Deploying SCCM 2012 Client over DirectAccess

I have not been able to successfully deploy the SCCM 2012 client to any DirectAccess clients when they are not connected to the internal network. I have migrated my collections from SCCM 2007 and all machines connected internally had no issues. I
have added the new SCCM server to the Infrastructure Servers configuration on the UAG and applied the Group Policy. In the CCM logs, I am seeing "the device %computername% does not exist on the network" although I can ping them. The client push
account is a local admin on the machines so I am at a loss as to why they can't connect. Could it be boundary related?
Rich

Here is a snippet from the ccm logs:
---> The device computername.xxx.local does not exist on the network. Giving up~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.927+300><thread=4568 (0x11D8)>
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0)~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.927+300><thread=4568 (0x11D8)>
---> Attempting to connect to administrative share '\\computername\admin$' using account 'xxx\sccm_push'~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.927+300><thread=4568 (0x11D8)>
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account xxx\sccm_push (00000035) $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.942+300><thread=4568 (0x11D8)>
---> The device "computername" does not exist on the network. Giving up~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.942+300><thread=4568 (0x11D8)>
---> ERROR: Unable to access target machine for request: "2097152018", machine name: "computername", access denied or invalid network path. $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.942+300><thread=4568 (0x11D8)>
Execute query exec [sp_CP_SetLastErrorCode] 2097152018, 53~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.958+300><thread=4568 (0x11D8)>
Stored request "2097152018", machine name "computername", in queue "Retry". $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.958+300><thread=4568 (0x11D8)>
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152018, 2~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.958+300><thread=4568 (0x11D8)>
Execute query exec [sp_CP_SetLatest] 2097152018, N'08/14/2012 10:47:23', 198~ $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.973+300><thread=4568 (0x11D8)>
<======End request: "2097152018", machine name: "computername". $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.973+300><thread=4568 (0x11D8)>
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account xxx\sccm_push (00000035) $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:25.989+300><thread=4688 (0x1250)>

Similar Messages

Whats the best method to deploy sccm 2012 client

Hello what is the best method to deploy SCCM 2012 client, is there a script that should be used as sometimes the client push fails. In particular pushing the client to server 03 /08/12 types.
Thankyou
SCCM Deployment Technician

Ultimately, the best method is whatever works for you. Every environment is different and has unique constraints and requirements. You first need to learn out each of the methods and what they do to be able to properly evaluate which will work best for you.
Kind of like mining for gold, who cares how you got it out of the ground, once you get it out, you're rich :-) But if you rely on someone else telling you what the best way was for their mine, you may not be doing it the best way for your mine thus you need
to geological surveys, exploration, trial and error, etc. In other words, you need to do some real grunt work.
Often, using multiple methods is best though because each has its pros and cons (yes, even my startup script -- thanks for the cheerleading Michael and Tim). But as mentioned, it all comes down to you learning about your environment and the different
methods available to make the best choice. If there was only one "best" way to do it, there wouldn't be multiple available and none of us would really be needed.
Jason | http://blog.configmgrftw.com

OSD: TS deployed to Vista SCCM 2012 client, reboots then doesn't find network drivers

Hi,
We deploy SCCM 2012 client to a SCCM 2007 Vista pc.
We then deploy a task sequence to install Windows 7.
Everything works fine on a vm, it reboots in winpe then starts the task sequence. On a laptop however, it does not work. F8 shows it does not get an ip address, it seems as if no network adaptor is recognized.
However, the same task sequence works fine on the same laptop when pxe booting + I added the driver to winpe. Didn’t help. Please advise.
J.
Jan Hoedt

I think I know what the root cause is, but not how to solve it.
In diskpart, I can see 3 volumes:
*Volume 0 = D-drive, DVD-rom,
*Volume 1 = no drive letter, partition of 400 GB
*Volume 2 = C-drive, label "Configuratio", type "removable" 4 GB
It should install to the 400 GB drive but it seems that its installing to the removable drive.
Not sure what that is since there is no USB attached. Probably it is the winpe temporarely mounted(?)
The behaviour I have is described
here and is also referring to USB.
=> I guess I have to tell the temporarely mounted drive to be f.e. Z when installing in full OS.
Any idea howto do this?
J.
Jan Hoedt

SCCM 2012 client installation

Hi all,
I am trying to deploy SCCM 2012 client to my office computers using client push installation wizard, however when I random check the log file on client computers, the wizard did not start at all. Anyone know why this happen?
Anyway I can trigger the installation wizard for the clients?
Regards,
Chungb

Hi Chungb,
Please install the FSP Role and mention the same.
Also are you able to access the SCCM Server share from the client machines ? Can you confirm that as well
Gautam.75801

SCCM 2012 client in capture but deploy has default step "Setup Windows and ConfigMgr"

Hi,
We have our SCCM 2012 client in the capture but the deploy has a single step "Setup Windows and ConfigMgr" in which there is no option to NOT install the sccm 2012 client.
So what happens then, the client is installed a second time?
Please advise.
J.
Jan Hoedt

Hello !
This is a mandatory step in order to configure Windows for a first use. In your case, the SCCM client will just be serialized, it's not a problem. The SCCM client has generally been prepared during the design capture.
Hope this helps.
Note: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights. Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable. This helps the community, keeps the forums tidy, and
recognises useful contributions.

New SCCM 2012 client machines still getting SCCM 2012 SP1 client not the new SCCM 2012 SP1 CU3 client

Hi,
I've successfully (as far as I can tell) deployed SCCM 2012 SP1 CU3 and all my existing clients are showing a client version of 5.00.7804.1400. But when I setup a new client system recently I noticed that the client version was showing 5.00.7804.1000,
and not 5.00.7804.1400.
For new client systems, do I need to redeploy the packages that were created for SCCM 2012 SP1 CU3 so that the new systems get the new SCCM 2012 SP1 CU3 client?
Thanks,
Nick

Hi,
Here's some good information to look over:
http://sccmfaq.wordpress.com/2013/09/24/sccm-2012-include-cu-in-osd/
I haven't followed these instructions myself, since I haven't really had any good reason to include CUs during the initial installation process. I use this method instead and I've never run into any problems:
http://www.ronnipedersen.com/2013/06/installing-sccm-2012-sp1-cu2-quick-start-guide/
Don't retire TechNet! -
(Don't give up yet - 12,575+ strong and growing)

SCCM 2012 client push occurs from site server or from distribution point?

I would like to set up client push in SCCM 2012 and I have a remote site with about 80 workstations that I would like to deploy the clients to using client push, but this remote site is VERY slow, as in less than 3Mbps slow. There is a remote DP located
at this site and I wanted to know if the remote workstations will be hammering my Site Server across the WAN (or MP I guess since the MP role is i installed on the Site Server) to request the client installation, or do the clients just request the client from
the Site Server or MP and then the client downloads to the remote DP and then the workstations install the SCCM 2012 client from the local DP at the remote site?
I just do NOT want the WAN link to become overwhelmed with workstation requests to install the client and have the Site Server have to respond to each and every workstation and download the SCCM 2012 client to each system over this slow WAN link.
How does the client push process actually work?
Thank you

The initial files will come from the primary site server. The rest (the biggest part) will come of the distribution point. See for a good read (even though it's more about secondary sites), this post of Jason:
http://blog.configmgrftw.com/secondary-sites-and-boundary-groups/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Can I go to SCCM 2007 after deploying SCCM 2012?

About a month ago I deployed SCCM 2012 in my Lab environment.
The testing I conduct supports a Security Engineering team.
I’m running 100 servers, 2003 & 2008 R2, and 40 XP and Win7 Clients (most Win7).
After a month of troubleshooting it still will not function correctly.
30% of the clients show failed Client Health status, I can’t get the system to auto install via GPO, and of the simple MS updates I’ve pushed, only about 20% clients work.
I’ve had a ticket with MS open for over a month now on the Client install piece but they have largely ignored me.
It’s been two weeks since I spoke with a MS tech, and that was after requesting the case be elevated.
After bouncing a few emails back and forth the Tier II Tech has never called me during my work Hrs.
8-5 EST.
Is it possible to install SCCM 2007 once you have expanded the Schema to install SCCM 2012?
Absent that I’ll be forced to scrap SCCM and go with WSUS for updates for the short run.
This issue is starting to really impact production issues and has to get either solved or bypassed.
Regards,
Bryan
Arlington VA

I'd recommend that you run the Schema Expansion tool that comes with Configuration Manager 2007.
The reason being is that 2012 has done away with the SLP, meaning that this may or may not be included in it's version of the schema extensions. However, Configuration Manager 2012 does not have anything 'new' in its schema expansion, so you can safely 'downgrade'
to 2007, but as I said, run the 2007 schema extension tool just in case the SLP attributes are not included in the 2012 schema expansion.
I am more curious as to the problems you're experiencing with 2012 though, if your having problems with 2012 I don't see how reverting to 2007 will resolve the problems?
Kriss Milne | MCSE
*Please click 'Vote As Helpful' or 'Mark as Answer' if a post has helped you or answered your question*

Can I use SCCM 2007 to deploy SCCM 2012 Agent

I was reading the scenarios for deploying the SCCM 2012 agent here
http://technet.microsoft.com/en-us/library/gg682132.aspx
I have been planning to deploy the 2012 agent using an SCCM 2007 deployment package. I am not migrating any data/packages/collections/anything from SCCM 2007.
I am looking for a sane way to deploy 2000ish clients a day for 2 weeks and be done.
I figure they are all SCCM 2007 clients so lets deploy 2012 agent using SCCM 2007.
I read the following in the link above and it sounds like the way I want to go – use SCCM 2007 software distribution…
Upgrade installation by using application management
Upgrades clients to a newer version by using Configuration Manager application management. You can also use Configuration Manager 2007 software
distribution to upgrade clients to System Center 2012 Configuration Manager.
Then later in the same document there is this…
How to Upgrade Configuration Manager Clients by Using a Package and Program
You can use Configuration Manager to create and deploy a package and program that upgrades the client software for selected computers in your hierarchy. A package definition file
is supplied with Configuration Manager that populates the package properties with typically used values. You can customize the behavior of the client installation by specifying additional command line properties.
You cannot upgrade Configuration Manager 2007 clients to System Center 2012 Configuration Manager by using this method.
In this scenario, use automatic client upgrade, which automatically creates and deploys a package that contains the latest version of the client.
What???!?? There is no Automatic client upgrade feature in 2007 – so how does that even make sense? In one section, it says I can deploy the 2012 Agent using SCCM 2007 software distribution, and then later in the same document, it
says I can't. I am probably misunderstanding somthing.
Is it possible to make a package/program in SCCM 2007 that will make targeted clients upgrade to Agent 2012 and join the new SCCM 2012 Site?

I tested this (deploying 2012 agent using existing 2007 SCCM infrastructure) with a few test systems at my desk and it seems to work pretty smoothly. I made a package to deploy SCCM 2012 SP1 and added it to my SCCM 2007 Site. Then I deployed
the 2012 agent from 2007 and it worked great. If it works this well in production, I will be able to migrate all of my clients in less than a weeks time.
I have not published the 2012 site information in AD - and I don't plan to. We would have some overlapping site boundaries - and in 2012 it seems its unnecessary in a single site hierarchy. I AM planning to use boundaries to assign
DPs, but thankfully site and DP boundaries have been separated. It works great to just specify the site in everything and not worry about auto discovery. My clients don't move among sites since I only have one large site.
Sorry that I somehow posted this same question twice, and thanks for cleaning that up.
In my installation, I just called ccmsetup.exe with the following command line...
/mp:myMP.mydomain.com CCMLOGMAXHISTORY=5 CCMLOGMAXSIZE=1000000 SMSCACHEFLAGS=PERCENTDISKSPACE;NTFSONLY SMSCACHESIZE=10 SMSMP=myMP.mydomain.com SMSSITECODE=CCM
I am not sure that I need to specify the MP twice, but it is working to do so. I'm also not sure whether the log and cache flags will be honored since there are existing settings from SCCM2007 agent. I think that the 2012 install will not change
these settings upon installation, but it does not appear to hurt the process to include them just in case it does work.

DPM 2012 R2 long backup to tape job randomly fail after installing SCCM 2012 Client

Hello,
I'm managing a two nodes 2012 R2 file server cluster that contains a 16To CSV. I'm using DPM 2012 R2 to backup this entire shared volume directly to LTO 4 tapes, the job last about 55h.
Since SCCM 2012 client has been installed(I don't manage it), the tape jobs are failing ramdomly after several hours with the error:
Type: Tape backup
Status: Failed
Description: The DPM service was unable to communicate with the protection agent on serverX.xxxx.xxx . (ID 52 Details: The semaphore timeout period has expired (0x80070079))
More information
End time: 19/07/2014 03:11:06
Start time: 18/07/2014 22:00:00
Time elapsed: 05:11:05
Data transferred: 768 289,56 MB
Cluster node serverX.xxxx.xxx
Source details: G:\
Protection group members: 1
Details
Protection group: File Server Tape Protection
Library: Quantum PX500 Series Medium Changer
Tape Label (Barcode): File Server Tape Protection-00000230 (000043L4)
If I uninstall SCCM 2012 client, no more issue, backups succeed. I've asked our SCCM team, no specific task has been scheduled or deployed in SCCM.
I can't see anything abnormal in logs.
Any idea?

I have disabled "Configuration Manager Maintenance" and I have also tried to set the registry value HKLM\Software\Microsoft\CCM\CcmEval\NotifyOnly to TRUE and still the same issue.
I can't find any correlated errors in the Windows event logs, task scheduler history neither in the DPM logs.
I've increased the log level of DPM by following the following procedure
http://blogs.msdn.com/b/george_bethanis/archive/2013/11/04/how-to-collect-dpm-verbose-logs.aspx
Now i'm suspecting the maintenance job of Windows 2012 R2, i'll try to disabled this task. But the fact is that I don't have this backup issue if SCCM 2012 client is not installed.
I'm waiting for next logs and will keep you informed

Tracing SCCM 2012 Client settings.

Hi,
I am trying to get a better understanding of the internals of SCCM 2012 client settings. In particular I would like to find out how to trace them through the client logs so I can trace them through and via the policy spy. I have looked through the policy logs
and I can not see how to distinguish them. Can somebody tell me how I tell me how they are represented and what I should look for. So the idea being I can create a custom policy and trace it through.
Thanks Ward

I hope, you're not here for understanding which will the resultant client settings (when you've multiple client setting deployed) applied on a particular machine/device. If this is your question then you can see this via collection-devices and select Resultant
Client Settings. More details http://technet.microsoft.com/en-in/library/gg682109.aspx
If you wanted to know more about how you can analyse the policies using policy spy or client spy. Here are some tips via following link.
http://anoopcnair.com/2012/06/28/sccm-configmgr-2012-how-to-use-policy-spy-policyspy-exe/
http://anoopcnair.com/2012/06/27/configmgr-sccm-2012-how-to-use-client-spy-clispy-exe/
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM

SCCM 2012 Client delpoyment in SCCM 2007 Native world

Hi Team,
In my account I have SCCM 2007 running in Native mode.... we do not support internet based clients there..but work on HTTPS only. Now I have implemented SCCM 2012 R2 there and now testing the client migration so that I can upgrade the SCCM client agent from
2007 to 2012. In SCCM 2012 we have to support internet based clients and so the SCCM 2012 client which we need to install should be compatible on internet and intranet both
The plan is to use the existing SCCM 2007 infra to do that. Send the ccmsetup.exe ( of SCCM 2012 ) in a package to all the clients via SCCM 2007 Software Distribution and trigger SCCM 2012 installation.
Just to do a small test I did this :
1. Created a folder in C drive of a client machine and copied the ccmsetup.exe ( of SCCM 2012 ) in it.
2. Tried to trigger the installation with below mentioned commandlines..... but getting error as mentioned below.... Please help.
Command line used :
Here ABCD.contoso.org is the intranet MP and PQRS.dmzone.org is internet MP
CCMSetup.exe /UsePKICert /NoCRLCheck smsmp=ABCD.contoso.org ccmhostname=PQRS.dmzone.org smssitecode=ABC
CCMSetup.exe /UsePKICert /NoCRLCheck smsmp=ABCD.contoso.org smssitecode=ABC
CCMSetup.exe smsmp=ABCD.contoso.org smssitecode=ABC
Error in ccmsetup.log
<![LOG[==========[ ccmsetup started in process 3068 ]==========]LOG]!><time="12:49:12.547+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="5076" file="ccmsetup.cpp:9441">
<![LOG[Running on platform X64]LOG]!><time="12:49:12.548+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="5076" file="util.cpp:1892">
<![LOG[Updated security on object C:\Windows\ccmsetup\cache\.]LOG]!><time="12:49:12.548+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="5076" file="ccmsetup.cpp:9285">
<![LOG[Launch from folder C:\Windows\ccmsetup\]LOG]!><time="12:49:12.548+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="5076" file="ccmsetup.cpp:721">
<![LOG[CcmSetup version: 5.0.7958.1401]LOG]!><time="12:49:12.549+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="5076" file="ccmsetup.cpp:727">
<![LOG[Successfully started the ccmsetup service]LOG]!><time="12:49:12.550+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="4744" file="ccmsetup.cpp:3271">
<![LOG[Deleted file C:\Windows\ccmsetup\ccmsetup.exe.download]LOG]!><time="12:49:12.551+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="4744" file="ccmsetup.cpp:9497">
<![LOG[In ServiceMain]LOG]!><time="12:49:12.552+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="ccmsetup.cpp:3365">
<![LOG[Folder 'MicABCoft\Configuration Manager' not found. Task does not exist.]LOG]!><time="12:49:12.556+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="4744"
file="wintask.cpp:622">
<![LOG[CcmSetup is exiting with return code 0]LOG]!><time="12:49:12.556+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="4744" file="ccmsetup.cpp:10879">
<![LOG[Running on 'MicABCoft Windows 7 Enterprise ' (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 18]LOG]!><time="12:49:12.618+300" date="11-11-2014" component="ccmsetup" context="" type="1"
thread="3284" file="util.cpp:1974">
<![LOG[Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/UsePKICert" "/NoCRLCheck" "smssitecode=ABC"]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup"
context="" type="1" thread="3284" file="ccmsetup.cpp:3590">
<![LOG[Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context=""
type="1" thread="3284" file="ccmsetup.cpp:3775">
<![LOG[Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/UsePKICert" "/NoCRLCheck" "smssitecode=ABC"]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup"
context="" type="1" thread="3284" file="ccmsetup.cpp:3776">
<![LOG[SslState value: 448]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="ccmsetup.cpp:4425">
<![LOG[CCMHTTPPORT: 80]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:8621">
<![LOG[CCMHTTPSPORT: 443]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:8636">
<![LOG[CCMHTTPSSTATE: 448]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:8654">
<![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:8672">
<![LOG[FSP: ]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:8724">
<![LOG[CCMFIRSTCERT: 1]LOG]!><time="12:49:12.619+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:8782">
<![LOG[HTTPS is enforced for Client. The current state is 31.]LOG]!><time="12:49:12.621+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmutillib.cpp:403">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="12:49:12.623+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmcert.cpp:4393">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="12:49:12.624+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmcert.cpp:4550">
<![LOG[Begin to select client certificate]LOG]!><time="12:49:12.624+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmcert.cpp:4706">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="12:49:12.624+300" date="11-11-2014" component="ccmsetup" context=""
type="0" thread="3284" file="ccmcert.cpp:4742">
<![LOG[1 certificate(s) found in the 'MY' certificate store.]LOG]!><time="12:49:12.624+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="ccmcert.cpp:4770">
<![LOG[Only one certificate present in the certificate store.]LOG]!><time="12:49:12.624+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="ccmcert.cpp:4774">
<![LOG[Begin validation of Certificate [Thumbprint 50051EB74624621341900739D65706D8089A0941] issued to 'D-LJACKNVM7X64.ABClan.org']LOG]!><time="12:49:12.624+300" date="11-11-2014" component="ccmsetup" context=""
type="1" thread="3284" file="ccmcert.cpp:1662">
<![LOG[Failed to get certificate key provider information. Error 0x80092004]LOG]!><time="12:49:12.626+300" date="11-11-2014" component="ccmsetup" context="" type="3" thread="3284" file="ccmcert.cpp:1199">
<![LOG[The Certificate [Thumbprint 50051EB74624621341900739D65706D8089A0941] issued to 'D-LJACKNVM7X64.ABClan.org' has 'Client Authentication' capability.]LOG]!><time="12:49:12.633+300" date="11-11-2014" component="ccmsetup"
context="" type="0" thread="3284" file="ccmcert.cpp:582">
<![LOG[Completed validation of Certificate [Thumbprint 50051EB74624621341900739D65706D8089A0941] issued to 'D-LJACKNVM7X64.ABClan.org']LOG]!><time="12:49:12.633+300" date="11-11-2014" component="ccmsetup" context=""
type="1" thread="3284" file="ccmcert.cpp:1803">
<![LOG[>>> Client selected the PKI Certificate [Thumbprint 50051EB74624621341900739D65706D8089A0941] issued to 'D-LJACKNVM7X64.ABClan.org']LOG]!><time="12:49:12.633+300" date="11-11-2014" component="ccmsetup"
context="" type="1" thread="3284" file="ccmcert.cpp:4850">
<![LOG[Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:A5879665-7A1B-4529-827E-52FA34ABD384";
DateTime = "20141111174912.640000+000";
HRESULT = "0x00000000";
ProcessID = 3068;
ThreadID = 3284;
]LOG]!><time="12:49:12.640+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="event.cpp:715">
<![LOG[Failed to submit event to the Status Agent. Attempting to create pending event.]LOG]!><time="12:49:12.643+300" date="11-11-2014" component="ccmsetup" context="" type="2" thread="3284"
file="event.cpp:737">
<![LOG[Raising pending event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:A5879665-7A1B-4529-827E-52FA34ABD384";
DateTime = "20141111174912.640000+000";
HRESULT = "0x00000000";
ProcessID = 3068;
ThreadID = 3284;
]LOG]!><time="12:49:12.643+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="event.cpp:770">
<![LOG[Successfully submitted pending event to WMI.]LOG]!><time="12:49:12.648+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="event.cpp:813">
<![LOG[CCMCERTID: MY;50051EB74624621341900739D65706D8089A0941]LOG]!><time="12:49:12.649+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="ccmsetup.cpp:8803">
<![LOG[No MP or source location has been explicitly specified. Trying to discover a valid content location...]LOG]!><time="12:49:12.649+300" date="11-11-2014" component="ccmsetup" context="" type="1"
thread="3284" file="ccmsetup.cpp:4729">
<![LOG[Looking for MPs from AD...]LOG]!><time="12:49:12.649+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="ccmsetup.cpp:4737">
<![LOG[Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=ABC))']LOG]!><time="12:49:13.226+300" date="11-11-2014" component="ccmsetup" context="" type="0"
thread="3284" file="lsad.cpp:657">
<![LOG[OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>448</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers></CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>ABC</RootSiteCode><CCM>
<CommandLine>SMSSITECODE=ABC</CommandLine> </CCM><FSP> <FSPServer></FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0" /></Capabilities><Domain
Value="ABClan.org" /><Forest Value="ABCroot.org" /></ClientOperationalSettings>']LOG]!><time="12:49:13.378+300" date="11-11-2014" component="ccmsetup" context="" type="0"
thread="3284" file="lsadcache.cpp:236">
<![LOG[The MP name retrieved is 'ABCD.contoso.org' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>']LOG]!><time="12:49:13.381+300"
date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="lsadcache.cpp:334">
<![LOG[MP 'ABCD.contoso.org' is not compatible]LOG]!><time="12:49:13.382+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="lsadcache.cpp:345">
<![LOG[Retrieved 0 MP records from AD for site 'ABC']LOG]!><time="12:49:13.382+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="lsadcache.cpp:287">
<![LOG[FromAD: command line = SMSSITECODE=ABC]LOG]!><time="12:49:13.383+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="ccmsetup.cpp:288">
<![LOG[Local Machine is joined to an AD domain]LOG]!><time="12:49:13.383+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="lsad.cpp:715">
<![LOG[Current AD forest name is ABCroot.org, domain name is ABClan.org]LOG]!><time="12:49:13.386+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="lsad.cpp:843">
<![LOG[Domain joined client is in Intranet]LOG]!><time="12:49:13.386+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="lsad.cpp:1048">
<![LOG[CMPInfoFromADCache requests are throttled for 01:07:08]LOG]!><time="12:49:13.386+300" date="11-11-2014" component="ccmsetup" context="" type="0" thread="3284" file="lsadcache.cpp:173">
<![LOG[No valid source or MP locations could be identified to download content from. Ccmsetup.exe cannot continue.]LOG]!><time="12:49:13.386+300" date="11-11-2014" component="ccmsetup" context="" type="3"
thread="3284" file="ccmsetup.cpp:4806">
<![LOG[Failed to parse '"C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/UsePKICert" "/NoCRLCheck" "smssitecode=ABC"' with error 0x80004005]LOG]!><time="12:49:13.386+300" date="11-11-2014"
component="ccmsetup" context="" type="3" thread="3284" file="ccmsetup.cpp:4611">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.]LOG]!><time="12:49:13.386+300" date="11-11-2014" component="ccmsetup" context="" type="1"
thread="3284" file="ccmsetup.cpp:9767">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='307' will not be sent.]LOG]!><time="12:49:13.387+300" date="11-11-2014" component="ccmsetup" context="" type="1"
thread="3284" file="ccmsetup.cpp:9767">
<![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="12:49:13.388+300" date="11-11-2014" component="ccmsetup" context="" type="1" thread="5076" file="ccmsetup.cpp:10883">

Hi Jason,
Thanks for your reply..... I tried with /mp switch.... but same error.... if you look at the logs it says
<![LOG[MP 'ABCD.contoso.org' is not compatible]LOG]!><time="12:49:13.382+300"
date="11-11-2014" component="ccmsetup" context="" type="1" thread="3284" file="lsadcache.cpp:345">
<![LOG[Retrieved 0 MP records from AD for site 'ABC']LOG]!>
Not sure why it is saying " not compatible " ... its a valid MP..... from the same client machine below links are working fine..
http://ABCD.contoso.org/sms_mp/.sms_aut?mpcert
http://ABCD.contoso.org/sms_mp/.sms_aut?mplist
Thanks,
Sam

SCCM 2012 R2: does the sccm server itself need a sccm 2012 client?

Hi,
The question is simple. Reason, I update my SCCM 2012 R2 forefront clients via automatic update rule. The server itself has also the forefront/SCEP client but no sccm client.
So I wonder if in general it 's a good idea to install the sccm 2012 client to the SCCM server itself.
J.
Jan Hoedt

Hi,
There is no document about installing the SCCM 2012 client to the SCCM server itself.
It's depends on whether you want to monitor the SCCM server.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 Client was removed but SCCM console still showing the status as "Yes"

Hi,
In a VM, SCCM 2012 client agent was removed and the VM was reverted back to a clean machine. SCCM console still shows the status as "Yes" even after the client agent was removed. Heartbeat Discovery is set to run every 1 hour.
Please guide on this.
Regards, Lorin Davis

It's kind like a person dying (sorry to be a bit morbid) -- how does the phone company know the person died? The dead person certainly can't tell them and the phone company doesn't query every person it services and ask them "are you alive?"
Thus, someone else must notify them of the person's passing. This is no different than a client agent "dying" in ConfigMgr. A ConfigMgr site never initiates communication with clients and thus something else needs to tell the site that the client
agent is dead. You! Or, an automated process (as Torsten mentioned) that goes through automatically marks a client as "dead" that hasn't been heard from in x number of days.
Jason | http://blog.configmgrftw.com | @jasonsandys

How to enable SCCM 2012 clients to get Windows Updates through SSL VPN

I would like my SCCM 2012 client laptops to get Windows Updates through SSL VPN.
I suppose I need to add VPN Subnet in my boundary and boundary group.
What other setting I need to enable?
At this moment, on the 'Software Update Point Component Properties' "Allow intranet-only client connections" radio button is active. Do I neeed to select "Allow both intranet and internet client connections" and Enable SSL communications
for the WSUS server?
or are there something else I need to check?

No, a VPN client is no different than a client connected internally as far as the network is concerned and as far as ConfigMgr is concerned there is no way to explicitly know any different. Internet clients literally are those that connect via the Internet
using IBCM.
Jason | http://blog.configmgrftw.com

Deploying SCCM 2012 Client over DirectAccess

Similar Messages

Maybe you are looking for