Devices in Deployment status show up as Non-Compliant

In the deployment status section of SCCM 2012 we have 6 of the 10 servers listed in the In-Progress tab which are Non-compliant. 3 of the servers are list as Downloaded Updates. Verified that the boundaries are set up correctly and check relevant logs and
no software updates are being pushed out to the servers almost an hour into the maintenance window. Not sure what the cause is, could use all the help I can get. Thanks!

Hi,
Is the client healthy?(CcmEval.log, ClientIDManagerStartup.log, ClientLocation.log, LocationServices.log)
Could the client communicate with MP? Please check CcmMessaging.log and open
http://<MP Name>/sms_mp/.sms_aut?mplist in IE on the client to see whether it can find the MP.
Best Regards,
Joyce

Similar Messages

  • FCS Antimalware Engine Deployment Status shows non-compliant

    We have Forefront Client Security as the enterprise antivirus solution. We see that all the computers are updated with the latest virus definition files through WSUS with no issues. When I generate the compliance report, (deployment summary) I find that
    the pie charts for spyware deployment status and the antivirus deployment status show normal counts.
    However, I see that the Antimalware Engine isn't updated. The current version, per the report is 1.1.9901.0, but we have over 1800 computers running version 1.1.10802.0.
    I'm new to Forefront, and would like to know what the procedure is to update the engine version on all the 1800+ computers with minimum administrative effort. :)
    As an example, please find the version details of one of the clients below:
    Client Version:  1.5.1937.0
    Engine Version: 1.1.10802.0
    Antivirus definition: 1.179.857.0
    Antispyware definition: 1.179.857.0
    Support
    For more information on the program, visit the Microsoft information page at http://go.microsoft.com/fwlink/?LinkId=64530.
    Any help would be greatly appreciated. Thank you in advance!

    Hi,
    Does other Client Security components report with correct version numbers and only Antimalware Engine is incorrect?
    Best Regards,
    Joyce 
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Deployment status shows stuck in progress, no advertisement or package ID in any client log

    I am trying to deploy an applications to a remote machine.  The application is distributed to the DPs and has been successfully deployed to at least one computer on the LAN.  The deployment status for the machine is stuck on the In Progress
    tab, Category as In Progress.
    The content has not downloaded to ccmcache, and I can't find any reference to the application or package ID in any of the logs.  I don't know what to look at next that might help.  Any help is much appreciated!  Thanks,
    Jeff

    How about locationservices.log?  It runs through this every 10 minutes, which is both more often and quite different from what I see in my laptop's locationservices.log (granted I'm on the LAN).
    Refreshed security settings over AD      
    LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    No security settings update detected.   LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Retrieved MP [oursccmprimary] from Registry   LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Attempting to retrieve lookup MP(s) from AD    LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Lookup Management Points from AD:   LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Name: 'oursccmsecondary.ourdomain.lan' HTTPS: 'Y' ForestTrust: 'N'     
    LocationServices             
    12/3/2014 3:50:06 PM               
    5160 (0x1428)
    Name: 'oursccmprimary.ourdomain.lan' HTTPS: 'N' ForestTrust: 'N'         
    LocationServices             
    12/3/2014 3:50:06 PM               
    5160 (0x1428)
    Retrieved lookup MP(s) from AD             
    LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Attempting to retrieve default management points from lookup MP(s) via HTTPS            
    LocationServices               
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Current AD site of machine is OurADsite              
    LocationServices             
    12/3/2014 3:50:06 PM    5160 (0x1428)
    Default Management Points from MP:  LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Name: 'oursccmprimary.ourdomain.lan' HTTPS: 'N' ForestTrust: 'Y'          
    LocationServices             
    12/3/2014 3:50:07 PM               
    5160 (0x1428)
    Name: 'oursccmsecondary.ourdomain.lan' HTTPS: 'Y' ForestTrust: 'Y'      
    LocationServices             
    12/3/2014 3:50:07 PM               
    5160 (0x1428)
    LSUpdateInternetManagementPoints   LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Current AD site of machine is OurADsite              
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Internet Management Points from assigned MP:             
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Name: 'oursccmsecondary.ourdomain.lan' HTTPS: 'Y' ForestTrust: 'Y'      
    LocationServices             
    12/3/2014 3:50:07 PM               
    5160 (0x1428)
    LSUpdateInternetManagementPoints: Successfully refreshed internet MPs from MP oursccmsecondary.ourdomain.lan.         
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Persisting the default management points in WMI          
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Default Management Points from MP:  LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Name: 'oursccmprimary.ourdomain.lan' HTTPS: 'N' ForestTrust: 'Y'          
    LocationServices             
    12/3/2014 3:50:07 PM               
    5160 (0x1428)
    Name: 'oursccmsecondary.ourdomain.lan' HTTPS: 'Y' ForestTrust: 'Y'      
    LocationServices             
    12/3/2014 3:50:07 PM               
    5160 (0x1428)
    Persisted Default Management Point Locations locally  
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Attempting to retrieve local MPs from the assigned MP LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Current AD site of machine is OurADsite              
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Current AD site of machine is OurADsite              
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)
    Current AD site of machine is OurADsite              
    LocationServices             
    12/3/2014 3:50:07 PM    5160 (0x1428)

  • Server showing non compliant for a no longer targeted Configuration Item

    Hi all, 
    I have a server that was removed from a collection which had a DCM baseline targeted to it.  It is still showing non compliant for Configuration items that were targeted at the old collection.  (which is correct, it isn't compliant but it isn't supposed
    to be).  I am trying to create a collection based on non compliant items but this server keeps showing up where it shouldn't be.  is there anyway to 'flush' all the compliance information and let the client rebuild it?
    thanks
    -cornasdf
    http://cornasdf.blogspot.com

    The collection is based on a WQL query that basically says, where the configuration item name = x and state <> compliant.  
    I have several of these where the servers that are non compliant fall into a collection that has an advertisement that remediates them.  
    The difficulty here is that I have a collection of BackEnd servers, based on IP Subnet.  That collection has a DCM Baseline targeted at it that checks for non compliance on specific items.  When building
    some new servers, we connected to hte wrong network for a couple of days, so they were in the included in BackEnd Servers collection which handed out the baseline.  We disconnected that link and the servers have fallen out of that collection.  The
    baseline no longer shows in teh control panel app.  
    But in my compliance collections, it still shows up as non compliant for that Conf Item.  
    I have a work around in place.  actually two.  The first was to just delete the client and let it reinstall.  That worked but seems heavy handed.  Secondarily, i narrowed my query by collection,
    ie the query for non compliance now is limited to the collection where I apply the baseline.  this is somewhat limiting for future instances (and shouldn't be necessary).
    it seems like a bad enough design flaw that I assumed I must be missing something pretty obvious.  if I remove a server from a collection w/ a baseline, it shouldn't still be non compliant for things non longer targeted to it.
    -cornasdf
    http://cornasdf.blogspot.com

  • ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant

    ISE 1.2 - Posture Detail Assessment - enforcement audit mode report not show status for non-compliant.
    - For old version 1.1.4 it can be reported for non-compliant, How can I generate report for this? 
    Thanks
    Kosin Usuwanthim

    It used to be in there (id 226635 is the last one with it); should I clean it up a bit and put it back with a bit more of a disclaimer?

  • After downloading itune to my dell computer (with windows vista), the DVD RW drive is disabled. The device status shows "device can not start (code 10)" Any suggestions? Thanks.

    after downloading itune to my dell computer (with windows vista), the DVD RW drive is disabled. The device status shows "device can not start (code 10)" Any suggestions? Thanks.

    additional info.
    I have found the correct error definition in english.
    "can not start the device (Code 10)"
    I have updated my bios to the latest version.
    I have just tried to uninstall all USB-drivers, and reinstall them.. Still no luck
    I have tried to uninstall and reinstall all webcam drivers - no luck

  • Deployment Question and non-compliant

    Hi, I have a question about deployments and non-compliant systems. Since we updated to 2012 R2 I have had many patching deployments fail with non-compliant messages. If I bring up the deployment it shows many are installed and many are Required.
    Could anyone answer the following question?
    If for example I am deploying a IE 11 patch to Windows 7 machines that does not have IE 11 installed yet would that give the non-compliant error because it cannot install the IE11 patch? This would also apply to .Net 4 and 4.5 for example. We deploy Software
    Update Groups based on Operating Systems so every month I search for every patch non-expired and not superseded for the OS in question and then make the software update group based on that. I figured if the software update group had a patch for a product like
    IE 11 that was not installed on the device yet it just would not install it.
    Any help is appreciated.

    Hi,
    If the update isn't applicable let's say that IE11 is not installed it will not report it as non-compliant and it will not report it as required either so you should be fine in the reports.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Updates in progress - status non-compliant

    I deployed my latest software updates (Patch Tuesday) a few days ago to my XP client collection (yes - I know it's going away soon :)) and I see that looking at the Deployment Status they are reading as
    In progress but status set to non-compliant.
    Strangely I had pushed the same deployment to my test collection a week previously and they had installed normally.
    I had a look at various logs and everything seems to have no discernible errors but looking at a sample of the computers in question shows that the updates have NOT installed.
    Opening the 'more details' pane for each computer shows that the software updates are set to a status of
    required.
    Confused as to where to look now to troubleshoot.
    My software update deployment to my Windows 7 collection is successful. No errors in the deployment status window.
    Any help or pointers are appreciated.
    Thanks,
    John

    Hi,
    If these update logs have no discernible errors, you could enable verbose logging to help you find more information.
    Please check the logs in the following KB to find why were these updates not installed.
    (http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SU_NAPLog)
    Best Regards,
    Joyce Li
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • HT201320 in setting-mail,contacts,calendars, all my accounts as well as Add Account shows in grey, non activated. Any suggestions?

    in setting-mail,contacts,calendars, all my accounts as well as Add Account shows in grey, non activated. Any suggestions?

    Hey Jeremy,
    From the Enterprise Deployment Guide:
    +Important: When you configure a device to sync with Exchange, all existing calendar+
    +and contact information on the device is overwritten. Additionally, iTunes no longer+
    +sync contacts and calendars with your desktop computer. You can still sync your device+
    +wirelessly with MobileMe services.+
    +To change how many day’s worth of data is synced to your device, go to Settings >+
    +Mail, Contacts, and Calendars. The default setting is three days.+
    http://support.apple.com/manuals/enUS/Enterprise_DeploymentGuide.pdf
    You can leave iPhone related feedback and feature requests here: http://www.apple.com/feedback/iphone.html
    Jason

  • I can not eject my ipod as the device icon no longer shows up

    I can not eject my ipod from Itunes as the device icon no longer shows up in Itunes.  I looked on line but none of the solutions were possible to follow as the various options indicated just weren't there!

    Hello scheherazada,
    Thank you for using Apple Support Communities. 
    Here is an article for you to start with your troubleshooting to get your  iPod recognized. 
    iPod: Appears in Windows but not in iTunes - Apple Support
    Regards,
    Jeff D. 

  • Cisco LMS Prime: Device Center does not show Port statistics for Routers

    Hello,
    i am wondering why the Port Statistics for Routers are not showing in the Device Center Port Status Section. Is this normal behaviour?
    thanks
    Alex

    Hi Afroj,
    Data Collection as well as Usertracking ran successfully.
    regards
    Alex

  • Deployment Status not reflecting correct application installation status

    Morning All,
    Running into an issue where the application Deployment Status does not properly reflect the state of the application install.
    The software installs, works properly and is reported in Software Center on the client PC as being installed succesfully however the status within CAS shows "In Progress" with a description of "Program started".
    The application in question is Cisco Network Access Manager which terminates the network connection and requires a reboot before restoring.  Additionally the site is behind a NAC switch which adds another layer of security to the network at that loation.
    Currently I have deployed to 90 test machines - 65 of which have reported in as succesfull, the remaining 25 have installed and are working but are not being updated in the Deployment Status.
    I have checked the Sender.log on the site server and link analyzer between the primary & secondary.  I have also checked the client heartbeat and statemessage.log all seems well - no errors reported.
    Additionally I have reviewed the WMI status on the client and repaired (just in case).
    Through google search I have also ran the following:
    Option Explicit
    On Error Resume Next
    Call RefreshServerComplianceState
    ' WScript.Echo "Finished"
    Sub RefreshServerComplianceState()
    ' Initialize the UpdatesStore variable.
    dim newCCMUpdatesStore
    ' Create the COM object.
    set newCCMUpdatesStore = CreateObject ("Microsoft.CCM.UpdatesStore")
    ' Refresh the server compliance state by running the RefreshServerComplianceState method.
    newCCMUpdatesStore.RefreshServerComplianceState
    ' Output success message.
    ' wscript.echo "Ran RefreshServerComplianceState."
    End Sub
    As well as forcing a check in from the client and running the summarization on the CAS.
    So far nothing seems to trigger an update.  I'm hoping someone can point me in the proper direction in regards to diagnosing this problem.
    Many thanks, Jeff

    Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Device returned unexpected status "CertificateRejected".

    Hi all,
    I’ve recently jumped headfirst into deploying iPads with Apple Configurator (just a class set of 20 at this stage).  I think I've figured most of it out, but am having trouble with errors when restoring from a backup while checking devices back in.  I've seen two errors so far, "Unable to send ClearPasscode command to device" and "Unable to check profiles".  Both are accompanied by the description:
    Device returned unexpected status "CertificateRejected".
    Code 5
    Domain com.apple.configurator.error
    It seems the check-in errors occur on all devices except the one from which the backup was made.  iPad 1, from which the backup was made, is the only device which will successfully check back in.  Again, these errors only occur when I have devices set to Restore from a backup in the Supervise screen (meaning that they restore from a backup while checking back in).
    If I set all devices to “Don’t restore backup” then they all successfully check back in.  But obviously this is not desirable as documents, etc. are left on the devices after check in (which is fine if you’re then checking out to another user who has already checked a device in and out, but if you are checking out to a brand new user, they end up with documents and settings from the last user of that device).
    Following advice from another forum I've looked in Keychain Access and set the Apple Configurator root certificate to "Always Trust".  It was previously set to "Use System Defaults" which resulted in the red text "This root certificate is not trusted".
    I’ve also tried a fresh install on Apple Configurator on a fresh user account, repaired permissions, but still the error occurs.  I prepared an iPad with no profiles, no apps, backed that up and restored it onto a second iPad using the prepare tab.  Then refreshed them both using that backup as the restore option.  Checked them out, checked them in, and they all fail with errors except for the iPad from which the backup was made.
    Any ideas what I’m doing wrong?
    Cheers,
    Ben

    Configurator is terrible for backups (and in general.)
    I just create a backup in iTunes and then restore that backup through iTunes to the iPads (and use Configurator for everything else.) The only problem with this method is you have to do them 1 by 1 (start one off, wait for it to reboot, when it lets you start another off, etc.) iTunes doesn't support simultaneous restores or backup restores.
    You might run into other glitches after this method, but I've found it to be the most effective, with 100% success restoring a backup. Give it a go and see how it works for you, if you have the time to sit there while 20 iPads restore.

  • SCCM 2012 - Deployment Status Very Slow

    I hope someone can point me in the right direction.  I recently upgraded to 2012 SP1, as well as moved my database to a new server running WS2012 and SQL 2012 SP1.  Everything seems to work very well, except for when viewing the status of my deployments. 
    For example, I pushed out a handful of security updates to a collection of 2008 R2 Servers (about 3 servers).  After a minute, the servers showed correctly that updates were available.  I proceeded to install, reboot, etc. 
    Now, in CM, under deployments, I have been keeping an eye on the Deployment Status.  After about 6 hours, the little bubble was all grey, in that it hadn't yet figured out what was going on.  24 hours later, and finally it saw that three machines
    were "in progress"....even though they should be "compliant".  I have noticed this extremely slow behavior on several other small deployments I am doing.
    I have combed through numerous logs, both client and server side, and I don't "see" anything that would suggest an issue with state messages, etc.  Does anyone have any suggestions as to where I can look, or what I can do?  Before I upgraded,
    although obviously not instant, the deployment status' seemed to update fairly quickly (couple of hours, not days).
    Thank you in advance for any suggestions.

    Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Linksys EA6500 Device List Connection Status - update process

    I have the Linksys EA6500 with the latest firmware and have a question regarding the device list connection status.
    Currently, I am seeing devices in the list that have a connection status of live, but they are not even within my home network. 
    What is the update/cycle time for the device list actually checking connection status of a device?
    In my situation, it has been 3 days (72 hours) since the two device showing as connected have not been connected to my home network/router. 
    Noticed that this inaccurate connection status for these devices is also contributing to the Device Monitr app not showing correct device connection status info. 
    Would like to have real-time device connection status if possible. This device list is great way to know when device get connected or disconnected which helps me know when my kids get home from school or using game console when should be doing homework.
    Thanks for your help.
    Solved!
    Go to Solution.

    When you go to Troubleshooting > Diagnostics > Router configuration and clicked on Backup it is actually letting you save a backup of your configuration. It should prompt you where to save the file for you to use it later to reconfigure the router settings by loading it back on the router itself. I suggest that you do a hard reset on the router itself – push and hold the reset button using a pin or paper clip for 10-15 seconds then wait for the cisco light to go solid. Once the cisco light will turn solid access the router page again by typing in 192.168.1.1 in the address bar and load the backup that you have saved. Just go back to Troubleshooting > Diagnostics > Router configuration and click on Restore option. It will ask you to look for the backup config file that you have save and open it and the settings should be restored on the router. Check then if the same problem (device list) will be experienced.

Maybe you are looking for