Workgroup Client Installation & configuration in SCCM 2012

Hi,
i have an internal domain named ECC-OCT.local which has internal IP 10.0.8.45 and SCCM server IP 10.0.8.47.
i have been installed SCCM Client Agent on a workgroup server manually but the site code not approved
(why ?).
Keep in mind that the DNS for the workgroup server was my public DNS Server which configured to hold secondary zone
for internal domain ECC-OCT.local.
If i assigned the 3rd dns server (on network card configuration) to ip 10.0.8.45 , the site code retrieved successfully.
what can i do to solve this issue?

Hi,
Based on your description, I recommend you check the MP record in DNS:
The SRV record must has been registered in DNS.
SRV record is published in DNS
Also, you can edit the LMHOSTS and HOSTS files on each client for the site code retrieve.
Managing System Center Configuration Manager clients in a workgroup
http://blogs.technet.com/b/configurationmgr/archive/2010/03/01/managing-system-center-configuration-manager-clients-in-a-workgroup.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Sccm 2012 https workgroup client installation error

Hello everyone,
i got a problem workgroup client installation with PKI.
My SCCM 2012 SP1 hierarchy is:
sccm1.izmir.local = Primary Site Server, FSP, MP, SUP
sccm2.izmir.local = MP,DP (internet FQDN is sccmextmp2.izmir.com)
sccm3.izmir.local = MP,DP, Enrollment Point, Enrollment Proxy Point
sccm4.izmir.local = Reporting Service Point, Application Catalog Web Service Point and Applicaiton Catalog Web Site Point
All MP's and DP's IIS configured with Certificate and client has got certificate too.
i'm using this parameters for installing workgroup client with PKI:
ccmsetup.exe /source:D:\Client /UsePKICert /NoCRLCheck CCMHOSTNAME=sccmextmp2.izmir.com SMSSIGNCERT=D:\Client\sccm1.cert SMSSITECODE=TCP FSP=sccm1.izmir.local CCMALWAYSINF=1 CCMFIRSTCERT=1
and my error is in the ccmsetup.log:
<![LOG[MSI: Action 11:56:36: SmsSetClientConfig. Applies the configuration placed by SmsSetClientConfigInit and configures client framework.]LOG]!><time="11:56:36.673-120" date="02-11-2013" component="ccmsetup" context=""
type="0" thread="5604" file="msiutil.cpp:314">
<![LOG[MSI: Setup failed due to unexpected circumstances
The error code is 80070002]LOG]!><time="11:56:36.719-120" date="02-11-2013" component="ccmsetup" context="" type="3" thread="5604" file="msiutil.cpp:300">
<![LOG[MSI: Action 11:56:36: Rollback. Rolling back action:]LOG]!><time="11:56:36.907-120" date="02-11-2013" component="ccmsetup" context="" type="0" thread="5604" file="msiutil.cpp:314">
<![LOG[File C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi installation failed. Error text: ExitCode: 1603
Action: SmsSetClientConfig.
ErrorMessages:
Setup failed due to unexpected circumstances
The error code is 80070002
]LOG]!><time="11:56:49.886-120" date="02-11-2013" component="ccmsetup" context="" type="3" thread="5604" file="msiutil.cpp:872">
<![LOG[Next retry in 120 minute(s)...]LOG]!><time="11:56:49.948-120" date="02-11-2013" component="ccmsetup" context="" type="0" thread="5604" file="ccmsetup.cpp:8498">
You got any idea?
thanks..
MCT

Hi;
yes i'm using last version of SP1 and applied that hotfix.
By the way i fixed the problem but now i got anothers:) Now i have no errorst in ccmsetup.log. Client agent installed but in Configuration Manager Agent Client certificate:None and Connection Type: Unknown
CertificateMaintenance.log
MCT

Client Push Not Working SCCM 2012

I am new to SCCM and have a test rig SCCM 2012 for testing, problem is the client push fails every time and I am at a loss to explain why. I have tried removing and reading the DP, FSP and MP roles (Both these are on the SCCM core server) I have run IIS
reset, removed all AD configured Boundaries and Groups in favor of IP range but I keep getting the same errors. Any advice here would be greatly appreciated... Below is this mornings logs highlighting the failure.
<![LOG[==========[ ccmsetup started in process 5764 ]==========]LOG]!><time="11:31:48.304-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="ccmsetup.cpp:9437">
<![LOG[Running on platform X64]LOG]!><time="11:31:48.305-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="util.cpp:1837">
<![LOG[Updated security on object C:\Windows\ccmsetup\cache\.]LOG]!><time="11:31:48.305-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="7628" file="ccmsetup.cpp:9281">
<![LOG[Launch from folder C:\Windows\ccmsetup\]LOG]!><time="11:31:48.306-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="ccmsetup.cpp:721">
<![LOG[CcmSetup version: 5.0.7958.1000]LOG]!><time="11:31:48.306-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="ccmsetup.cpp:727">
<![LOG[In ServiceMain]LOG]!><time="11:31:48.308-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:3365">
<![LOG[Running on 'Microsoft Windows Server 2012 Standard' (6.2.9200). Service Pack (0.0). SuiteMask = 272. Product Type = 18]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="util.cpp:1919">
<![LOG[Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="ccmsetup.cpp:3590">
<![LOG[Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context=""
type="1" thread="6436" file="ccmsetup.cpp:3775">
<![LOG[Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:3776">
<![LOG[SslState value: 224]LOG]!><time="11:31:48.368-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:4425">
<![LOG[CCMHTTPPORT: 80]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8617">
<![LOG[CCMHTTPSPORT: 443]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8632">
<![LOG[CCMHTTPSSTATE: 224]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8650">
<![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8668">
<![LOG[FSP: VKYV-HV01]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8720">
<![LOG[CCMFIRSTCERT: 1]LOG]!><time="11:31:48.370-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8778">
<![LOG[Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcf]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4539">
<![LOG[Retry time: 10 minute(s)]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4540">
<![LOG[MSI log file: C:\Windows\ccmsetup\Logs\client.msi.log]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4541">
<![LOG[MSI properties: INSTALL="ALL" SMSSITECODE="VSI" FSP="VKYV-HV01" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="224" CCMFIRSTCERT="1"]LOG]!><time="11:31:48.371-120"
date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4542">
<![LOG[Source List:]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4550">
<![LOG[ \\VKYV-HV01.VKYV.LAN\SMSClient]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4557">
<![LOG[ \\VKYV-HV01.VKYV.LAN\SMSClient]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4566">
<![LOG[MPs:]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4569">
<![LOG[ VKYV-HV01.VKYV.LAN]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4584">
<![LOG[No version of the client is currently detected.]LOG]!><time="11:31:48.374-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2748">
<![LOG[Updated security on object C:\Windows\ccmsetup\.]LOG]!><time="11:31:48.750-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:9281">
<![LOG[Sending Fallback Status Point message to 'VKYV-HV01', STATEID='100'.]LOG]!><time="11:31:48.750-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:9756">
<![LOG[Failed to get client version for sending messages to FSP. Error 0x8004100e]LOG]!><time="11:31:48.752-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436" file="ccmsetup.cpp:9838">
<![LOG[Params to send FSP message '5.0.7958.1000 Deployment ']LOG]!><time="11:31:48.752-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:9887">
<![LOG[State message with TopicType 800 and TopicId {037AE2A1-3C8B-482A-A180-04392D0312BA} has been sent to the FSP]LOG]!><time="11:31:49.020-120" date="01-12-2014" component="FSPStateMessage" context="" type="1"
thread="6436" file="fsputillib.cpp:752">
<![LOG[Running as user "SYSTEM"]LOG]!><time="11:31:49.058-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:1995">
<![LOG[Detected 44815 MB free disk space on system drive.]LOG]!><time="11:31:49.059-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="util.cpp:628">
<![LOG[Checking Write Filter Status.]LOG]!><time="11:31:49.059-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2024">
<![LOG[This is not a supported write filter device. We are not in a write filter maintenance mode.]LOG]!><time="11:31:49.059-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:2051">
<![LOG[Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=VSI))']LOG]!><time="11:31:49.179-120" date="01-12-2014" component="ccmsetup" context="" type="0"
thread="6436" file="lsad.cpp:656">
<![LOG[OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>224</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers></CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>VSI</RootSiteCode><CCM>
<CommandLine>SMSSITECODE=VSI FSP=VKYV-HV01</CommandLine> </CCM><FSP> <FSPServer>VKYV-HV01.VKYV.LAN</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0"
/></Capabilities><Domain Value="VKYV.LAN" /><Forest Value="VKYV.LAN" /></ClientOperationalSettings>']LOG]!><time="11:31:49.228-120" date="01-12-2014" component="ccmsetup" context=""
type="0" thread="6436" file="lsadcache.cpp:236">
<![LOG[Unable to open Registry key Software\Microsoft\CCM. Return Code [80070002]. Client HTTPS state is Unknown.]LOG]!><time="11:31:49.229-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="ccmutillib.cpp:373">
<![LOG[The MP name retrieved is 'VKYV-HV01.VKYV.LAN' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>']LOG]!><time="11:31:49.229-120"
date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="lsadcache.cpp:334">
<![LOG[MP 'VKYV-HV01.VKYV.LAN' is compatible]LOG]!><time="11:31:49.229-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="lsadcache.cpp:339">
<![LOG[Retrieved 1 MP records from AD for site 'VSI']LOG]!><time="11:31:49.229-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="lsadcache.cpp:287">
<![LOG[Retrived site version '5.00.7958.1000' from AD for site 'VSI']LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="siteinfo.cpp:575">
<![LOG[SiteCode: VSI]LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2076">
<![LOG[SiteVersion: 5.00.7958.1000]LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2077">
<![LOG[Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again.]LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="ccmsetup.cpp:2111">
<![LOG[Only one MP VKYV-HV01.VKYV.LAN is specified. Use it.]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:10080">
<![LOG[Searching for DP locations from MP(s)...]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:11018">
<![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="LocationServices" context="" type="1" thread="6436" file="lsad.cpp:770">
<![LOG[Local Machine is joined to an AD domain]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="lsad.cpp:714">
<![LOG[Current AD forest name is VKYV.LAN, domain name is VKYV.LAN]LOG]!><time="11:31:49.235-120" date="01-12-2014" component="LocationServices" context="" type="1" thread="6436" file="lsad.cpp:842">
<![LOG[DhcpGetOriginalSubnetMask entry point is supported.]LOG]!><time="11:31:49.237-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="ccmiputil.cpp:117">
<![LOG[Begin checking Alternate Network Configuration]LOG]!><time="11:31:49.237-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="ccmiputil.cpp:1095">
<![LOG[Finished checking Alternate Network Configuration]LOG]!><time="11:31:49.239-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="ccmiputil.cpp:1172">
<![LOG[Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="VSI"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0"
UseInternetDP="0">
<ADSite Name="Default-First-Site-Name"/>
<Forest Name="VKYV.LAN"/>
<Domain Name="VKYV.LAN"/>
<IPAddresses>
<IPAddress SubnetAddress="10.6.2.0" Address="10.6.2.2"/>
</IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
']LOG]!><time="11:31:49.256-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="siteinfo.cpp:96">
<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{CC48E819-7755-4650-83AC-8BC823C06C8C}</ID><SourceHost>VKYV-HV01</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:VKYV-HV01:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>VKYV-HV01.VKYV.LAN</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-01-12T09:31:49Z</SentTime><Body
Type="ByteRange" Offset="0" Length="1096"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="11:31:49.256-120" date="01-12-2014"
component="ccmsetup" context="" type="0" thread="6436" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'HTTP://VKYV-HV01.VKYV.LAN/ccm_system/request']LOG]!><time="11:31:49.257-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="httphelper.cpp:807">
<![LOG[Failed to receive ccm message response. Status code = 403]LOG]!><time="11:31:49.434-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436" file="httphelper.cpp:1694">
<![LOG[GetDPLocations failed with error 0x80004005]LOG]!><time="11:31:49.435-120" date="01-12-2014" component="ccmsetup" context="" type="3" thread="6436" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'VKYV-HV01.VKYV.LAN'. Error 0x80004005]LOG]!><time="11:31:49.435-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436"
file="ccmsetup.cpp:11261">
<![LOG[Sending Fallback Status Point message to 'VKYV-HV01', STATEID='101'.]LOG]!><time="11:31:49.435-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:9756">
<![LOG[Failed to get client version for sending messages to FSP. Error 0x8004100e]LOG]!><time="11:31:49.437-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436" file="ccmsetup.cpp:9838">
<![LOG[Params to send FSP message '5.0.7958.1000 Deployment ']LOG]!><time="11:31:49.437-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:9887">
<![LOG[State message with TopicType 800 and TopicId {1D445639-95B1-4EC5-A65F-FC7A721F8061} has been sent to the FSP]LOG]!><time="11:31:49.455-120" date="01-12-2014" component="FSPStateMessage" context="" type="1"
thread="6436" file="fsputillib.cpp:752">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="11:31:49.455-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:8835">

Does you MP/DP use HTTP or HTTPS? I recommend to start with HTTP and when you have successfully installed a few clients, you can switch to HTTPS if desired. HTTPS based communication requires more steps e.g. client certificates.
Have you extended AD schema and do you see objects in \System\System Management container in AD?
Also, you might have DNS name resolution problem or the firewall is blocking the traffic from the client to MP.
The client is having troubles to successfully talk with MP:
Failed to get DP locations as the expected version from MP 'VKYV-HV01.VKYV.LAN'. Error 0x80004005
Panu

New SCCM 2012 client machines still getting SCCM 2012 SP1 client not the new SCCM 2012 SP1 CU3 client

Hi,
I've successfully (as far as I can tell) deployed SCCM 2012 SP1 CU3 and all my existing clients are showing a client version of 5.00.7804.1400. But when I setup a new client system recently I noticed that the client version was showing 5.00.7804.1000,
and not 5.00.7804.1400.
For new client systems, do I need to redeploy the packages that were created for SCCM 2012 SP1 CU3 so that the new systems get the new SCCM 2012 SP1 CU3 client?
Thanks,
Nick

Hi,
Here's some good information to look over:
http://sccmfaq.wordpress.com/2013/09/24/sccm-2012-include-cu-in-osd/
I haven't followed these instructions myself, since I haven't really had any good reason to include CUs during the initial installation process. I use this method instead and I've never run into any problems:
http://www.ronnipedersen.com/2013/06/installing-sccm-2012-sp1-cu2-quick-start-guide/
Don't retire TechNet! -
(Don't give up yet - 12,575+ strong and growing)

SQL Server 2012 deployment with System Center Configuration Manager (SCCM) 2012

hi,
we have tried to deploy the SQL Server 2012 to our development machines with SCCM 2012 without success.
Commandline parameters or Configuration.ini in either case the installation failed without any useful errorlog.
Exists any howto which covers this scenario?
regards
genne

Hello,
Please see the following article about some requirements for SQL Server instances intended for SCCM 2012:
http://www.sqlcoffee.com/Tips0019.htm
Could please check to see if a Summary.txt log file exists after those installation attempts? The following article may help you locate the file on disk:
http://technet.microsoft.com/en-us/library/ms143702(v=sql.110)
Please share this log file with us, if possible.
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Exchange configuration in SCCM 2012

Hi All,
I was configuring Exchange server connectors on SCCM 2012 SP1 & our organization is using office 365 as exchange so, how do we configure this.
There are options for on premise exchange server & hosted exchange server where should i put this.
Thanks,
Pranay.

Thanks Jorgen, the post was great.
Configured the settings as per the link but got this error in Easdisc.log
ERROR: Failed to initialize managed com instance. Error = Unknown error 0x80131501, -2146233087~ $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:26:21.516-330><thread=3472 (0xD90)>
INFO: End to process for discovery https://outlook.com/PowerShell-LiveID. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:26:21.516-330><thread=3472 (0xD90)>
INFO: CRC for SCF not changed. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:26:21.771-330><thread=7388 (0x1CDC)>
INFO: Raise Exchange Connector connection failure alert. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:26:21.817-330><thread=7388 (0x1CDC)>
INFO: CRC for SCF not changed. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:26:22.082-330><thread=7388 (0x1CDC)>
INFO: Waiting 3600 seconds for SCF update notification... $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:26:22.082-330><thread=7388 (0x1CDC)>
INFO: Start to process wipe/policy https://outlook.com/PowerShell-LiveID. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:24.767-330><thread=6924 (0x1B0C)>
INFO: [MANAGED] Initialize: ExchangeServer https://outlook.com/PowerShell-LiveID, Account (Admin Account Email id), VerboseLog 0~~ $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:27.780-330><thread=6924 (0x1B0C)>
ERROR: [MANAGED] Failed to open Runspace. Exception: System.Management.Automation.Remoting.PSRemotingTransportException: Connecting to remote server failed with the following error message : The WinRM client received an HTTP status code of 301 from the remote
WS-Management service. For more information, see the about_Remote_Troubleshooting Help topic.~~ at System.Management.Automation.Runspaces.AsyncResult.EndInvoke()~~ at System.Management.Automation.Runspaces.Internal.RunspacePoolInternal.EndOpen(IAsyncResult
asyncResult)~~ at System.Management.Automation.Runspaces.RunspacePool.Open()~~ at System.Management.Automation.RemoteRunspace.Open()~~ at Microsoft.ConfigurationManager.ExchangeConnector.ExchangeRunspace.InitRunspace()~~
$$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:31.656-330><thread=6924 (0x1B0C)>
ERROR: Failed to call Initialize of managed COM. error = Unknown error 0x80131501~ $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:31.657-330><thread=6924 (0x1B0C)>
INFO: Raise Exchange Connector connection failure alert. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:31.765-330><thread=6924 (0x1B0C)>
ERROR: Failed to initialize managed com instance. Error = Unknown error 0x80131501, -2146233087~ $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:31.765-330><thread=6924 (0x1B0C)>
INFO: End to process wipe/policy https://outlook.com/PowerShell-LiveID. $$<SMS_EXCHANGE_CONNECTOR><10-07-2013 13:28:31.765-330><thread=6924 (0x1B0C)>
Thanks,
Pranay.

Boundaries configuration in SCCM 2012. Step-by-Step doc, link

Hello MS team,
I have a client that currently has one boundary configured in their SCCM 2007 environment that uses the Default_First-Site-Name.
This client needs to reconfigure this in SCCM 2007 as there should not be any overlapping Boundaries in SCCM 2007 and 2012.
Once all of the required boundaries are configured in the company and there are no overlapping boundaries in SCCM 2012 environment, they can then enable client
push to take advantage of this automated deployment method.
Can you please provide me with the steps for configure boundaries in SCCM and AD?
AD only has the default_First-Site-Name, therefore no multiple sites
Please, indicate step by step all the work and tasks required to be executed in AD and SCCM 2012
Franki

Boundaries are not conidered to be overlapping if they are in two seperate hierarchies.
Automatic lcient push won't work if the 2007 client is already installed.
You don't have to set anything up in AD. Just use ip ranges.
John Marcum | Microsoft MVP - Enterprise Client Management
My blog: System Center Admin | Twitter:
@SCCM_Marcum | Linkedin:
John Marcum

Applocker with Windows Installer rules and SCCM 2012

Hi,
We have been running Applocker since two years on Windows 7 Enterprise clients with SCCM 2007 as management and distribution tool.
This setup was working fine until we migrated to SCCM 2012 and started to encounter problems with msi-packages not being able to self-heal when the source was the sccm client cache.
We have recreated this scenario in a lab environment.
Our setup is this:
Windows 2008 R2 (DC)
Windows 7 Enterprise SP1 (Client)
Standard user (not admin)
SCCM 2012 R2 (upgraded from 2007)
Applocker with these rules:
Executable Default rules enabled (Enforced)
Windows Installer Default rules enabled (Enforced)
Exception for %WINDIR% (where SCCM cache is located)
Script Default Rules enabled (Enforced)
Application msi-package with self-heal (omus) and advertised shortcuts
We install the application from the sccm cache (%windir%\ccmcache) and then trigger a self-heal (user components being copied to the user profile).
What we see on the client is: Error 1718. File C:\Windows\ccmcache\54\application.msi was rejected by digital signature policy.
Event log is showing: Event 1008: The installation of
C:\Windows\ccmcache\54\application.msi
is not permitted due to an error in software restriction policy processing. The object cannot be trusted.
It looks like the file cannot be evaluated by Applocker and therefore is not trusted. We get an Access Denied error when testing AppLocker-policy with the following PS-command,
Get-AppLockerPolicy -Effective | Test-AppLockerPolicy -Path C:\Windows\ccmcache\54\application.msi. This command works fine when accessing files in the cache-folder on a SCCM2007-client.
For testing purposes we recreated a similar folder structure: C:\Windows\Folder1\Folder2\application.msi where the user has no permissions on Folder2 and read on the other folders and the File.msi.
This is how the permissions look like in SCCM 2012 (no user permissions on %Windir%\ccmcache). Applocker cannot evaluate the trust-level of application.msi.
The GPO setting “Bypass traverse checking” is set to everyone.
As we can see, the permissions are the same on SCCM 2007 client cache (%Windir%\syswow64\ccm\cache) but we do not have this issue there.
Has anyone got Applocker (with windows installer rules actived) to work with SCCM 2012 and windows installer self-heal?

More info. I found some people also encounter this same issue, but specific msi, take a look at
http://social.technet.microsoft.com/Forums/windowsserver/en-US/2ad92754-f01e-410e-97db-7a9bc81586db/msiinstaller-event-1008-when-trying-to-install-3ds-max-2011-after-group-policies-apply-on-domain?forum=winserverGP
Juke Chou
TechNet Community Support

Compliance evaluation cycle in not running as configured in SCCM 2012 R2

Hi,
We want to test compliance setting feature in SCCM 2012 R2. We have enable compliance setting in client setting with every 1 hour of evaluation cycle.
We have configure compliance baseline to check registry key.
Compliance baseline is configured to evaluate every 1 hour, but observed that clients are not evaluating as configured. Tried to running Machine policy evaluation cycle at client side but still not getting result.
So please help to understand why not clients are evaluating compliance evaluation cycle every 1 hour or let me know how to force client to evaluate the compliance cycle.
Also it observed that some clients are evaluating the compliance cycle but not as configured.

As I mentioned above I have configure baseline to check registry key at client side, If it is 1 then show it as compliant.
If you configured a simple schedule of every 1 hour, that means each client will run the baseline every hour but exactly
when will be determined by each client individually so there will be no set time when they run. Can you please elaborate this?
What will be the best compliance evaluation cycle we can set to give desired result?

How to convert Unmanaged SCEP clients to Managed in SCCM 2012 SP1

We recently started installing SCEP clients from the .exe and a preconfigured .xml file to client machines in a domain setting. This was done from a USB drive, going from machine to machine, with a .bat file.
This was a stop-gap until we were able to install and configure SCCM 2012 SP1.
PCs that already had the SCEP client (prior to SCCM coming into production) are showing up as unmanaged. PCs that have had SCCM install SCEP all are listed as managed.
I've searched, but have yet to find a definitive answer as to how get the manually installed SCEP clients to register as managed in SCCM.
AD Domain with WIN 2008 R2 DC, SQL 2012 Standard, SCCM 2012 SP1

Also, make sure the Endpoint Protection Point is installed properly on SCCM and the Client Setting for SCEP is enabled.
Juke Chou
TechNet Community Support

Thin Client reporting issues since SCCM 2012 R2 CU3 upgrade.

Please forgive me, I'm a SCCM newbie. I'm having an issue with my Thin Clients reporting back to SCCM since I upgraded to 2012 R2 CU3.
The only pertinent thing I find in any log is "RegTask: Failed to get registration state. Error: 0x8009000b" "GetRegistrationState failed (0x8009000b)" in the ClientIDManagerStartup.log
If anybody has any tips, I would be more than appreciative.

I have not run into this before, but have you validated that your management point is healthy?
This thread has a couple things to try as well:
https://social.technet.microsoft.com/Forums/en-US/0d2e369d-cd93-4145-8db3-e9943c99a4ae/client-property-set-to-no-application-deployment-not-working-issue-with-registering-to-mp?forum=configmanagergeneral
Jeff

NETWORK PRINTER INVENTORY IN SYSTEM CENTRE CONFIGURATION MANAGER (SCCM 2012).

SCCM HW inventory agent runs as the ‘SYSTEM’ and cannot see the end-users network drives and printers. The following two step process will help circumvent the above stated limitation.
1) CREATE HKEY_LOCAL_MACHINE\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS PATH IN THE REGISTRY.
Create a SCCM package.
The package should run as administrator.
The package should run whether or not a user is logged on.
POWERSHELL PACKAGE 1 (Prerequisite):
if (!(Test-Path HKLM:\SOFTWARE\SCCMINVENTORY)) {new-item HKLM:\SOFTWARE\SCCMINVENTORY -ErrorAction SilentlyContinue}
$perm = get-acl HKLM:\SOFTWARE\SCCMINVENTORY -ErrorAction SilentlyContinue
$rule = New-Object System.Security.AccessControl.RegistryAccessRule("Authenticated Users","FullControl", "ContainerInherit, ObjectInherit", "InheritOnly", "Allow") -ErrorAction SilentlyContinue
$perm.SetAccessRule($rule)
Set-Acl -Path HKLM:\SOFTWARE\SCCMINVENTORY $perm -ErrorAction SilentlyContinue
if (!(Test-Path HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS)) {new-item HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS -ErrorAction SilentlyContinue}
SAVE POWERSHELL FILE AS: PrinterInvRegSetup.ps1
SETUP THE SCCM PACKAGE/PROGRAM WITH COMMAND LINE:
%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\PowerShell.exe -NonInteractive -WindowStyle Hidden -noprofile -ExecutionPolicy Bypass -file .\PrinterInvRegSetup.ps1
2) CAPTURE CURRENT USER’S PRINTERS AND WRITE THOSE ENTRIES TO THE ABOVE CREATED REGISTRY KEYS.
Create a SCCM package
The package should be run only when a user is logged in.
POWERSHELL PACKAGE 2 (Main):
$printers = Get-WMIObject -class Win32_Printer -ErrorAction SilentlyContinue|select-Object -Property ServerName,ShareName,Location,DriverName,PrintProcessor,PortName,Local |Where-Object {$_.Local -ne $true}-ErrorAction SilentlyContinue
ForEach($printer in $printers){
$PServerName= $printer.ServerName -replace ('\\','')
$PShareName = $printer.ShareName
$PLocation = $printer.Location
$PDriverName = $printer.DriverName
$PPrintProcessor = $printer.PrintProcessor
$PPortName = $printer.PortName
if ((Test-Path HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS)) {
if ((Test-Path "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName")) {
Remove-item "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Force -ErrorAction SilentlyContinue
New-item "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "PrintServer" -Value $PServerName -PropertyType "String" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "PrinterQueue" -Value $PShareName -PropertyType "String" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "PrinterLocation" -Value $PLocation -PropertyType "String" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "PrinterDriver" -Value $PDriverName -PropertyType "String" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "PrintProcessor" -Value $PPrintProcessor -PropertyType "String" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "PrinterPortName" -Value $PPortName -PropertyType "String" -ErrorAction SilentlyContinue
New-ItemProperty "HKLM:\SOFTWARE\SCCMINVENTORY\NETWORKPRINTERS\$PShareName on $PServerName" -Name "DateInventoried" -Value $(get-date) -PropertyType "String" -ErrorAction SilentlyContinue
SAVE POWERSHELL FILE AS: NetworkPrinterInventory.ps1
SETUP THE SCCM PACKAGE/PROGRAM WITH COMMAND LINE:
%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\PowerShell.exe -NonInteractive -WindowStyle Hidden -noprofile -ExecutionPolicy Bypass -file .\NetworkPrinterInventory.ps1
3) CREATE A DEPLOYMENT AND SET IT TO ‘RUN ALWAYS’ AND MAKE IT A REQUIREMENT.
Now deploy the second package and set the first package as a prerequisite (Check the box – Always run the prerequisite package)
The deployment should be set to run every 4 hours and ‘Always rerun’. Mark the deployment as required.
4) ADD THE FOLLOWING IN BETWEEN THE EXTENSION SECTION WITHIN YOUR CONFIGURATION.MOF.
//========================
// Added extensions Start
//========================
#pragma namespace ("\\\\.\\root\\cimv2")
#pragma deleteclass("NETWORKPRINTERS", NOFAIL)
[dynamic, provider("RegProv"), ClassContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\SCCMINVENTORY\\NETWORKPRINTERS")]
Class NETWORKPRINTERS
[key] string KeyName;
[PropertyContext("PrintServer")] String PrintServer;
[PropertyContext("PrinterQueue")] String PrinterQueue;
[PropertyContext("PrinterLocation")] String PrinterLocation;
[PropertyContext("PrinterDriver")] String PrinterDriver;
[PropertyContext("PrintProcessor")] String PrintProcessor;
[PropertyContext("PrinterPortName")] String PrinterPortName;
[PropertyContext("DateInventoried")] String DateInventoried;
//========================
// Added extensions end
//========================
5) SAVE THE BELOW DATA INTO A FILE CALLED ‘AWESOME.MOF’.
#pragma namespace (“\\\\.\\root\\cimv2\\SMS”)
#pragma deleteclass(“NETWORKPRINTERS”, NOFAIL)
[SMS_Report(TRUE),SMS_Group_Name("NETWORKPRINTERS"),SMS_Class_ID("NETWORKPRINTERS")]
Class NETWORKPRINTERS: SMS_Class_Template
[SMS_Report(TRUE),key] string KeyName;
[SMS_Report(TRUE)] String PrintServer;
[SMS_Report(TRUE)] String PrinterQueue;
[SMS_Report(TRUE)] String PrinterLocation;
[SMS_Report(TRUE)] String PrinterDriver;
[SMS_Report(TRUE)] String PrintProcessor;
[SMS_Report(TRUE)] String PrinterPortName;
[SMS_Report(TRUE)] String DateInventoried;
6) IMPORT ‘AWESOME.MOF’ INTO SCCM DEFAULT CLIENT SETTINGS.
Either import the above MOF file into the Client Setting/Default Client Settings/Hardware Inventory/Classes/Import. Select the option to import every thing.
Alternatively, if you have compiled the MOF manually on the PC, Add a new reporting class by clicking the ‘Add’ button and connecting to the PC and selecting the WMI class ‘NETWORKPRINTERS‘
and that is it. The SCCM resource explorer should soon see the Network Printers.
Now, this is a convoluted process but this is the only way I can inventory Network printers. Any ideas or suggestions?

All the other ways are similar because this is a per-user setting.
http://blogs.technet.com/b/breben/archive/2013/08/26/inventory-mapped-drives-in-configmgr-2012.aspx
Juke Chou
TechNet Community Support

Updating Client Computers drivers using SCCM 2012

Hey guys,
Trying to update 80 odd laptops with new network driver.
i don't know why configuration baseline keeps popping into my head but i want to check to make sure there is no other way.
much appriciated

There's nothing built into ConfigMgr to perform driver installation or updates on existing managed systems. Thus, you need to do what Nash suggested or alternatively you could use dpinst, pnputil, or devcon:
http://social.technet.microsoft.com/wiki/contents/articles/181.how-to-manage-device-drivers-with-command-line.aspx
Jason | http://blog.configmgrftw.com | @jasonsandys

HFM client installation & configuration

Hi,
I'm trying to access our HFM server from my local client. But I'm experiencing some difficulties...
1. I don't exactly know what products should I have installed (I have installed only HFM client and FR client)
2. How to configure HFM client to connect to our server?
I have successfully connected to the server from FR studio. But HFM isn't working...
Could anybody tell me what to do?
Thanks!
Vlado

Hi,
You have to start the server and web configuration of HFM. If you only have instralled the cliient then you should see only one tab.
enter the servername (FQDN or ip.nr) of your hfm server in the first box. Choose use automatic load balancing (or single server only if you want to connect to one server). But this is more depending on the way you connect to reports in biplus.
Press Add cluster and the clustername of you hfm server should be available.
That should be all.
Kind Regards Peter

Installing and Managing SCCM 2012 R2 client in workgroup

Hi,
I'm trying to install sccm 2012 r2 client on a workgroup workstation, but i can't manage to put the client working.
Already tried this solutions
http://blogs.technet.com/b/anilm/archive/2012/05/06/managing-workgroup-clients-in-configuration-manager-2012.aspx
http://eskonr.com/2013/08/sccm-configmgr-2012-manage-workgroup-computers-for-deploymentremote-tools-etc/
if i use this commands to install the client the client don't install.
ccmsetup.exe /source:C:\client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=cm12lab.com
if i use this one same happens
Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX FSP=sccmserver DNSSUFFIX=dnssuffix
If i use this one the client gets installed and the site code assigned but nothing more. It shows at the sccm console, but don't receive informations from sccm i think
Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX SMSSLP=sccmserver DNSSUFFIX=dnssuffix
on the client, clicking in Site tab and configure settings, the site code is there, clicking in Find Site returns error saying that cant find the site. on the locationservices log i'm getting
Policy prevents failover to WINS for lookup
Unable to retrieve AD Site membership
No Location reply received from xxxxxx.domain.xxx
No location reply received from xxxxxx
thks in advance

It should work just by:
Copy the client files (the whole directory) to the workgroup computer (c:\tmp\Client)
Run ccmsetup.exe /source:c:\tmp\Client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=CM12LAB.COM
Examine %windir%\ccmsetup\logs\ccmsetup.log for more information if the client doesn't install at all, possible causes might be corrupted WMI, lack of BITS (if running Windows 2003 server).. in these cases you could run WMIDiag (http://www.microsoft.com/en-us/download/details.aspx?id=7684)
to get more info on the errors and how to fix them.
Couple of checks:
DNS is working correctly both ways? Workgroup machine can find ConfigMgr server and ConfigMgr server can find workgroup machine by name? You can test this by running
nslookup <target.fqdn> on both
Workgroup computer is in the boundary / boundary group that has a site server assigned

Workgroup Client Installation & configuration in SCCM 2012

Similar Messages

Maybe you are looking for