Enforcement State Unknown issue in SCCM 2012 Patch management report.

Software updates are installed on machine. All updates shown in updates history, but machine not reporting back as Complaint. It showing in Enforcement State Unknown. Please help to resolve the issue.

Hi,
Have you tried to "Run Summarization" while right click the software update group?
If it still shows unknown, please check StateMessage.log on a client that updates show unknown to see whether the state messages have been forwarded successfully.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

  • Installing MS Office Updates using SCCM 2012 patch management.

    Hi,
    We have SCCM 2012 in our customer environment, we would like to deploy MS office 2012 non-security updates using SCCM patch management. Can someone help me how to configure non-security updates on SCCM 2012 and deploy the same.
    Regardsm
    Madhan

    The process of deploying non-security updates and security updates are the same.
    As a side note:
    To reduce the numbers of required updates, you can also download service packs, and other updates (msp files) and copy them to the update folder of your Office installation source. Then they will be installed as part of the Office deployment process.
    Ronni Pedersen | Microsoft MVP - ConfigMgr | Blogs:
    www.ronnipedersen.com/ and www.SCUG.dk/ | Twitter
    @ronnipedersen

  • SCCM 2012 - Patch Deployment Report

    Hello,
    I'm trying to figure out a way to find out the last patch installed date on servers. Could you please let me know if this is possible using the SQL query ?
    Many Thanks,
    Raj

    We are asked by the compliance team to show when the server was last patched.. that is the reaon behind this question. I can get the SCCM report with the Month and Year, but unfortunately that does not list the server names.
    Ok, but that does not guarantee that the server is up-to-date. What is their end goal? Shouldn’t they care what SU are missing form each server not when the last SU was applied?
    http://www.enhansoft.com/

  • Patch deployment with status "Enforcement state unknown"

    Hi All
    I am pretty new to the patch deployment.
    I generated a report and see there is Last State column with "Enforcement state unknown", not sure if it means failed for those hostnames or will be retried for the installation.
    Kindly clarify.
    Regards
    Ramesh
    Regards Ram

    They will only start to install updates automatically when there is an active update deployment with a scheduled deadline that has past. See for a lot more information:
    http://technet.microsoft.com/en-us/library/gg682168.aspx#BKMK_SUMCompliance
    Also, when Days since last communication is more than 0, that's usually an indication that the client is not communicating any more. That can be caused by a lot of things including something simple as that the device is turned of, or not
    connected with the network.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Adding new Updates makes Reports show compliance status as "Enforcement state unknown". Old updates are still installing though.

    Hi, Just wondering if anyone has seen this before and resolved it?
    Basically, 2012 Software Updates have been working fine for over a year. Last months Patch Tuesday updates were fine too.
    However, this week I added a new update to a Software Update Group/deployment. This update did not deploy, and when I run a report, I get "Enforcement state unknown" for ALL clients in the collection. This happens to any deployment I amend. And
    also if I create a new update group and new deployment - same thing - "enforcement status unknown".
    However, updates previous to this week continue to download and install fine for all deployments. Deployments which I have not changed appear to continue to report correctly (unknown, compliant, pending system restart, etc).
    In the SCCM console for Software Updates, the "required" and "installed" figures are still showing correctly.
    Custom software packages continue to download and install too.
    All servers have sufficient disk space. Most collections dont have maintenance windows, and the deadlines are correct.
    Not sure what this could be, a problem with the Management Point? But I can see any errors in the "monitoring" view on the server. The client log files like "wuahandler.log" and "windowsUpdate.log" appear fine also, no obvious
    errors.
    I cant see any evidence of a group policy conflict. The WSUS entry is still correct in the local group policy (GPEDIT.MSC/admin template/windows comp/ windows update).
    Any ideas here? Thanks

    There were absolutely no errors in WUAhandler.log on existing machines - all looked normal, which baffled me. Machines with newly installed SCCM client only had machine and user policy update, so could not check for Software Updates.
    However, I through web searches, I found a solution on another discussion here:
    https://social.technet.microsoft.com/Forums/en-US/1cefa9e0-a7f9-48d1-83b9-34d2293bab64/sccm-2012-r2-problem-with-device-deployment-user-deployments-ok?forum=configmanagerapps
    Basically the issue was described as a "corrupt PADBID in the database". A SQL query code detects if the issue is present, and another SQL code fixes the issue.
    What lead me to this fix was searching for this error in "CCMEXEC.LOG" online: "System task 'PolicyEvaluator_Unlock' returned error code 0x8000ffff".

  • Enforcement State Unknown but updates visible on clients?

    Hi all. A strange issue has just appeared in one of our environments with software update deployments. It would appear the report "Enforcement States for a Deployment" is stuck showing clients as "Enforcement State Unknown".
    The clients can see updates no problem at all, so functionally I have no issue. Updates are available and install correctly, but my issue is my deployments are now completely blind in that I have no status updates at all - 4+ days now and the status
    hasn't changed. I can't see any issue on the client side - StateMessage.log indicates it can successfully forward messages.
    Weirdly, this issue only seems to be affecting Software Update Deployments as software distribution reports are updating their statuses as expected.
    I've checked inboxes for blacklogs and can't see anything too out-of-the-ordinary, and I've also tried the "force state refresh" VBS that's doing the rounds on these boards. I've even tried reinstalling the client and recreating the deployments, but all
    these actions have me believe the issue is with my SCCM server only.
    Can anyone help me?
    EDIT - The plot thickens somewhat. The report "Evaluation states for a deployment" has just changed to "Evaluation Succeeded", but  "Enforcement States for a Deployment" remains at "Enforcement State Unknown". HELP!

    I think, you need to take a pause and analyse the log files to verify that everything is gng well.
    The below blog posts would help you in doing that,
    http://blogs.technet.com/b/configurationmgr/archive/2010/11/04/information-on-the-configmgr-2007-client-side-process-for-software-updates.aspx
    http://blogs.technet.com/b/sudheesn/archive/2010/11/10/troubleshooting-sccm-part-iii-software-updates.aspx
    Anoop C Nair -
    @anoopmannur
    MY BLOG:
     http://anoopmannur.wordpress.com
    User Group:
     ConfigMgr Professionals
    This posting is provided AS-IS with no warranties/guarantees and confers no rights.

  • SCCM 2012 License Management

    Hi,
    Wanted to understand the SCCM 2012 License management process, let me explain our current setup
    As per my understanding, KMS captures the license count for bill-ability in SPLA.
    1. 200 plus servers in DC - managed as shared service - Licensed by Service company - KMS hosted on DC. Owned by service company.
    2. 4000 plus workstations, 20 plus servers - regional sites - managed by client themself - KMS hosted on local site. Owned by Client.
    So question is, both are two different kms managing two different set of owned machines. 
    If i set up SCCM 2012 in data Centre, how to capture the license information? 
    Thanks in advance.
    $Bug

    Configuration manager has no license management process and no a KMS does not capture license counts for billability (a KMS actually stops counting at 50).
    License tracking is another story and generally the built-in Asset Intelligence reports in ConfigMgr will do the job for Microsoft products. The systems must all be managed by ConfigMgr however. From there, simply instance counting is pretty trivial whether
    you use the built-in reports or not though as its a simple inventory.
    Jason | http://blog.configmgrftw.com | @jasonsandys
    Okay, so SCCM asset intelligence reports are sufficient to count/calculate billability for System Centre as SPLA. 
    Thanks a lot for your help. 
    $Bug

  • How to Setup SCCM 2012 to manage Application step by step!!!

    Dear everybody,
    My company is making plan to deploy SCCM 2012 to manage PCs list after updating through WSUS
    Please help me for guied to setup it step by step
    Thanks for your help!!!

    And here are the guides from Gerry as well,
    http://gerryhampsoncm.blogspot.se/2013/02/sccm-2012-sp1-step-by-step-guide.html
    There are many great books out there as well, Configuration Manager is a complex product so I would recommend som training and or a good book as well as a compliment to get you started.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Detection State 'Unknown' in SCCM 2012 Software Compliance Report

    My management is looking for windows patches compliance reports from SCCM 2012
    When I am trying to prepare Compliance Reports with SCCM 2012 for windows patches, I am noticing that I have lots of patches, where "Unknown" state is showing against many Windows Patches. I was expecting the reports to show “Not Required"
    instead of "Unknown".
    Please tell me, where the issue might be and how to rectify it.
    Thanks in advance.

    Thanks for your reply Jorgen. Is there anyway I can initiate a " Software Update Scan on all Clients from SCCM Console? If yes, please let me steps- how?
    As a test, I run "Software scan from a client and client report back to server. However on WindowsUpdates.log I can see some unhappy logs.
    Does it mean that WSUS server and clients are having some issue?
    2014-08-03 16:43:56:773  840 1668 AU ##  END  ##  AU: Search for updates [CallId = {6E29C07F-4A2B-4137-8228-D47F81523EFD}]
    2014-08-03 16:43:56:773  840 1668 AU #############
    2014-08-03 16:43:56:773  840 1668 AU AU setting next detection timeout to 2014-08-03 11:43:56
    2014-08-03 16:44:01:664  840 110c Report REPORT EVENT: {F5E38138-DE94-45D1-A8D0-79C4C8667568} 2014-08-03 16:43:56:664+1000 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 800b0001 SelfUpdate Failure Software
    Synchronization Windows Update Client failed to detect with error 0x800b0001.
    2014-08-03 21:43:56:923  840 a4c AU #############
    2014-08-03 21:43:56:923  840 a4c AU ## START ##  AU: Search for updates
    2014-08-03 21:43:56:923  840 a4c AU #########
    2014-08-03 21:43:56:923  840 a4c AU <<## SUBMITTED ## AU: Search for updates [CallId = {B4CB615A-9D97-4933-947F-556215D85E59}]
    2014-08-03 21:43:56:923  840 d58 Agent *************
    2014-08-03 21:43:56:923  840 d58 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-03 21:43:56:923  840 d58 Agent *********
    2014-08-03 21:43:56:923  840 d58 Agent   * Online = Yes; Ignore download priority = No
    2014-08-03 21:43:56:923  840 d58 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1
    or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2014-08-03 21:43:56:923  840 d58 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-03 21:43:56:923  840 d58 Agent   * Search Scope = {Machine}
    2014-08-03 21:43:57:439  840 d58 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2014-08-03 21:43:57:454  840 d58 Misc  Microsoft signed: Yes
    2014-08-03 21:43:57:454  840 d58 Misc WARNING: Digital Signatures on file C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab are not trusted: Error 0x800b0001
    2014-08-03 21:43:57:454  840 d58 Setup FATAL: IsUpdateRequired failed with error 0x800b0001
    2014-08-03 21:43:57:454  840 d58 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x800b0001
    2014-08-03 21:43:57:454  840 d58 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x800B0001
    2014-08-03 21:43:57:454  840 d58 Agent   * WARNING: Skipping scan, self-update check returned 0x800B0001
    2014-08-03 21:43:58:782  840 d58 Agent   * WARNING: Exit code = 0x800B0001
    2014-08-03 21:43:58:782  840 d58 Agent *********
    2014-08-03 21:43:58:782  840 d58 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-03 21:43:58:782  840 d58 Agent *************
    2014-08-03 21:43:58:782  840 d58 Agent WARNING: WU client failed Searching for update with error 0x800b0001
    2014-08-03 21:43:58:782  840 11f8 AU >>##  RESUMED  ## AU: Search for updates [CallId = {B4CB615A-9D97-4933-947F-556215D85E59}]
    2014-08-03 21:43:58:782  840 11f8 AU   # WARNING: Search callback failed, result = 0x800B0001
    2014-08-03 21:43:58:782  840 11f8 AU   # WARNING: Failed to find updates with error code 800B0001
    2014-08-03 21:43:58:782  840 11f8 AU #########
    2014-08-03 21:43:58:782  840 11f8 AU ##  END  ##  AU: Search for updates [CallId = {B4CB615A-9D97-4933-947F-556215D85E59}]
    2014-08-03 21:43:58:782  840 11f8 AU #############
    2014-08-03 21:43:58:782  840 11f8 AU AU setting next detection timeout to 2014-08-03 16:43:58
    2014-08-03 21:44:02:454  840 d58 Report REPORT EVENT: {5653D57E-2599-426E-B3F2-3F626EDC9C8D} 2014-08-03 21:43:57:454+1000 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 800b0001 SelfUpdate Failure Software
    Synchronization Windows Update Client failed to detect with error 0x800b0001.
    2014-08-04 02:43:59:327  840 a4c AU #############
    2014-08-04 02:43:59:327  840 a4c AU ## START ##  AU: Search for updates
    2014-08-04 02:43:59:327  840 a4c AU #########
    2014-08-04 02:43:59:327  840 a4c AU <<## SUBMITTED ## AU: Search for updates [CallId = {EBB099BD-7E1E-481B-B354-1DF2CD3AB53F}]
    2014-08-04 02:43:59:327  840 1528 Agent *************
    2014-08-04 02:43:59:327  840 1528 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 02:43:59:327  840 1528 Agent *********
    2014-08-04 02:43:59:327  840 1528 Agent   * Online = Yes; Ignore download priority = No
    2014-08-04 02:43:59:327  840 1528 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1
    or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2014-08-04 02:43:59:327  840 1528 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-04 02:43:59:327  840 1528 Agent   * Search Scope = {Machine}
    2014-08-04 02:43:59:858  840 1528 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2014-08-04 02:43:59:858  840 1528 Misc  Microsoft signed: Yes
    2014-08-04 02:43:59:858  840 1528 Misc WARNING: Digital Signatures on file C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab are not trusted: Error 0x800b0001
    2014-08-04 02:43:59:858  840 1528 Setup FATAL: IsUpdateRequired failed with error 0x800b0001
    2014-08-04 02:43:59:858  840 1528 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x800b0001
    2014-08-04 02:43:59:858  840 1528 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x800B0001
    2014-08-04 02:43:59:858  840 1528 Agent   * WARNING: Skipping scan, self-update check returned 0x800B0001
    2014-08-04 02:44:00:577  840 1528 Agent   * WARNING: Exit code = 0x800B0001
    2014-08-04 02:44:00:577  840 1528 Agent *********
    2014-08-04 02:44:00:577  840 1528 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 02:44:00:577  840 1528 Agent *************
    2014-08-04 02:44:00:577  840 1528 Agent WARNING: WU client failed Searching for update with error 0x800b0001
    2014-08-04 02:44:00:577  840 1018 AU >>##  RESUMED  ## AU: Search for updates [CallId = {EBB099BD-7E1E-481B-B354-1DF2CD3AB53F}]
    2014-08-04 02:44:00:577  840 1018 AU   # WARNING: Search callback failed, result = 0x800B0001
    2014-08-04 02:44:00:577  840 1018 AU   # WARNING: Failed to find updates with error code 800B0001
    2014-08-04 02:44:00:577  840 1018 AU #########
    2014-08-04 02:44:00:577  840 1018 AU ##  END  ##  AU: Search for updates [CallId = {EBB099BD-7E1E-481B-B354-1DF2CD3AB53F}]
    2014-08-04 02:44:00:577  840 1018 AU #############
    2014-08-04 02:44:00:577  840 1018 AU AU setting next detection timeout to 2014-08-03 21:44:00
    2014-08-04 02:44:04:859  840 1528 Report REPORT EVENT: {3121ED76-441E-4862-A90B-9AF1B5170B85} 2014-08-04 02:43:59:858+1000 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 800b0001 SelfUpdate Failure Software
    Synchronization Windows Update Client failed to detect with error 0x800b0001.
    2014-08-04 07:44:00:725  840 a4c AU #############
    2014-08-04 07:44:00:725  840 a4c AU ## START ##  AU: Search for updates
    2014-08-04 07:44:00:725  840 a4c AU #########
    2014-08-04 07:44:00:725  840 a4c AU <<## SUBMITTED ## AU: Search for updates [CallId = {CC637D7F-C439-4E83-A71D-645B2CD92B8A}]
    2014-08-04 07:44:00:725  840 11f0 Agent *************
    2014-08-04 07:44:00:725  840 11f0 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 07:44:00:725  840 11f0 Agent *********
    2014-08-04 07:44:00:725  840 11f0 Agent   * Online = Yes; Ignore download priority = No
    2014-08-04 07:44:00:725  840 11f0 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1
    or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2014-08-04 07:44:00:725  840 11f0 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-04 07:44:00:725  840 11f0 Agent   * Search Scope = {Machine}
    2014-08-04 07:44:01:178  840 11f0 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2014-08-04 07:44:01:178  840 11f0 Misc  Microsoft signed: Yes
    2014-08-04 07:44:01:178  840 11f0 Misc WARNING: Digital Signatures on file C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab are not trusted: Error 0x800b0001
    2014-08-04 07:44:01:178  840 11f0 Setup FATAL: IsUpdateRequired failed with error 0x800b0001
    2014-08-04 07:44:01:178  840 11f0 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x800b0001
    2014-08-04 07:44:01:178  840 11f0 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x800B0001
    2014-08-04 07:44:01:178  840 11f0 Agent   * WARNING: Skipping scan, self-update check returned 0x800B0001
    2014-08-04 07:44:01:803  840 11f0 Agent   * WARNING: Exit code = 0x800B0001
    2014-08-04 07:44:01:803  840 11f0 Agent *********
    2014-08-04 07:44:01:803  840 11f0 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 07:44:01:803  840 11f0 Agent *************
    2014-08-04 07:44:01:803  840 11f0 Agent WARNING: WU client failed Searching for update with error 0x800b0001
    2014-08-04 07:44:01:803  840 14dc AU >>##  RESUMED  ## AU: Search for updates [CallId = {CC637D7F-C439-4E83-A71D-645B2CD92B8A}]
    2014-08-04 07:44:01:803  840 14dc AU   # WARNING: Search callback failed, result = 0x800B0001
    2014-08-04 07:44:01:803  840 14dc AU   # WARNING: Failed to find updates with error code 800B0001
    2014-08-04 07:44:01:803  840 14dc AU #########
    2014-08-04 07:44:01:803  840 14dc AU ##  END  ##  AU: Search for updates [CallId = {CC637D7F-C439-4E83-A71D-645B2CD92B8A}]
    2014-08-04 07:44:01:803  840 14dc AU #############
    2014-08-04 07:44:01:803  840 14dc AU AU setting next detection timeout to 2014-08-04 02:44:01
    2014-08-04 07:44:06:178  840 11f0 Report REPORT EVENT: {5CC4BC72-612B-4C93-B560-57DEBEF9DD30} 2014-08-04 07:44:01:178+1000 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 800b0001 SelfUpdate Failure Software
    Synchronization Windows Update Client failed to detect with error 0x800b0001.
    2014-08-04 07:56:20:733  840 a4c AU AU was unable to detect updates for more than 48 hours
    2014-08-04 07:56:25:733  840 11f0 Report REPORT EVENT: {BFD85143-59AD-4E15-9797-4CEE9D7F089F} 2014-08-04 07:56:20:733+1000 1 149 102 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Failure Software
    Synchronization Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
    2014-08-04 12:44:01:690  840 a4c AU #############
    2014-08-04 12:44:01:690  840 a4c AU ## START ##  AU: Search for updates
    2014-08-04 12:44:01:690  840 a4c AU #########
    2014-08-04 12:44:01:690  840 a4c AU <<## SUBMITTED ## AU: Search for updates [CallId = {16B8EC72-AD9E-47D5-9F94-73794A653572}]
    2014-08-04 12:44:01:690  840 1320 Agent *************
    2014-08-04 12:44:01:690  840 1320 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 12:44:01:690  840 1320 Agent *********
    2014-08-04 12:44:01:690  840 1320 Agent   * Online = Yes; Ignore download priority = No
    2014-08-04 12:44:01:690  840 1320 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1
    or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2014-08-04 12:44:01:690  840 1320 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-04 12:44:01:690  840 1320 Agent   * Search Scope = {Machine}
    2014-08-04 12:44:02:143  840 1320 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab:
    2014-08-04 12:44:02:174  840 1320 Misc  Microsoft signed: Yes
    2014-08-04 12:44:02:174  840 1320 Misc WARNING: Digital Signatures on file C:\WINDOWS\SoftwareDistribution\SelfUpdate\Default\wuident.cab are not trusted: Error 0x800b0001
    2014-08-04 12:44:02:174  840 1320 Setup FATAL: IsUpdateRequired failed with error 0x800b0001
    2014-08-04 12:44:02:174  840 1320 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed: 0x800b0001
    2014-08-04 12:44:02:174  840 1320 Setup WARNING: SelfUpdate: Default Service: IsUpdateRequired failed, error = 0x800B0001
    2014-08-04 12:44:02:174  840 1320 Agent   * WARNING: Skipping scan, self-update check returned 0x800B0001
    2014-08-04 12:44:02:268  840 1320 Agent   * WARNING: Exit code = 0x800B0001
    2014-08-04 12:44:02:268  840 1320 Agent *********
    2014-08-04 12:44:02:268  840 1320 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 12:44:02:268  840 1320 Agent *************
    2014-08-04 12:44:02:268  840 1320 Agent WARNING: WU client failed Searching for update with error 0x800b0001
    2014-08-04 12:44:02:268  840 11a8 AU >>##  RESUMED  ## AU: Search for updates [CallId = {16B8EC72-AD9E-47D5-9F94-73794A653572}]
    2014-08-04 12:44:02:268  840 11a8 AU   # WARNING: Search callback failed, result = 0x800B0001
    2014-08-04 12:44:02:268  840 11a8 AU   # WARNING: Failed to find updates with error code 800B0001
    2014-08-04 12:44:02:268  840 11a8 AU #########
    2014-08-04 12:44:02:268  840 11a8 AU ##  END  ##  AU: Search for updates [CallId = {16B8EC72-AD9E-47D5-9F94-73794A653572}]
    2014-08-04 12:44:02:268  840 11a8 AU #############
    2014-08-04 12:44:02:268  840 11a8 AU AU setting next detection timeout to 2014-08-04 07:44:02
    2014-08-04 12:44:07:174  840 1320 Report REPORT EVENT: {01CB1C52-239F-4DB7-A4AF-C0FBF2E5358A} 2014-08-04 12:44:02:174+1000 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 800b0001 SelfUpdate Failure Software
    Synchronization Windows Update Client failed to detect with error 0x800b0001.
    2014-08-04 16:24:12:878 2748 bc0 COMAPI -------------
    2014-08-04 16:24:12:878 2748 bc0 COMAPI -- START --  COMAPI: Search [ClientId = CcmExec]
    2014-08-04 16:24:12:878 2748 bc0 COMAPI ---------
    2014-08-04 16:24:12:878 2748 bc0 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = CcmExec]
    2014-08-04 16:24:12:878  840 1438 Agent *************
    2014-08-04 16:24:12:878  840 1438 Agent ** START **  Agent: Finding updates [CallerId = CcmExec]
    2014-08-04 16:24:12:878  840 1438 Agent *********
    2014-08-04 16:24:12:878  840 1438 Agent   * Include potentially superseded updates
    2014-08-04 16:24:12:878  840 1438 Agent   * Online = Yes; Ignore download priority = Yes
    2014-08-04 16:24:12:878  840 1438 Agent   * Criteria = "(DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')"
    2014-08-04 16:24:12:878  840 1438 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-04 16:24:12:878  840 1438 Agent   * Search Scope = {Machine}
    2014-08-04 16:24:27:769  840 1438 PT +++++++++++  PT: Synchronizing server updates  +++++++++++
    2014-08-04 16:24:27:769  840 1438 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
    http://S-Syd-SCCM.xxx.xxx:80/ClientWebService/client.asmx
    2014-08-04 16:24:27:816  840 1438 PT WARNING: Cached cookie has expired or new PID is available
    2014-08-04 16:24:27:816  840 1438 PT Initializing simple targeting cookie, clientId = fcdcdbf8-529a-414d-9679-9bfbeac1626c, target group = , DNS name = server-util.xxx.xxx
    2014-08-04 16:24:27:816  840 1438 PT   Server URL =
    http://S-Syd-SCCM.xxx.xxx:80/SimpleAuthWebService/SimpleAuth.asmx
    2014-08-04 16:24:28:925  840 1438 Agent WARNING: Failed to evaluate Installed rule, updateId = {07AEE973-703C-4F27-83F1-3E764D9ED2C7}.202, hr = 80041010
    2014-08-04 16:25:12:270  840 1438 PT +++++++++++  PT: Synchronizing extended update info  +++++++++++
    2014-08-04 16:25:12:270  840 1438 PT   + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL =
    http://S-Syd-SCCM.xxx.xxx:80/ClientWebService/client.asmx
    2014-08-04 16:25:19:083  840 a4c AU Triggering Offline detection (non-interactive)
    2014-08-04 16:25:19:083  840 a4c AU #############
    2014-08-04 16:25:19:083  840 a4c AU ## START ##  AU: Search for updates
    2014-08-04 16:25:19:083  840 a4c AU #########
    2014-08-04 16:25:19:083  840 1438 Agent   * Added update {1E3A5101-3621-458B-B208-5ED11473EFFF}.101 to search result
     16:25:19:083  840 1438 Agent   * Added update {E8A49607-7F8E-47CB-A487-A7465B733A7D}.103 to search result
    2014-08-04 16:25:19:083  840 a4c AU <<## SUBMITTED ## AU: Search for updates [CallId = {08745433-443F-4A94-A1C7-44314DA6B63C}]
    2014-08-04 16:25:19:083  840 1438 Agent   * Added update {CF3B6409-EBE7-462B-89BE-CF0F9754139F}.101 to search result
    2014-08-04 16:25:19:099  840 1438 Agent Bundle contains no deployed children and thus is invalid.
    2014-08-04 16:25:19:099  840 1438 Agent Update {3FEFB63F-4DFC-49C4-85DB-D40DD6EA3F22}.102 is not a valid bundle. Not returning it.
    2014-08-04 16:25:19:114  840 1438 Agent   * Added update {D5F76FFF-AC16-4460-99FE-FB8334F65970}.101 to search result
    2014-08-04 16:25:19:146  840 1438 Agent   * Found 294 updates and 78 categories in search; evaluated appl. rules of 2660 out of 5182 deployed entities
    2014-08-04 16:25:19:739  840 1438 Agent *********
    2014-08-04 16:25:19:739  840 1438 Agent **  END  **  Agent: Finding updates [CallerId = CcmExec]
    2014-08-04 16:25:19:739  840 1438 Agent *************
    2014-08-04 16:25:19:786  840 1438 Agent *************
    2014-08-04 16:25:19:786  840 1438 Agent ** START **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 16:25:19:786  840 1438 Agent *********
    2014-08-04 16:25:19:786  840 1438 Agent   * Online = No; Ignore download priority = No
    2014-08-04 16:25:19:786  840 1438 Agent   * Criteria = "IsHidden=0 and IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and IsAssigned=1
    or IsHidden=0 and IsInstalled=1 and DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and IsAssigned=1 and RebootRequired=1"
    2014-08-04 16:25:19:786  840 1438 Agent   * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
    2014-08-04 16:25:19:786  840 1438 Agent   * Search Scope = {Machine}
    2014-08-04 16:25:19:802 2748 13ec COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = CcmExec]
    2014-08-04 16:25:20:036 2748 13ec COMAPI   - Updates found = 294
    2014-08-04 16:25:20:036 2748 13ec COMAPI ---------
    2014-08-04 16:25:20:036 2748 13ec COMAPI --  END  --  COMAPI: Search [ClientId = CcmExec]
    2014-08-04 16:25:20:036 2748 13ec COMAPI -------------
    2014-08-04 16:25:22:208  840 1438 Agent   * Found 0 updates and 78 categories in search; evaluated appl. rules of 251 out of 5182 deployed entities
    2014-08-04 16:25:22:302  840 1438 Agent *********
    2014-08-04 16:25:22:302  840 1438 Agent **  END  **  Agent: Finding updates [CallerId = AutomaticUpdates]
    2014-08-04 16:25:22:302  840 1438 Agent *************
    2014-08-04 16:25:22:349  840 4bc AU >>##  RESUMED  ## AU: Search for updates [CallId = {08745433-443F-4A94-A1C7-44314DA6B63C}]
    2014-08-04 16:25:22:349  840 4bc AU   # 0 updates detected
    2014-08-04 16:25:22:349  840 4bc AU #########
    2014-08-04 16:25:22:349  840 4bc AU ##  END  ##  AU: Search for updates [CallId = {08745433-443F-4A94-A1C7-44314DA6B63C}]
    2014-08-04 16:25:22:349  840 4bc AU #############
    2014-08-04 16:25:22:349  840 4bc AU Featured notifications is disabled.
    2014-08-04 16:25:22:349  840 1438 Report REPORT EVENT: {547C4CB0-3015-402C-A5DF-9B6B1F900864} 2014-08-04 16:25:19:724+1000 1 147 101 {00000000-0000-0000-0000-000000000000} 0 0 CcmExec Success Software
    Synchronization Windows Update Client successfully detected 294 updates.
    2014-08-04 16:25:22:349  840 1438 Report REPORT EVENT: {22C743C2-863C-4A90-87E3-C8A81850A45B} 2014-08-04 16:25:19:724+1000 1 156 101 {00000000-0000-0000-0000-000000000000} 0 0 CcmExec Success Pre-Deployment
    Check Reporting client status.

  • SCCM 2012 patch compliance issue

    Hi All,
    In my organization we are facing patch compliance issue.
    in my clients all patches are installed and sent the state messages to MP.however most of the clients are having 0% compliance are showing in report.
    in overall compliance report it is showing "compliance sate unknown" for most of the clients.
    done the software update scan cycle, no errors in WUAhandler.log and windowsupdate.log
    updatestore.log etc.files. however same location only few machines are showing 100% compliance and most of the machines are showing non-compliance (0% compliance)
    please help us to resolve the issue.
    Note: all machines are patches installed successfully. only report is showing "compliance state unknown"

    How much time are you allowing? State messages are only submitted every 15 minutes by the client and information in the console is summarized every 1 hour (both by default); i.e., none of this is instantaneous.
    Reports will reflect the up to info though. Have you directly examined WMI on a target system to verify it's patch compliance state?
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • WSUS Issues in SCCM 2012 environment

    Hi Folks
    I have a WSUS server running in a secure environment. Because i have no access to the internet from this server i use an upstream server for my update source. We have used another WSUS server as our upstream box for a while without issue but our company
    has now gone to SCCM 2012 and i so i am now using this as my update source. This works well with synchronisations working without issue.
    My problem is that within the wsus console the computers are showing with updates available but when i go to the computer and run windows update it states no updates are available. also looking in the windowsUpdate logs it states 0 updates found!!
    I thought this was because i was using a w2008R2 wsus server so i have built another wsus server based on w2012r2 and this has exactly the same results. if i point the server back to use my other wsus server as an upstream server it all works and updates
    are available on the computers.
    Has anybody else had this issue and more importantly is there a fix? i dont want to use sccm for updates direct so i need to get this working.
    my computers looking for updates are all w2008r2. my wsus server is w2008r2 and i also have a w2012r2 wsus server for testing. the sccm 2012 server is based on w2012r2 box all are x64
    thanks

    Hi,
    >>My problem is that within the wsus console the computers are showing with updates available but when i go to the computer and run windows update it states no updates are available.
    Please make sure that the Update is approved for the specific group and the client are in the correct group.
    Beside, please check if the update file has been downloaded on the WSUS server. The update will be available until it has been downloaded.
    Best Regards.
    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Adobe Creative Cloud Enterprise Deployment Issues using SCCM 2012 R2

    Hi,
    I have been trying to deploy Adobe Creative Cloud Enterprise to Windows 8.1 machines that are identical, using SCCM 2012 R2.
    The Adobe package seems fine, because it seems to deploy successfully to some machines. And SCCM 2012 R2 has been configured correctly, as I can deploy other software using it, and again, it deploys Adobe CC successfully to some of the machines.
    I have tried comparing the package that is downloaded on the test machine/client machine, with the original package on the distribution point, using Beyond Compare, and there are no differences.
    I have contacted Adobe Enterprise Support, and they asked me to send to them log files from Event Viewer, the msi installer, and other Adobe logs, from the machine that failed the deployment. However, after Adobe studying them, they told me that they could not identify any problems... Strange, because I could have sworn that I saw error 1603 pop up over 20 times on different machines indicating that the 'Set-up.dat' file had a problem with it.
    After all the testing on over 20 identical machines (same hardware/same software), using different configurations on SCCM 2012 R2 and the client machines, I still can't seem to have a reliable solution to deploying Adobe CC.
    The fact that it deploys successfully on one machine and fails on another, or sometimes deploy to two machines and fail on another (simultaneously), is something that I don't understand.
    Another thing is that, if I retry the deployment 10-15 times after it failed the first time, it might go through...
    Adobe Enterprise Support asked me if they could remote into a machine that failed the deployment to have a look at it and I agreed to that option, but it seems like my issue has been ignored because they never got back to me.
    Has anyone had this kind of problem or anything similar before?
    I need to be able to deploy this remotely to 100+ machines. So installing manually is not an option.
    Any help is appreciated.
    This was posted in the wrong section a few days ago. I'm hoping I can get some help here.
    Case Number: 1862659812
    UPDATE: I spoke to Adobe Customer Support and after 1.5 hours on the phone with a remote session going on, problem was still not solved or identified. Additional log files have been sent and now I'm waiting for a call back.

    Hi Robert,
    We seem to be having a very similar issue.  Our installs would randomly fail with error code 1603 and an error message about a fault in Set-up.dat.  Failure rate was near 95% on our 900 machines.  Adobe Support and Karl having been looking into our issues but so far no solution has been found.
    Having done a lot of investigating we've managed to deploy our package using a schedule task running as a domain admin.  This is a nasty solution and we don't intend on using this permanently, but we needed to get the package out.
    Are you seeing any of the following:
    Entries in PDApp.log:
    [FATAL] |  | ASU | DeploymentManager | DeploymentManager |  |  | 2900 | The Bootstrapper Process is (5).Stopping the installation process.
    [FATAL] |  | ASU | DeploymentManager | DeploymentManager |  |  | 2900 | The return code from the Adobe Installer Process is (33).Stopping the uninstallation process.
    [WARN] |  | ASU | DeploymentManager | DeploymentManager |  |  | 2900 | Failed to find the pdb database.
    [WARN] |  | ASU | DeploymentManager | DeploymentManager |  |  | 2900 | Failed to get the local payload database handle.
    Event Log:
    Faulting application name: Set-up.dat, version: 2.9.1.474, time stamp: 0x54e11f94
    Faulting module name: Set-up.dat, version: 2.9.1.474, time stamp: 0x54e11f94
    Exception code: 0xc0000005
    Fault offset: 0x000d7c52
    Faulting process id: 0xb40
    Faulting application start time: 0x01d072a073861622
    Faulting application path: \\server.name.path\Adobe CC\FullPackage\Build\ASU\Set-up.dat
    Faulting module path: \\server.name.path\Adobe CC\FullPackage\Build\ASU\Set-up.dat
    Report Id: c86d9216-de93-11e4-8284-782bcb99e284
    Faulting package full name:
    Faulting package-relative application ID:
    Installer Log
    Indicates it can't find the Media_db.  We noticed that the folder C:\Program Files (x86)\Common Files\Adobe\caps doesn't get created on the machines were the install fails, so error message is correct in that there isn't a Media_db.db.  Sysinterals Process Monitor seems to show that the setup tried to create the folder/files but they don't actually get created.  Copying a Media_db into the folder from another machine seems to allow the installation to almost finish, but unsurprisingly you end up with problems later on.

  • Past Due - Will be installed issue in SCCM 2012

    Deployment of an application task sequence after the initial OS deployment task sequence is working fine, but several application deployments that is deployed to a role collection does not
    install even if they are deployed required and deadline is passed. As you can see from print screen all the jobs is received by the agent, so the question is, why do they not start
    installing automatically?
    Checked the Computer Agent settings and all the settings were also intact including “Additional Software manages the deployment of application” setting was set to No so there
    is something else due to which this is not installing.
    Checked in the below post for the same issue
    http://blogs.msdn.com/b/rslaten/archive/2013/11/26/past-due-applications-not-installing-in-sccm-2012.aspx#comments
    as per it issue may be with Incorrect revision number within any of the task sequences
    targeted to a machine. Now how do I find the application with the incorrect revision number in any of the task sequences targeted to the machine?
    Also not sure how to go about verifying the correct revision numbers in the task sequences if this is the issue in my case
    Please suggest.

    Have you checked is there a maintenance window set? - No
    Also can they find the content on a DP? Yes
    Are the files present on the client in ccmcache? Yes

  • App v package distribution issue to sccm 2012 DP

    Hi,
    We are migrating app-v 4.6 packages to sccm 2012 , after importing the packages when we update DP its not copying the dependent scripts inside the appv package to Dp and hence when application launches it fails to launch the vb script.
    the script is made to run when shortcut is launched, but no vb script is copied to DP , but I have all files intact in source folder iyt just copies .sprj,xml,osd.
    Please suggest how to make all the files in package abcd.001 to get copied in DP.
    Does App-v package distribution is different from normal package.
    Thanks
    Shuaib

    Open up the app in the sequencer, add the file to your scripts folder. If the script requires to be run elevated, you'll want to use the Deployment config file and use Global publishing....
    If you don't need elevation you can use the User Config and won't need to publish globally.
    Fore more info and some examples, check this out:
    http://blogs.technet.com/b/appv/archive/2012/12/10/scripting-and-embedded-scripting-for-appv-5-0-dynamic-deployment-and-user-configuration-scripting.aspx
    PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog:
    rorymon.com Twitter: @Rorymon

  • OSDCOMputer name issue - MDT2013+SCCM 2012

    Hi , 
    I have setup Sequence table along with prefix, and a stored procedure to update the computeridentity table, all works fine it updates the sequence number and computer name  BUT 
    i am unable to get the OSDCOMPUTERNAME set to same name as computeridentity table has when its imaged with windows 7  it always sets to default MINIT-xxx name.
    i am using stand alone media created form SCCM 2012.
    Please suggest how to get the same machine name as updated in Computeridentity table. any settings to be done on CS.ini ?
    Thanks
    Shuaib

    You also need the sections to pull the information from the database.
    see this link which explains what happens
    http://www.windowsnetworking.com/articles-tutorials/windows-7/Deploying-Windows-7-Part16.html
    You will see multiple sections such as CSettings, RSettings etc which will need adding. I would sugest you configure your MDT instance as shown n the above post then copy the relevant sections rom your MDT CustomSettings.ini in to your SCCM CustomSettings.ini
    you have shown above.
    You obviously need to make sure you amend the priority list to include these new sections.
    I hope that makes sense?
    Thanks,
    Adam

Maybe you are looking for