Assign the exsiting clients to Secondary site

Hi Guys,
I need some directions to following issues.
We have SCCM 2012 SP1, managing clients in 2 different countries.
We have primary site in country A and secondary site in country B.
Under country A we have 2000 clients in various locations and in country B we have 5000 clients across various locations.
The link between country A and B is very limited (8MB) link. So recently the link getting smashed because of most of the clients from country B are assigned to Primary site in country A. Also we have SUP installed only on the primary server, which means all
the clients were getting the updates Catalog through WAN.
So we have installed secondary SUP in country B, however most of the clients from country B still getting the updates from primary SUP.
Now, what we are trying to achieve is;
First, assign all the clients in country B to secondary site.
Second, switch the country B clients from primary SUP to secondary SUP.
So to switch the clients to secondary site, under the boundary groups -> references ->Site Assignment we have chosen to assigned site to Secondary site.
Now,
1, how can we assign the clients to a secondary site? How long will it take to show up in the location log? It has been 24 hours and still the client machines location log showing the primary site MP details. Is there any way we can force
this process to speed up?
2, when we assign the existing clients from Primary site to secondary site, will it reassign SUP to secondary site as well? If No, how can we force the existing clients to communicate with secondary SUP?
I know, the SUP switch will only be possible when the primary SUP is not available and after x times of re-tries the client will fall back to the secondary SUP. In our scenario we cannot make our primary SUP offline, if we do this then all the clients from
country A will get the Catalog from secondary site, which will cause the network issues. So Apart from this, is there any other way (Resetting ANY client policies, uninstalling and re-instilling client, any other settings we can do to re-check the SUP) to
switch to secondary SUP?
Any help/ideas will be much appreciated.

Is the management point at the secondary site published to active directory? The clients will try to query AD to find their local Management Point.
Clients search for a Management Point by using the below options in the order specified:
Management point
Active Directory
Domain Services
DNS
WINS
http://systemcenter.learnmsexchange.com/system-center/system-center-2012/sccm-2012/8-management-points-in-sccm-2012
If you haven't published the MP to AD for the secondary site there is a chance the clients just don't see it. The MP is installed on the same server as the secondary site, correct? What hardware are you running this secondary site on (cpu and ram)?

Similar Messages

Clients on secondary site cannot find the right site to connect

Hi, I have a primary site of SCCM 2012 R2, and a secondary site.
The Site code for the primary site is 'LPZ' and for the secondary site is 'SCZ', when I trying to install an SCCM client at the secondary site (in windows client or server) it is assigned only to the primary Site, and if you try to change the site
manually to correct the site assignment we receive this error message "Failed to update site assignment".
We have updated the AD and both the primary and secondary site are published into my AD, and the SCCM servers has the proper rights over the container.
Reviewing the installation logs I cant find any clue to help me to resolve this behaviour.
Raulito

Resident site is where the Client physically exists and this is determined by the boundary groups.
Assigned site is the Site to which client is assigned and this is LPZ in your case for all machines as you have just one Primary.
Following TechNet link explains this in detail:
https://technet.microsoft.com/en-us/library/gg682060.aspx
-RG

SCCM 2012 client bring the packge from sccm2007 secondary site?

Hi Team,
We are middle of Cm12 migration.
We have 1 primary server and 5 DP's in HQ. Also HQ client successfully migrated to CM12.
Problem is: When we are doing the migration one of the country office machines also migrated and it bring the package to HQ server. So netwotk slowness happen. In the country office we have sccm2007 secondary server available. It is possible can we do this
CM12 client communicate with local SCCM2007 secondary DP?
Thanks

More info:
Planning to Upgrade Configuration Manager 2007 Secondary Sites
http://technet.microsoft.com/en-us/library/gg712275.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Assign client to secondary site

When i configure client push in Secondary Site, what is the SMSSITECODE=...?
SMSSITECODE=PrimarySite
or
SMSSSICORE=Secondary
can someone explain me why?
Thanks!
Atenciosamente Julio Araujo

This post discusses this a bit:
http://blog.configmgrftw.com/secondary-sites-and-boundary-groups/
Jason | http://blog.configmgrftw.com | @jasonsandys

Clients in Secondary Sites

Hi all,
Reading the docs on CM12 it states that:
Secondary Sites can support up to 5000 clients
DPs can support up to 4000 clients
Secondary Sites can have up to 250 DPs
However, this confuses me.
Assuming clients use content boundaries, and not assignment boundaries, to know to use the MP in my Secondary, if I was to put 250 DPs under 1 Secondary Site, my DPs could support up to 1M clients connecting (250 DPs x 4000 clients) but the site server itself
could only support 5000? So I would have to have multiple boundaries for the Secondary, a max of 4000 clients in the boundary for my DP/MP of my Secondary site server and all other boundaries going to the 250 DPs?
Or do clients work out whether to use a Secondary Site MP a different way?
http://nikifoster.blogspot.com/

Hi Jason, apologies I used the above extreme example just to show a point. Why bother supporting 250 DPs under a Secondary site, if that Secondary site can only support 5000 clients? I guess there may be other reasons why you might
need to use many DPs though and you could also use the same argument with a Primary site.
The reason this came up is because currently I have an SCCM 2007 Primary site, which has 20,000 clients connecting to its 6 DPs for content. When we move to CM12, I was planning on changing it to a Secondary site with 5 or 6 DPs but if I do this, as
I understand it, that would mean that those 20,000 would use the DPs for content but also use the Secondary site MP. This would then bring it outside of support for Secondary sites.
So I suppose I have 3 options:
Use a Primary site in that location, with multiple DPs (not desired and won't happen)
Use a Secondary site with multiple DPs but separate out the Secondary site and its DPs into different boundary groups, ensuring the boundary group used by the SS has no more than 5000 clients (complex and probably won't happen). I'm not even sure if this
will work either.
Use multiple DPs (and/or pull DPs) from the higher level Primary site. This obviously means I can't control client policy data or client data that is uploaded. I guess I will have to use this.
Is that about right? Have I missed any other options?
Thanks
Nik
http://nikifoster.blogspot.com/

SCCM 2012 Clients at Secondary Site don't update and shows status as INACTIVE

I have 1 Primary site and 1 Secondary sites. I have setup Secondary site Boundaries using IP subnet. I see that the systems from secondary
site show in the console and they all have clients installed but however 60% of the system shows client activity as INACTIVE and not receiving any heartbeat DDR none of the system showing hardware inventory. I am not positive
where to look as far as logs are concerned. I think the clients aren't receiving policy like they should.
Just to give a brief idea, Secondary Site server crashed and we had to rebuild the server and re install secondary site after rebuilding all the
problem. Everything is working fine in Primary site.
Secondary site is communicating with primary site MP and DP
I have checked MPcontrol.log it shows status as OK
I am able to install client through console but yes when I check the configuration manager properties it shows CCM Notification Agent as DISSABLED
and in the Action Tab Machine and User policy are the only cycles showing.
Checked replmgr.log and rclctrl.log but it’s not showing any error
Only log file which shows error is bgdserver.log ( pasting log errors )
ERROR: SQL exception when retrieve client certificate from DB. Exception: The EXECUTE permission was denied on the object 'sp_GetPublicKeyForSMSID', database 'CM_PRI',
schema 'dbo'. -2146232060           SMS_NOTIFICATION_SERVER     05-07-2014 12:09:01               3968 (0x0F80)
ERROR: Can't do post authentication without client certificate stored in regsitration.            SMS_NOTIFICATION_SERVER
05-07-2014 12:09:01                3968 (0x0F80)
ERROR: Failed to authenticate with client [::ffff:10.5.55.88]:49623.        SMS_NOTIFICATION_SERVER     05-07-2014
12:09:01               3968 (0x0F80)
ERROR: SQL exception when retrieve client certificate from DB. Exception: The EXECUTE permission was denied on the object 'sp_GetPublicKeyForSMSID', database 'CM_PRI',
schema 'dbo'. -2146232060           SMS_NOTIFICATION_SERVER     05-07-2014 12:09:01               3968 (0x0F80)
ERROR: Can't do post authentication without client certificate stored in regsitration.            SMS_NOTIFICATION_SERVER
05-07-2014 12:09:01                3968 (0x0F80)
ERROR: Failed to authenticate with client [::ffff:10.5.62.68]:49923.        SMS_NOTIFICATION_SERVER     05-07-2014
12:09:01               3968 (0x0F80)
ERROR: SQL exception when retrieve client certificate from DB. Exception: The EXECUTE permission was denied on the object 'sp_GetPublicKeyForSMSID', database 'CM_PRI',
schema 'dbo'. -2146232060           SMS_NOTIFICATION_SERVER     05-07-2014 12:09:06               3968 (0x0F80)
ERROR: Can't verify signature in message without client certificate for client SCCM GUID:B47059B1-D4E4-41A2-BC88-486A597FE399
SMS_NOTIFICATION_SERVER     05-07-2014 12:09:06               3968 (0x0F80)
ERROR: Invalid hook to be decoded. Authentication                SMS_NOTIFICATION_SERVER
05-07-2014 12:09:06               3968 (0x0F80)
ERROR: Failed to decode message body (<BgbSignInMessage TimeStamp="2014-07-05T06:39:01Z"><ClientType>SCCM</ClientType><ClientVersion>5.00.7804.1000</ClientVersion><ClientID>GUID:B47059B1-D4E4-41A2-BC88-486A597FE399</ClientID></BgbSignInMessage>)
with message header
Help me resolve this issue as I am struggling to resolve this for almost 2 weeks.
Please let me know which logs are helpful and I'll try to add it to replies.

Hi,
Quote:"see that the systems from secondary site show in the console and they all have clients installed but however 60% of the system shows client activity as INACTIVE and not receiving any heartbeat DDR none of the system showing hardware inventory. "
So not all the clients show inactive? Have you checked the logs in an inactive client? Such as ClientIDManagerStartup.log.
Have you checked Secondary Site server's computer name from SQL logins? You could try to remove this account, wait a while, recreate the same computeraccount login with sysadmin access. (http://social.technet.microsoft.com/Forums/en-US/d5383c23-6b71-47cc-9fad-fda82a44a3aa/secondary-site-showing-inactive-clients?forum=configmanagerdeployment)
You could use Configuration Analyzer for System Center 2012 R2 to troubleshoot issues.
http://technet.microsoft.com/en-us/library/dn469435.aspx
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Client and Secondary Site

Hi dears
i have installed secondary site and create boundary based on IP range on secondary site. secondary and its parent join on the same domain.
when i see LocationService.log and client agent on control panel show MP of Primary site.
what shall i do?

Clients will reflect the site code and MP of their primary site so this should be OK. They will also show a resident MP (if I remember correctly) of the MP in the secondary site. Note that in 2007 you must add the MP to secondary site as it's not there
automatically.
Jason | http://blog.configmgrftw.com

Distributing the content directly to Secondary Site

We have a particular application that is being used at a only one of our sites with has Secondary site.(SS1)
Now my question is when i distribute the content do i always first need to distribute it to the Primary Site (PS1)or can i skip distributing it to Primary and directly distribute to secondary site SS1.
We have 1 Primary Site & 4 Secondary Sites along with few additional DPs.

can you please help me to understand how should i distribute the content give below is the case:
Primary Site @ UK
Secondary Site (along with DP role) @ Australia
Location of content Network share in Australia.
Now the application that i want to distribute is only used in Australia.
So after creating the application in SCCM how should i distribute the content
A) Only to Secondary Site
B) To Primary Site First & then to Secondary site...
If i use "A" the status keep on showing waiting for content for days. But if i use "B" it works perfectly fine without any hiccups.

Assign the Bookmark Tag from 1 site to another site which has none

The majority of the Web Sites which I've Bookmarked have Tags assign [assume they did it themselves]. But, a few of mine have none whatsoever. How can I use another site's Tag since they are similar in nature (i.e. Health, Exercise, Food, etc.)

Anton ~ iWeb stores everything in a Domain file, normally located in the ~/Library/Application Support/iWeb folder (although it can be moved). That's the file you need to transfer to your other Mac — not the published (HTML) files. See also NOTE 1 here:
http://iwebfaq.org/site/iWebTwocomputers.html
To open a site in iWeb, double-click its Domain file. See also this article:
_How do you manage multiple domain files for iWeb?_

SCCM 2012 Secondary site Client Communication for SUP

Hi,
We have an SCCM 2012 Setup and here is the design CAS-->Primary-->Secondary site servers.
SUP is configured for Secondary site too. Boundaries are defined with IP Address Range and is proper.
Some clients are comminicating to Secondary site for updates. Downloading successfully and installing the software.
But some of the clients are communicating to primary site for updates and retain with the status "Downloading update"
I have checked the locationservices.log and it is fluctuating between Primary and secondary MP.
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:35:59 AM 768 (0x0300)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
1 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
I have also checed "DataTransferService.log" and found more errors.
Error retrieving manifest (0x800704cf). Will attempt retry 7 in 1920 seconds. DataTransferService 4/5/2013 11:51:59 AM 5576 (0x15C8)
DTSJob {141CB5AE-8EF2-464D-8D8C-68B868EE7F7B} in state 'DownloadingManifest'. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Failed to send request to /SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4 at host xxxxxxxx.xxxxxxx.com, error 0x2efe DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
[CCMHTTP] ERROR: URL=https://xxxxxxxx.xxxxxxx.com:443/SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4, Port=443, Options=192, Code=12030, Text=ERROR_WINHTTP_CONNECTION_ERROR DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:0DA907D5-1709-4B10-B627-61E289FD7149";
DateTime = "20130405062159.643000+000";
HostName = "xxxxxxxx.xxxxxxx.com";
HRESULT = "0x80072efe";
ProcessID = 4260;
StatusCode = 600;
ThreadID = 4200;
DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Successfully sent location services HTTPS failure message. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Error sending DAV request. HTTP code 600, status '' DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
GetDirectoryList_HTTP mapping original error 0x80072efe to 0x800704cf. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
GetDirectoryList_HTTP('https://xxxxxxxx.xxxxxxx.com:443/SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4') failed with code 0x800704cf. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Error retrieving manifest (0x800704cf). Will attempt retry 7 in 1920 seconds. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
my query is how some of the clients are communicating primary site server for updates even though the boundary details are properly configured and Secondary site is configured with sup. Also need to know (as per the log "DataTransferService.log")how
come the clients are communicating SSL port for updates. Plz help in resolving the issue.

Hi Kent,
Thanks for the reply.
Primary and secondary sites are connected over WAN and we have around 2000 clients which are reporting to Secondary site.
Considering the WAN bandwidth utiliztaion and number of clients on secondary site we have configured the SUP role.
Not all the clients are with the above error message around 40%-50% of the clients are with above stated error message.
Plz let me know what is the error message indicates and do we need to reffer any other logs for indepth analysis.
Locationservices.log is with fluctuating connectivity
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:35:59 AM 768 (0x0300)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
1 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
how come the clients are communicating SSL port for updates. Plz help in resolving the issue.

SCCM 2012 Secondary site some client's are scan hardware inventory for more than 30 days

Hi,
In our SCCM 2012 environment we have secondary site configured which connected with 8500 computers, on those 5500 machines scanning hardware inventory and send latest inventory details to Secondary Site Management Point, but remaing 3000 machines are not
sending latest hardware inventory for more than 30 days. I verified clients log found it is generating report on inventory agent.log however it is not available with secondary site Management Point.
Are anyone experienced this issue, please share your thought how to fix this issue.
Thanks in advance.
Madhan

Yes i did verify but the client isn't listed on both log files. Also i couldn't open IIS log because of it size has more than 800MB. currently this site has connected with 8500 machines do you think these many clients are supported by secondary site server.
If you can't open the IIS log then how do you know that the Client's IP is not listed within them?
5000 is the max for a secondary site. You will need to secondary sites at this location.
http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigClientNumbers
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

2012 -- 2012 Migration: How to Reassign Distribution Points that Reside on Source Secondary Site Servers to the Target Site

Source hierarchy AAA is at 2012 R2 CU3 and contains a primary site and 14 secondary sites (A01 through A14). The 14 secondary site servers hold the following roles:
Site system
Management Point
State migration point
Site server
Site database server
Component server
Distribution Point
Target hierarchy BBB is also at 2012 R2 CU3 and contains only a primary site. The goal is to "downgrade" the severs at source secondary sites A01 through A14 to distribution points.
AAA was added as a source site. Data gathering was done. A migration job was created an run, and distribution points from the source hierarchy were shared to allow a phased migration of the clients.
We have reach the point where we are ready to reassign distribution points in sites A01 through A14 from AAA to BBB, but none of the shared distribution points are eligible for reassignment. We surmise that since the DP role is not the only role on
these servers (as you can see from the bullet list above), they are ineligible for reassignment. We are unable to remove most of the roles. In fact, the only 2 roles that can be removed are the DP role itself, and the State Migration
Point. If we delete the secondary site, it removes ALL roles...not leaving any behind...including the one we need...DP.
My question is 2-part:
Is our assumption correct? Must a DP role be the only one on the server for a DP to be eligible for reassignment?
Is there any way we can reassign these DPs instead of deleting everything and building them from scratch?
These secondary site servers are in branch offices and host a lot of distributed packages. It would be very inconvenient to have to rebuild the DPs from scratch and redistribute all those packages over the WAN.

Full Disclosure: I have never used this tool myself. I intend to, however the opportunity or time to do so has not yet arisen.
You could use the techniques outlined in CloneDP (https://gallery.technet.microsoft.com/scriptcenter/CloneDP-for-SCCM-2012-SP1-825ce5b1) to create prestage media on each DP and rebuild. That at least would prevent redistributing over the WAN
Ken provides a nice writeup too: http://blogs.technet.com/b/kensmith/archive/2013/08/01/migrating-the-content-library-between-distribution-points-in-sccm-2012-sp1.aspx

Uninstall and Reinstall Secondary Site Management Point Role

Dear Brothers,
I have an issue with one of my SCCM 2012 Sp1 with CU3 Secondary Site Server which the client failed to install on the actual server due to a client issue observed in the CCMSetup.log.
Observation Regarding the issue:
Issue Detail No1.
SCCM Client is not installing to my Secondary Site Server with site code (XYZ), after all the site server are also clients in SCCM hierarchy so it self needs SCCM Client as well.
CCMSetup.log:
"Error 25150. Setup was unable to register the CCM_Service_HostingConfiguration endpoint" when you try to install the client agent in Configuration Manager"
According to http://support.microsoft.com/kb/2905359
the solution is to :
1. Uninstall the management point role.
2. Reinstall the client agent on the management point computer.
3. Reinstall the management point role.
Issue Detail No 2.
When I am trying to uninstall the Management Point Role via SCCM Console as part of the solution posted on the above KB Article, unfortunately the delete or uninstall option is been greyed out.
Now a lot of discussion on the topic "Can not remove management point role is greyed out "under this thread
http://social.technet.microsoft.com/Forums/en-US/1a039893-4a65-4dc9-9feb-e6f09ea1fc0b/can-not-remove-management-point-remove-role-is-greyd-out?forum=configmanagerdeployment
However on the last comment of the above thread from"Trana010"
stated a tool or a command
C:\program files\Microsoft Configuration Manager\bin\x64\rolesetup.exe /deinstall /siteserver:(sec server name) SMSMP
0
Which I never tried yet, and also cannot find a reliable KB supporting the command "rolesetup.exe".
Questions:
1. What is the best way to uninstall/Reinstall the management point on secondary site considering the above issue details?
2. Should I installed CU4 directly instead? Maybe it will resolved the issue even though it is not related to the current case
Regards,

Well, it's by design that you can't remove a management point on a secondary site, so I can imagine that that's why there is nothing "official" written on that subject. I think there are three things you can do:
Try to run the command line (which is probably unsupported)
Submit a CSS call
Upgrade to CU4 and assume the problem is gone.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude
Dear Peter,
I end up shooting a case with CSS, he guided me and share that this issue is very common.
The reason is that it requires CU3 upgrade (Configmgr2012ac-sp1-kb2882125-x64.msp) to be installed with the SCCM Client installation (The same time) via command line in an elevated permission.
Follow the solution provided by Microsoft Support:
CCMSetup.exe /forceinstall SMSSITECODE=XYZ CCMENABLELOGGING=TRUE CCMLOGLEVEL=0 PATCH=C:\Configmgr2012ac-sp1-kb2882125-x64.msp
It seems the Client Push provided by SCCM 2012 Sp1 Infra, that includes your Hotfix under the "Hotfix" folder under the client source folder somehow doesn't work with this issue, that's why the work around is to help the ccmsetup to grab the Hotfix with
by providing the path for the hotfix instead of relying to take the hotfix for the hotfix folder.
Overall peter thanks for your suggestion. And also to Mr. Jason Sandys opening the option for an R2 upgrade, I will look into the KB for this to plan for implementation.
Regards,

SCEP definitions do not update on Secondary site server

Issue: Win 2008R2 server - Secondary site server - SCEP is installed, but it cannot find/download/install any virus definitions. When attempting to hit "update" within the SCEP console, it returns no results. When attempting to
check online for Win Updates via control panel, no virus def updates are found (but 11 different updates are found for .NET and other things).
The error that is thrown in the Windows Updates log when attempting to update through the SCEP console is Error: 0x80248014. http://support.microsoft.com/kb/2832355/en-us Although this
applies to Windows 8, I still checked the settings per the article. My settings check out okay.
No error is thrown when attempting to check for updates via Windows Update in the control panel. It finds 11 available updates (none of which are SCEP related), and displays them properly.
This server has the CCM2012 client installed, and the Anti-Malware policy has been successfully applied. We have a separate Anti-Malware policy that is applied only to our SCCM site servers. The policy indicates that all virus defs are to be
obtained from Microsoft online Update. Our primary site server does not display this problem. It is updating automatically with no issues.
It is possible to manually download and apply the latest virus definitions by visiting the MS virus defs site and running the manual update installer. I have only done this to ensure that the virus defs are somewhat current.
Steps taken: I have removed SCEP and re-installed it. I have also attempted the Windows Update "Fix-it" found here.
http://support.microsoft.com/kb/971058
Error 0x80248014 persists when attempting an update through the SCEP console, and no SCEP related updates are found by Microsoft online Update.
Any suggestions on what I might try next?

Thank you for the reply.
Well, the issue with this secondary site server isn't 100% fixed, but your line of questions pushed me in a direction that allowed me to put a Band-Aid on it. That said, it is updating the virus defs - although not exactly as it should be. But,
this is good enough for me now.
To answer some of your questions that seem relevant. This is a fairly new SCCM setup. Our implementation of SCCM currently is not configured to handle any Software Updates yet. We still rely on a separate WSUS server in our environment for all
WinUpdates (including SCEP/FEP). With that in mind, the Anti-Malware policy that is applied to both SCCM servers use the following 2 locations in order for obtaining SCEP updates:
1) MS online Updates 2)WSUS
As mentioned previously, the secondary site never detected updates via SCEP console or WinUpdates via Control Panel. But this did not explain why it could not retrieve from WSUS.
A quick look at our WSUS setup shows that auto-approval is configured for all of our workstations, but not our servers. I corrected this within WSUS - Forced GPUpdate on the site server - ran wuauclt /detectnow on the site server - Now, the virus defs
were found and could be installed. (I'll have to wait a little while to see if it continues to update automatically as it should)
So, as I mentioned above - the big problem of not updating at all is corrected, however the issue still remains "why are no updates found from MS Updates online?"
At this point - I don't know, but as long as it updates in some fashion, I'm good with that.

Assignment of Standard Purchase Organization to Site

Hi
I am working on Creation of Auto PO while making GR in 501 mvt type in IS-Retail ECC 6.0 . I want to assign the Standard Pur Org to site in assignment . I am unable to see the sites which are created in with reference to reference site in WB01. Pls let me know how to assign the Standard Purchase Organization to Site in IS-Retail.
Thanks & regards
Chalapathi T

Hi
Assign purchasing organization to site T-code is OX17
Path: SPRO-Enterprice st- Assign- MM- Assign purchasing organization to site
This will done at the time of site creation according to your settings Copy rule 01 Maximum rule at site Profile
which we enter in WB01
you can see the same in wB02 organization tab Purc-org/Plant
Regd
sudha

Assign the exsiting clients to Secondary site

Similar Messages

Maybe you are looking for