Compliance State Unknown for entire collection of servers

I'm trying to run a software compliance report for a collection of about 100 servers. The software update group I'm checking them against is for Server 2008, 2008 R2, and 2012 and 2012 R2 operating system (about 80 updates).
All the servers report as "Compliance state unknown" even though I issued update scan cycle against them and waited a day.
I checked WUAHandler.log on one of the servers and it's reporting:
Group policy settings were overwritten by a higher authority (Domain Controller) to: Server http://WSUS-01 and Policy ENABLED
WUAHandler 6/18/2014 7:13:53 PM
4968 (0x1368)
Failed to Add Update Source for WUAgent of type (2) and id ({D6192AA5-3B5E-4481-BB38-01368E4902A5}). Error = 0x87d00692.
WUAHandler 6/18/2014 7:13:53 PM
4968 (0x1368)
Is it because these servers are configured for WSUS that SCCM 2012 R2's Compliance Reports cannot evaluate these systems to check against a software update group in SCCM?

Yes, but not your MP, your WSUS server where you SUP is.
Here are a couple of blog posts I did a while ago (they're for 2007 but are completely applicable to 2012):
http://blog.configmgrftw.com/software-update-management-and-group-policy-for-configmgr-what-else/
http://blog.configmgrftw.com/software-updates-management-and-group-policy-for-configmgr-cont/
Jason | http://blog.configmgrftw.com

Similar Messages

Detection state unknown for some updates

Hi
I am trying to run reports on whether certain patches are applicable in my estate. However, running the reports results in large number of clients reporting 'Detection State Unknown'. However, I know the client has run a scan as it has already sent back
data relating to other patches. I can also force a manual refresh of the scan using the control panel applet and check the logs to confirm the scan has completed successfuly.
However, I still receive 'detection state unknown'. This currrently represents over 50% of my servers.
Can anyone help as I am pulling my hair out with this?
Thanks

this is one I use:
Option Explicit
On Error Resume Next
Call RefreshServerComplianceState
' WScript.Echo "Finished"
Sub RefreshServerComplianceState()
    ' Initialize the UpdatesStore variable.
    dim newCCMUpdatesStore
    ' Create the COM object.
    set newCCMUpdatesStore = CreateObject ("Microsoft.CCM.UpdatesStore")
    ' Refresh the server compliance state by running the RefreshServerComplianceState method.
    newCCMUpdatesStore.RefreshServerComplianceState
    ' Output success message.
'    wscript.echo "Ran RefreshServerComplianceState."
End Sub
Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund

How Do I create a health state dashboard for a group of servers in SCOM 2012 R2

I am aiming to create a health state dashboard which would show the agent health for a particular group of server. But unable to find the option for the appropriate widget. Can somebody suggest how should I proceed on this?

There is state widget for show status of computer health or warning or critical
http://blogs.technet.com/b/antoni/archive/2013/05/13/operations-manager-2012-dashboard-widgets.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"Mai Ali | My blog:
Technical | Twitter:
Mai Ali

Smart Previews issue. LR5 catalog saying "The file could not be found" for entire collection. How do I "sync" or "find" the smart previews?

I created an LR5 catalog with 1:1 previews and smart previews. I then placed the catalog along with the previews and smart previews files into dropbox.
Came home to work remotely, opened the catalog from dropbox and I can see the photos in library mode. But once I go to develop, LR is saying "The file could not be found"
Smart Preview cache file is there right below the lrcat file.
Anyone know how I can make the catalog find that smart previews cache?

Thanks for the quick response.
There are ? next to the folders but that's to be expected because that drive is not connected to my comp.
And there are exclamation points next to each image.. but again.. drive is not connected. But I've used smart previews before and that was the fix to working without the original raw images available.
However the smart previews don't seem to be working this time as I cannot edit the images.

Adding new Updates makes Reports show compliance status as "Enforcement state unknown". Old updates are still installing though.

Hi, Just wondering if anyone has seen this before and resolved it?
Basically, 2012 Software Updates have been working fine for over a year. Last months Patch Tuesday updates were fine too.
However, this week I added a new update to a Software Update Group/deployment. This update did not deploy, and when I run a report, I get "Enforcement state unknown" for ALL clients in the collection. This happens to any deployment I amend. And
also if I create a new update group and new deployment - same thing - "enforcement status unknown".
However, updates previous to this week continue to download and install fine for all deployments. Deployments which I have not changed appear to continue to report correctly (unknown, compliant, pending system restart, etc).
In the SCCM console for Software Updates, the "required" and "installed" figures are still showing correctly.
Custom software packages continue to download and install too.
All servers have sufficient disk space. Most collections dont have maintenance windows, and the deadlines are correct.
Not sure what this could be, a problem with the Management Point? But I can see any errors in the "monitoring" view on the server. The client log files like "wuahandler.log" and "windowsUpdate.log" appear fine also, no obvious
errors.
I cant see any evidence of a group policy conflict. The WSUS entry is still correct in the local group policy (GPEDIT.MSC/admin template/windows comp/ windows update).
Any ideas here? Thanks

There were absolutely no errors in WUAhandler.log on existing machines - all looked normal, which baffled me. Machines with newly installed SCCM client only had machine and user policy update, so could not check for Software Updates.
However, I through web searches, I found a solution on another discussion here:
https://social.technet.microsoft.com/Forums/en-US/1cefa9e0-a7f9-48d1-83b9-34d2293bab64/sccm-2012-r2-problem-with-device-deployment-user-deployments-ok?forum=configmanagerapps
Basically the issue was described as a "corrupt PADBID in the database". A SQL query code detects if the issue is present, and another SQL code fixes the issue.
What lead me to this fix was searching for this error in "CCMEXEC.LOG" online: "System task 'PolicyEvaluator_Unlock' returned error code 0x8000ffff".

SCCM 2007 R2 - configuration item compliance for a collection.

Hi All,
Can some one share the information of reports for configuration item compliance of for a collection in SCCM 2007 R2 using desired configuration management feature.
Rgs,

Yes, but no data shows up.
What does this mean? What troubleshooting have you done? When do you create the DCM?
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Can you make a Keyword Collection for entire event library?

Hello all,
So you make an event, and you can make Keyword Collections for that particular event, such as "WS" or "Person 1" or "Indoors"... But...
What if those keywords apply to other events?
I am making video content for a particular company. I shoot stuff one day import as an event. The only content that I produce is for this company, so you can imagine there are going to be similar themes across mutable events...
As you know this is how it is organized >
DRIVE
>2012
>Event
      >Keyword Collection
This is how I want to get organized>
DRIVE
Master Keyword Collection
>2012
>Event
     >Keyword Collection
> Here is an example of how I think It should be
DRIVE
"All Interior Shots"
>2012
> Event
     >Interior Shots
So can you make a Keyword Collection for entire event library?
Can some one please explain if is this is possible? If not please update!

Andy,
Yes you can but that feature only works if you are searching a single event (Pretty Cool/Useful), Creating a smart collection based on what you tick off in the dialogue box... You will get an error message if Searching the drive itself:
LOL
I did some playing around...
I created a new event
Then I ran a search, with Keywords ticked off, Ticking off mutable Keyword Collections.
Then dragged the results into my new event.
This in effect created "saved search results" but Final Cut started copying clips to that event folder that was created on my external HD. I was hoping that It would generate alias files...
I also...
Created a new project
Ran the Search with Keywords
Dragged all clips into the project..
This also in effect created "saved search results" but not really what I was hoping :/

HT4914 how do i Download my entire collection from iTunes Match, There is an option for that or do i have to download each album separately?

i want to Download my entire collection from iTunes Match with just One click, Or somenthing like that, but i don't know if there is an option for that or if i have to download every album one by one

Welcome to the Apple Community.
Select all your content in iTunes and choose download from the contextual menu that appears when you ctrl-click on your selection.

How to set version limit for entire site collection

Hi,
We have more than 500 document libraries in one site collection. I see some of them have more than 50 versions & taking lot of storage space. So planning to limit the version's to 3 Major and 3 Minor for entire site collection. How can we do that? I
know we can set to individual library by how can we do that for entire site collection?
Thanks
Rithu.
Rithu

The version limit is a library specific setting, so you'll need to use PowerShell to set the property value on each library in every site in the site collection. Here's a sample script that sets if for one library. You'll need to expand the script
to walk the sites recursively and run this for every library.
https://consultantpoint.wordpress.com/2012/06/15/powershell-setconfigure-document-library-with-majorversionlimit-majorwithminorversionslimit-require-to-checkout-before-editing/
Please Note: Changing these settings won't delete old versions. That only happens after each item in the list or library is edited.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Software Update Deployment - Compliance Status = Unknown - Client Check passed/active

Hi,
First I want to say, that I found many Forum-Posts which describes a similar issue, but it is not exactly my issue...
I have a ADR (Auto Deployment Rule) which creates every Month a Windows Update Package, and deploys it. The Deployment starts from a custom day, and ends 14 days later (Deadline). Now I have the issue, that the compliance chek in the deployment status is
"reseted" every day (at 0:00) - (at least after the Deadline!)... The Compliance Check starts every day at 0:00 and then tries to reach every Computer again! So if the Computer-object is powered on and responding, it turns over to compliant (because
it is already compliant - the Windows Update Installation works fine...). But if the Computer is not powered on / not responding the next day, it turns over to "Unknown - Client check passed/active" instead of staying in the Status "compliant"
until it is powered on / respinding again, then it changes over to compliant again... Why is that?
Is there a issue with the Client Settings?:
- Software Update Scan (every day)
- Software Update Re-Evaluation (every day)
- Compliance Settings (every day at 0:00) -> but is this not for the Configuration Baselines?
any other ideas?
Patrik

As soon as the computer get the Software Update configuration items, it will start compliance checking, then send the compliance check result to MP.
From your description, the powered on computers sent the state message to the MP when they got the deployment policy. And the frequency of Status Summarizers of updates deployment for a deployment that was modified in the last
30 days is 60 minutes. Because the site server had not recieved the state message from the powered off computers so that the compliance state was changed to Unknown.
Juke Chou
TechNet Community Support

How do I make a table of contents for a collection of six short stories that is after the legal page and NOT in the front on an unnumbered page?

How do I make a table of contents for a collection of six short stories that is after the legal page and NOT in the front on an unnumbered page?
When I first started I made a title page and then pasted in my first story from a .TXT file. After cleaning up I went back to the front a couple of empty lines ahead of the story and typed in the story title. Unlarged the font size and centered it, then

You can't do that. This is what the Pages User Guide, downloadable from your Pages Help menu, says:
Creating and Updating a Table of Contents
Each table of contents (TOC) you create using a Word Processing template lists only the content that follows it, up until the next table of contents. If you want a master table of contents for the entire document, it must be the only table of contents, and it must be at the beginning of the document.
You can do it manually though.

The operation failed as no adapter is in the state permissible for this operation network issue

Hi
I run some windows (2008 r2) servers on the cloud. A couple of servers are reporting a red x in the system tray where the network icon is, and my network adapter has disappeared.Using ipconfig /renew I get:
The operation failed as no adapter is in the state permissible for this operation"
There isn't really more info I can provide. All servers on static private IPs.
Thanks

Hi GSS1,
Thanks for update.
So can we still verify and get information of this missing NIC form device management console on server ? can we still get the NIC by command “netsh interface show interface” ?
what was the latest modification we performed before this issue occurred ? Is there any error or warring event shown in the event viewer ?
Have we installed Hyper-V on this server host ?
We have a KB article that described a similar issue and some methods to verify and resolve this issue on Windows 2003 and XP platform and we may try it and see if that will help:
How to troubleshoot missing network connections icons in Windows Server 2003 and in Windows XP
http://support.microsoft.com/kb/825826/
Regards,
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
[email protected]
Tiger Li
TechNet Community Support

WebI Error - Batch State Unknown

I keep getting and error box the shows the error message :Batch State Unknown (INF) and can't figure out the cause of the error.
Its shows up on one server in a 3 server cluster and if the load balancer shoves me to another server I cannot recreate the error. Log the user off and back in no error.
The load balancer keep the user table for 2 hours so the as long a the user logs out and back in it seems to correct the issue.
Thought? Session is expiring and this is just another way of saying that?
Case logged too so if I get some good information I will post it here!!
Tom Nather

Hello,
This error (Hex 0xBFF62001) means the timeout of a wait or notification function expired before any desired state occurred.
Solutions: Increase value of Timeout parameter; Verify your cable connections and operation of remote devices.
Verify that you can communicate with your instrument. If you have NI-CAN 1.5, then you can use the Bus Monitor by configuring it up to CAN0 and hooking up a device to see if any frames are being read. The Bus Monitor logs all traffic on the bus.
Kim L.
Applications Engineer
National Instruments

Patch deployment with status "Enforcement state unknown"

Hi All
I am pretty new to the patch deployment.
I generated a report and see there is Last State column with "Enforcement state unknown", not sure if it means failed for those hostnames or will be retried for the installation.
Kindly clarify.
Regards
Ramesh
Regards Ram

They will only start to install updates automatically when there is an active update deployment with a scheduled deadline that has past. See for a lot more information:
http://technet.microsoft.com/en-us/library/gg682168.aspx#BKMK_SUMCompliance
Also, when Days since last communication is more than 0, that's usually an indication that the client is not communicating any more. That can be caused by a lot of things including something simple as that the device is turned of, or not
connected with the network.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

[SOLVED] WIFI interface has "state UNKNOWN"

I have tried to read myself to a solution for the following problem but without luck. Now I'm stuck so any solution or directions would be most welcome.
I have a BCM4312 wifi card. No interface appeared when using the b43 driver but with broadcom-wl the interface is recognised.
I can run
# ip link set wlp3s0 up
without problems but then
$ ip link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: wlp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN mode DEFAULT qlen 1000
link/ether 0c:ee:e6:d2:20:c5 brd ff:ff:ff:ff:ff:ff
3: enp4s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
link/ether 00:24:e8:ed:e3:c2 brd ff:ff:ff:ff:ff:ff
show that the state of the wifi interface wlp3s0 has changed (from down) to UNKNOWN. What does this mean and how can I get it up?
Furthermore, trying to assign an ip address gives
# dhcpcd wlp3s0
dhcpcd[312]: version 5.6.8 starting
dhcpcd[312]: wlp3s0: sending IPv6 Router Solicitation
dhcpcd[312]: wlp3s0: broadcasting for a lease
dhcpcd[312]: wlp3s0: sending IPv6 Router Solicitation
dhcpcd[312]: wlp3s0: sending IPv6 Router Solicitation
dhcpcd[312]: wlp3s0: sending IPv6 Router Solicitation
dhcpcd[312]: wlp3s0: no IPv6 Routers available
dhcpcd[312]: timed out
System info if relevant:
$ uname -r
3.10.2-1-ARCH
I would be thankful for any help.
Last edited by psychopathrik (2013-07-26 13:13:14)

Thanks a lot for the quick reply Trilby.
I guess I should have read more carefully. I thought it would have needed it to be up before connecting.
Following the wiki solved it.

Compliance State Unknown for entire collection of servers

Similar Messages

Maybe you are looking for