system32\ccmsetup\ccmsetup.exe" SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:14 1704 (0x06A8)
---> Created service "ccmsetup" on machine "SCCMCLIENT03". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 1704 (0x06A8)
----- Started a new CCR processing thread. Thread ID is 0xc6c. There are now 2 processing threads SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 2408 (0x0968)
Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 2408 (0x0968)
Getting a new request from queue "Incoming" after 100 millisecond delay. SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 2408 (0x0968)
Found CCR "yb2xbq0a.CCR" in queue "Incoming". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 2408 (0x0968)
======>Begin Processing request: "HPS6133J", machine name: "SCCMCLIENT02" SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 3180 (0x0C6C)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 3180 (0x0C6C)
---> Attempting to connect to administrative share '\\SCCMCLIENT02.spost.nu\admin$' using account 'spost.nu\SA-SCCM_ClientPush' SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 3180 (0x0C6C)
Received request: "YB2XBQ0A" for machine name: "SCCMCLIENT01" on queue: "Incoming". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 2408 (0x0968)
Stored request "YB2XBQ0A", machine name "SCCMCLIENT01", in queue "Processing". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:15 2408 (0x0968)
---> Started service "ccmsetup" on machine "SCCMCLIENT03". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
---> Deleting SMS Client Install Lock File '\\SCCMCLIENT03.spost.nu\admin$\SMSClientInstall.S01' SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
---> Completed request "TI11WDUE", machine name "SCCMCLIENT03". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
Deleted request "TI11WDUE", machine name "SCCMCLIENT03" SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
<======End request: "TI11WDUE", machine name: "SCCMCLIENT03". SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
======>Begin Processing request: "YB2XBQ0A", machine name: "SCCMCLIENT01" SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
---> Attempting to connect to administrative share '\\SCCMCLIENT01.spost.nu\admin$' using account 'spost.nu\SA-SCCM_ClientPush' SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:16 1704 (0x06A8)
Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 2009-03-10 11:12:17 2408 (0x0968)