Quantcast
Channel: Configuration Manager 2007 Setup/Deployment forum
Viewing all 443 articles
Browse latest View live

Client Deployment Status Details Report - Installation In-Progress

$
0
0

I just finished listening to Wally's webcast regarding SCCM client deployment, which was very informative.

 

After viewing the webcast I ran the C;ient Deployment Status Details report and noticed that it showed 451 successfully installed, 4 failures, and 9 installations in-progress. While there are reports for the successful and failed installations, what about those in-progress?

 

I have recently (within the past three weeks) upgraded from SMS 2003 SP3 to SCCM 2007 SP1. It has been a real challenge to get all of the clients deployed and reporting software update scans properly. I was surprised by the number of in-progress and need to determine which PC's are in this classification.

 

A suggestion for Microsoft for a future webcast would be on troubleshooting software scan failures. Another suggestion is some sort of tool that could be ran on a client PC to analyze the SCCM log files and assist in isolating problems with a "user friendly" report.

 

Any assistance or feedback is greatly appreciated.


Crypt acquire context failed with 0x8009000f after upgrade from sms 2003 to SCCM 2007 SP1

$
0
0

I've upgraded clients from SMS 2003 SP3 to SCCM 2007 SP1.

 

In the SCCM console some ressources are showing as not being client.

 

If I look on the machine, I can see that client is installed but the client cannot communicate with the management point.

 

CCMEXEC.log shows the following error message :

 

Crypt acquire context failed with 0x8009000f.

 

Failed to create certificate 8009000f CcmExec 21/04/20099:49:10 1948 (0x079C)

 

CCMDoCertificateMaintenance() failed (0x8009000f).

 

 

So, the issue is related to certificate

 

If I go to C:\documents and settings\all users\Application Data\Microsoft\Crypto\RSA\MachineKeys and delete the file begining by  19c5cf... and then restart the client the problem is solved.

 

Can someone explain what is happening ?

What can I do to prevent this problem

 

Kind regards

Site Assignment Failing after SCCM Rebuild

$
0
0

Ok, so here's the situation:

I have been tasked with rebuilding SCCM for  a customer.  They had so many issues from a previous implementation, that they just wanted a "do-over".

I uninstalled all sites, and removed all references from AD.  I have a script removing all clients.  I deleted the System Mangement containing and recreated with ADSIEDIT, then applied the correct permissions.  I have rebuilt the VM with a new name (same IP) onto 2008 R2.  I installed SCCM (all roles on 1 server for now), successfully extnded the schema.  I set all boundaries using site/services.  Everything looks good.

I went to push the first client as a test and the site assignment failed.  I get the following in the location services log:

LSRefreshSiteCode: Group Policy Updated the Assigned Site Code <HOU>, which is different than the exisitng assigned Site Code <>. Would try to re-assign the site. LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
Sending Fallback Status Point message, STATEID='500'. LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
Processing GroupPolicy site assignment. LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
Assigning to site 'HOU' LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
LSVerifySiteVersion : Verifying Site Version for <HOU> LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
LSGetSiteVersionFromAD : Failed to retrieve version for the site 'HOU' (0x80004005) LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
Attempting to retrieve SLPs from AD LocationServices 4/23/2010 10:01:39 AM 3956 (0x0F74)
Failed to resolve 'SMS_SLP' to IP address from WINS LocationServices 4/23/2010 10:01:49 AM 3956 (0x0F74)
LSGetSLP : Failed to resolve SLP from WINS, is it published LocationServices 4/23/2010 10:01:49 AM 3956 (0x0F74)
LSGetSiteVersionFromSLP : Unable to get the list of SLPs LocationServices 4/23/2010 10:01:49 AM 3956 (0x0F74)
LSVerifySiteVersion: Failed to get Site Version from AD and SLP LocationServices 4/23/2010 10:01:49 AM 3956 (0x0F74)
Sending Fallback Status Point message, STATEID='608'. LocationServices 4/23/2010 10:01:49 AM 3956 (0x0F74)

"HOU" is the previous site code from the old implementation.  The new site code should be "S01".  I don't know how it keeps trying to use the old HOU or where it's even coming from.  I have even put this computer in an OU with all policy blocked to make sure that was not it.

I am runing out of ideas.  PLEASE HELP.

Thanks!


xtiyu32n

Wrong Management Point

$
0
0

Hello,

Looking at the Client Location.log file I have

Current Management Point is configmgrsrv.ad with version 6487 and capabilities: <Capabilities SchemaVersion="1.0"></Capabilities>.	ClientLocation	6/2/2015 2:07:16 PM	9656 (0x25B8)
GetCurrentManagementPointEx	ClientLocation	6/2/2015 2:08:45 PM	9368 (0x2498)
Current Management Point is configmgrsrv.ad with version 6487 and capabilities: <Capabilities SchemaVersion="1.0"></Capabilities>.	ClientLocation	6/2/2015 2:08:45 PM	9368 (0x2498)
GetCurrentManagementPointEx	ClientLocation	6/2/2015 2:22:26 PM	2096 (0x0830)
Current Management Point is configmgrsrv.ad with version 6487 and capabilities: <Capabilities SchemaVersion="1.0"></Capabilities>.	ClientLocation	6/2/2015 2:22:26 PM	2096 (0x0830)

but CONFIGMGRSRV is wrong the Management Point is CONFIGMGRDTS where does it pick this value ?

(CONFIGMGRSRV exists on another site)

Thanks,

DOm


System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager


Querying name in active directory during deployment

$
0
0

Hello,

i'm using wds and mdt (2012) to deploy seven.

In my company, each computers are named with a specific name (room+number) and included in an Active Directory.

Each computer object in AD have his MAC address written in a the "LOCATION" field.

When deploying a system, during the "oobeSystem" pass i launch a vbs script which queries the MAC address of the host, searching it in the active directory, reporting the corresponding name and naming the host with it. So i reboot the pc, join the domain and reboot to finish the process.

I's there a way during deployment, to run a similar script or command,  wether included in the winpe or specialize phase, wether in the task sequence command ?

Thanks

Franck

SCCM Client installation randomness - Getting WINHTTP_CALLBACK_STATUS_FLAG_SECURITY_CHANNEL_ERROR

$
0
0

Over the past several weeks, I have built about a dozen new machines - mostly Windows 7, but a few Windows 2008 R2 servers as well.  All the machines get the SCCM Client, and install it, however a few of them don't show up in the SCCM Management Console as installed (Client = 'No').  These are all clean installs - some work, some don't.  I am farily confident all my certs are correct since it does work on some machines, but not others.  On the machines where it is not working, I have been seeing this set of errors in the ccmsetup.log file:

<![LOG[Using the certificate issued to 'TURING.MYDOMAIN.COM'.]LOG]!><time="15:17:26.868+300" date="12-15-2010" component="ccmsetup" context="" type="0" thread="3484" file="ccmcert.cpp:3631">
<![LOG[[CCMSETUP] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1877">
<![LOG[[CCMSETUP] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1878">
<![LOG[[CCMSETUP]                : dwStatusInformationLength is 4
]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1879">
<![LOG[[CCMSETUP]                : *lpvStatusInformation is 0x80000000
]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1880">
<![LOG[[CCMSETUP]            : WINHTTP_CALLBACK_STATUS_FLAG_SECURITY_CHANNEL_ERROR is set
]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1908">
<![LOG[[CCMSETUP] AsyncCallback(): -----------------------------------------------------------------]LOG]!><time="15:17:27.407+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:1910">
<![LOG[Failed to send HTTP request. (Error at WinHttpSendRequest: 12175)]LOG]!><time="15:17:27.408+300" date="12-15-2010" component="ccmsetup" context="" type="2" thread="3484" file="ccmsetup.cpp:5901">
<![LOG[DownloadFileByWinHTTP encountered an unrecoverable error.]LOG]!><time="15:17:27.408+300" date="12-15-2010" component="ccmsetup" context="" type="3" thread="3484" file="ccmsetup.cpp:5948">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='308' will not be sent.]LOG]!><time="15:17:27.408+300" date="12-15-2010" component="ccmsetup" context="" type="1" thread="3484" file="ccmsetup.cpp:9330">

If I open the Config Manager on the clients, all the information looks correct, except I am missing two tabs, and the information on the Actions tab.  The machines having the problem only have two actions (Machine Policy Rereival & Eval Cycle and User Policy Retrieval & Eval Cycle).  For the machines where things ARE working properly, there are 11 actions listed and two additional tabs: Configurations and Updates.

I have been trying to figure this out for a couple weeks, and it is driving me insane!
Thanks,
Bob

SMS Site Component Manager failed to deinstall all SMS server components from site system

$
0
0

SMS Site Component Manager failed to deinstall all SMS server components from site system

I have restarted the site component service but I have no delete option

SCCM 2007 Virtual lab available?


Can SCCM2007/SCCM2012 be migrated to other domain?

$
0
0

We want to migrated all servers and clients to a new domain.

If SCCM2007/SCCM2012 can be migrated the new domain smoothly?

Thanks a lot!

Where is Toolkit Documentation_x86-en_us.msp?

$
0
0
My attempt to install SCCM 2012 R2 has been stalled when "adksetup" is demanded.  After I downloaded it and run adksetup, it requires 'Toolkit Documentation_x86-en_us.msp" in order to continue the installation.  All searches online have not yielded this documentation.  Why is Microsoft product install so difficult?  Anyone aware where this Toolkit Documentation can be downloaded from, please respond.  Thanks.

HELP in a language I can understand

$
0
0
As A computing novice I need it told to me in laymans terms. I have a laptop that is set up for a home network that never happened, so what I would like to do is change turn it into a stand-alone type of a program. I have Windows 7 Home Premium Using a 64 Bit program, so is there anyone out there that can explain to me how to do this without confusing me all to **** ?

SCCM 2012 deployment in multi domain envirnoment

$
0
0

Hello,

I want to deploy SCCM 2012 in multiple domain envirnoment where trust relationship between domain is not there but I can enable the the network ports in between, so I would request you to share the best practices for the same.

Thanks in advance!

Regards,

Krishna

TWO FAILS

$
0
0

I have two dvd cdrom hp 500z PC refuse to recognize cd or dvd inserts for playing them I try to fix this I get the messages

ISATAP adapter fail

TEREDO tunneling adapter faiL

Is this a mother board adapter failure or some kind of registers screw up.

Can any body please help.

Migrating to a new domian

$
0
0

Hi All,

The  company i work for merged with another company and we are planning to create  a new domain and migrate all the data to the new domain from the existing 2 domains. 

Domain structure 123.test.com and 456.test.com

123.test.com = 1 primary site server, 1 secondary site server and 1 DP

456.test.com = 1 secondary site Server and 1 DP

We are planning to create new domain like new.com. What is the process to migrate the data from the above said domains to the new domain new.com. Please share ideas and case studies.


AppGN

Active Directory Discovery - Current security context is not associated with an Active Directory domain or forest

$
0
0

Hiya,

 

I'm having some problems with the Active Directory discovery methods, I select the new active directory container button and whenever I click ok on that dialog box it crashes out with the following error:

 

System.DirectoryServices.ActiveDirectory.ActiveDirectoryOperationException: Current security context is not associated with an Active Directory domain or forest.
   at System.DirectoryServices.ActiveDirectory.DirectoryContext.GetLoggedOnDomain()
   at System.DirectoryServices.ActiveDirectory.DirectoryContext.IsContextValid(DirectoryContext context, DirectoryContextType contextType)
   at System.DirectoryServices.ActiveDirectory.DirectoryContext.isDomain()
   at System.DirectoryServices.ActiveDirectory.Domain.GetDomain(DirectoryContext context)
   at Microsoft.ConfigurationManagement.AdminConsole.ActiveDirectory.Utils.TryParseSiteServerDomain(String domainName, String& ldapPath)
   at Microsoft.ConfigurationManagement.AdminConsole.ActiveDirectory.DiscoveryPageControl.ListViewItemAdd()
   at System.Windows.Forms.Control.OnClick(EventArgs e)
   at System.Windows.Forms.Button.OnMouseUp(MouseEventArgs mevent)
   at System.Windows.Forms.Control.WmMouseUp(Message& m, MouseButtons button, Int32 clicks)
   at System.Windows.Forms.Control.WndProc(Message& m)
   at System.Windows.Forms.ButtonBase.WndProc(Message& m)
   at System.Windows.Forms.Button.WndProc(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

 

Any help would be much appreciated,

 

Thanks

 

Paul


How to delete component server role or change the storage object path ?

$
0
0

The only site that we have in our infrastructure uses sql cluster for the database. The two nodes of the cluster, Server1 and Server 2, has three  roles specifie, which are Component server, site system and site database server.

Last night the site system status changed critical for "ConfigMgr component server" role on Server 2. This is the status message I see constantly

"SMS Site System Status Summarizer still cannot access storage object "\\server2\D$\SMS_ServerName on site system "\\server2".

After investigation I found out that the D$ was removed by another team from that node\server of the sql cluster.  There are constant error messages because of this and the site system status remains "criticial".

How can i change the storage object for this server from "\\Server1\D$\SMS_ServerName" to C$ ? If this is not possible can I delete the component server role and add it back again ? However when I right click I dont see a delete option for the server role.

Tried this: http://social.technet.microsoft.com/Forums/en-US/configmgrgeneral/thread/ec99a141-bede-4922-a9e9-e6605b1a7dab

but since I have only three roles , component server. site system and site database server, for this server I cannot change any value as mentioned in the thread. What are my options here ?

 

 

 

 

ConfigMgr 2007 and disabling SSLv3

$
0
0

A customer is looking into disabling SSLv3 in Internet Explorer and Windows

itself (both server and client) for their ConfigMgr 2007 environment, according to:

Microsoft Security Advisory 3009008,

Vulnerability in SSL 3.0 Could Allow Information Disclosure,

https://technet.microsoft.com/en-us/library/security/3009008.aspx.

Does anyone have any history/insight on customers who have also implemented this action and

what functionality has been affected in SCCM on both servers and clients?

Thanks,

William Lee

SCCM 2007 Distribution Point on Windows Server 2012 R2

$
0
0

Hi ,

Below are the details of my SCCM Environment.

  • SCCM 2007 - SP2 - R2
  • SQL 2008 - SP2 - R2
  • Installed on : WIndows Server 2008 R2

My client is performing a hardware refresh by taking out all windows 2003 servers and replacing withWindows server 2012 R2.

Question: Can i configure a SCCM 2007 standard distribution point on Windows Server 2012 R2 machine ?

I went through the below link to confirm, It says SCCM 2007 SP2 DP cannot be configured on Server 2012 but didnt mention

about Server 2012 R2.

https://technet.microsoft.com/en-us/library/ee344146.aspx 

Please clarify.

Thank You

Suhel


The Lightning Khan

System Center Configuration Manager (SCCM) Linux Client Certificate Renewal

$
0
0

Does the RHEL SCCM client certificate that is installed for client authentication get automatically renewed by the client/server when it nears expiration or does someone have to manually update it using he certutil tool on the RHEL platform? TechNet documentation talks only about initial installation of the certificate and then using the certutil tool to manage certificate thereafter, it does not discuss renewal in the certificate management section.

We are trying to understand whether client certificate management of our SCCM clients requires operator interaction and out of band certificate provisioning or whether the client software itself (in coordination with the server and NDES) will take care of this.



The Background Intelligent Transfer Service service terminated with service-specific error 2147500037 (0x80004005)

$
0
0

I just go done installing SCCM on a new Windows 2003 server and I;m getting the following errors upon boot.

 

The Background Intelligent Transfer Service service terminated with service-specific error 2147500037 (0x80004005).

The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

 

These error are followed by two successfully message indicating the BITS has started.

 

The Background Intelligent Transfer Service service was successfully sent a start control.

The Background Intelligent Transfer Service service entered the running state.

 

I tried to uninstall and reinstall BITS but that didn't help and the terminal services service is NOT disabled.

Thank you

Viewing all 443 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>