Failed to install CM Client on computers located in untrusted site

Hello,
I deploy System Center 2012 SP1 Configuration Manager and successfully push client to Desktops/Servers, I read in TechNet that this scenario is supported:
"The client is on a domain computer that does not have a two-way forest trust with the site server and site system roles are not installed in the client's
forest"
In my case, I have servers in DMZ and those servers are member of domain created in DMZ, for security reason we can's create two-way trust with AD in the main site.
I found the following guides from blog.technet.com:
Cross Forest Support in ConfigMgr 2012 Part 2: Forest Discovery, Publishing, and Client
Push Installation.
Unfortunately I didn't found in TechNet what required ports to open between site system and DMZ to manage client in un-trusted forest and receive the following error what I add DMZ forest:
I open the following ports CM and AD in DMZ:
Outbound and inbound: TCP/UDP port 389
Outbound and inbound: TCP port 636
Outbound and inbound: TCP port 3268
Outbound and inbound: TCP port 3269
Outbound and inbound: TCP/UDP port 88 “User and Computer Authentication, Forest Level Trusts”.
Outbound and inbound: TCP and UDP 53 “User and Computer Authentication, Name Resolution”
Outbound and inbound: TCP and UDP 445 “User and Computer Authentication”
Outbound and inbound: TCP Dynamic “User and Computer Authentication”
Outbound and inbound: TCP and UDP 464 “User and Computer Authentication”
Outbound and inbound: UDP 137 “User and Computer Authentication”
Outbound and inbound: TCP 139 “User and Computer Authentication”
I Open the following ports between DMZ servers and CM
Outbound and inbound: File and Printer Sharing
Inbound: Windows Management Instrumentation (WMI)
Outbound: TCP Port 80 (for HTTP communication)
Outbound: TCP Port 443 (for HTTPS communication)
Outbound: TCP Port 10123
(for Client notification)
Inbound: TCP port 2701 (for Remote control)
Allow ICMP traffic (for client push installation to succeed)
Outbound and inbound: TCP port 445
(for Server Message Block (SMB) between the site server and client computer)
Outbound and inbound: TCP/UDP port 135
(for RPC endpoint mapper between the site server and the client computer)
Outbound and inbound: Dynamic ports RPC “49152 – 65535” (Dynamic ports for Windows 7, Windows 2008)
Outbound and inbound: Dynamic ports RPC “1025 – 5000” (Dynamic ports for Windows XP, Windows 2003)
Inbound: TCP port 1027
Outbound and inbound: TCP port 8530 and 8531
(for Software Update Point)
Abduljalil Abolzahab

Name resolution ok? Are you able to resolve the target domain from the computer where you're running the discovery? More details in Kent's post
http://blog.coretech.dk/kea/multi-forest-support-in-configmgr-2012-part-i-managing-clients-in-an-untrusted-forest/
Anoop C Nair -
@anoopmannur :: MY Site:
www.AnoopCNair.com ::
FaceBook:
ConfigMgr(SCCM) Page ::
Linkedin:
Linkedin<

Similar Messages

OSD Task Sequence fails to install SCCM client

Hello,
Our OSD task sequence fails to install the SCCM client with certain images.
The TS gets to the "Setup Windows and Configuration" step, during which it downloads all the necessary SCCM client files (silverlight, C++ redistributable, client.msi....etc.). At this point computer restarts and in never loads back into the
task sequence, instead it enters the minisetup (setup is starting services, setup is installing devices, setup is applying system settings...preparing computer for first use), after which the computer restarts and you are back at the CTR+ALT+Del screen.
The computer has joined the domain and has run all other steps but it has failed to install SCCM client. I can also see the leftovers of an incomplete TS under c:\_SMSTaskSequence
If we change the image specified under "Apply Operating System" step, everything works ok.
It appears there is something wrong with this particular image. Any ideas?
Logs show no errors. Let me know which logs you'd like me to post (and from which location)
There is no ccm folder under c:\windows

Hoping you are using ConfigMgr 2012 R2. If a client machine Join to Domain and doesn't proceed with other steps and not installing the CCM client, then problem seems to be with the Image.Do you have any RunOnce registry setting specified in the Image? You
can mount the Image and check those settings.
RunOnce Key Reference :
https://msdn.microsoft.com/en-us/library/windows/desktop/aa376977(v=vs.85).aspx
If the above key is present in the Image, TS Engine won't resume after the reboot.
You need to use a new variable "SMSTSPostAction" at the end of the Task Sequence, to add your custom actions.
The above variable is applicable in CM 2012 SP1 and R2.
Thanks, Senthil. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. Click on "vote as Helpful" if you feel this post helpful to you. This
can be beneficial to other community members reading the thread.

OSD task sequence fails to install application on workgroup computers

Environment:
Windows Server 2008 R2 Standard, SP1
SCCM 2012 R2
Issue:
OSD TS fails to install applications from local DP on Windows 8.1 x86 workgroup computers. Same applications install fine from OSD/TS on domain computers. A standard push installs fine when deployed outside of OSD/TS to workgroup, or domain computer.
- “SMSMP=managementpoint.domain.com” is included in ‘Setup Windows and ConfigMgr’ installation poperties
- “Allow clients to connect anonymously” enable on DP system role, HTTP client communication
- Network Access Account is configured and authentication is confirmed
- Have confirmed no overlapping boundaries
- IIS anonomys and Windows authentication is enabled for SMS_DP_SMSPKG$, anon authentication creds set to "Specific user: IUSR"
After OSD deployment to workgroup computer completes -
AppEnforce.log is missing
smsts.log
App install failed.
Setting TSEnv variable '_TSAppInstallStatus'='Error'
Setting TSEnv variable 'SMSTSInstallApplicationJobID__ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/Application_486d99ca-817a-4600-889e-50f8e4f91592'=''
Completed installation job.
Step 3 out of 3 complete
Install application action failed: 'Microsoft_Office_Professional_2013_v15.0.4420.1017_CA-copy'. Error Code 0x80004005
CITaskMgr.log
State transition to (Failure), Error(0x87d00222) : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_f7f47522-3654-43b0-95ef-55198d957bdf.8..Install.ContentDownload)
Initiating task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15 (Microsoft_Office_Professional_2013_v15.0.4420.1017_CA_x86_P_PW) for target: , consumer: {634F5894-5AB1-4D48-83F7-603E94FE1F3F}
Initiating content download : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
State transition to (InProgress), Param(0) : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
State transition to (InProgress), Param(0) : CTaskConsumer(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15.{CC8A099F-8EC4-4484-9191-53FFC1775D18})
Successfully initiated contents download request {5237AC77-651A-4723-AF91-78A1C0497DBD} : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
Release task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15 for target: , consumer {634F5894-5AB1-4D48-83F7-603E94FE1F3F}
Release task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/Application_486d99ca-817a-4600-889e-50f8e4f91592.22 for target: , consumer {502180D3-CA3B-4657-AD32-D43F952A6576}
Release task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/RequiredApplication_486d99ca-817a-4600-889e-50f8e4f91592.22 for target: , consumer {1A485BC4-DD0C-4659-B034-8D7F9B436B3A}
State transition to (Failure), Error(0x87d00222) : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
ContentTransferManager.log
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} (corresponding DTS job {901A1D57-D363-45FE-A4F4-8509F5556D53}) started download from 'http://HOUMGMT49.APACHECORP.COM/SMS_DP_SMSPKG$/Content_ed232f49-224b-48cc-9c01-0ff31bae851e.1' for full content download.
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM encountered error processing reply from DTS. Code 0x87d00215
Cancelled CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E}
Two workarounds below (Not acceptable solutions)
*I can add a pause script after Setup Windows and ConfigMgr sequence, wait 5-10 minutes and the applications will install. I assume this is because the CM client has time to fully provision.
* I can add the anon ‘IUSR’ account to the local administrators group on the DP and all applications install (without the pause script mentioned above). I can reproduce the issue repeatedly by removing and adding the anon account.
Any help with this would be greatly appreciated…
Also, I come from a CM 2007 background and somewhat new to CM 2012. Should WebDAV and/or URL Authorization be installed and configured on the DP? According to MS tech support “No”. However, I’ve seen several SCCM 2012 guides on the web that say it should
be installed.
Regards
David K. Harrison

Locationservices.log, CIDownloader.log, CIagent.log, DataTransferService.log also need to be checked. We need to find out what credential the Client trys to use when it downloads content from DP.
Juke Chou
TechNet Community Support

System failed after install essbase client on 11.1.2.3

I have done a install and config of 11.1.2.3 for essbase and planning
after completion I run the diagnostics green light all the way
i install the EAS Client Restart the server and then everything fails
Diagnostics
Generated on 08/31/2013 00:51 AM
Validation run on NextLevelServer
Build version: 11.1.2.3.0.8719
EPM System Diagnostics info: 11.1.2.3.0 drop 27 build 8414-on-03/21/2013 10:40 AM
OS name: Windows Server 2008 R2
OS version: 6.1
EPM System Instance location: C:\Oracle\Middleware\user_projects\epmsystem1
Test Status Service Test Description Duration
Hyperion Foundation
FAILED Audit Validating that Audit has been initialized
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
4 seconds
FAILED CES Validating that CES has been initialized
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
4 seconds
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Web Server: Pending
Configure Database: Pending
Configure: Pending
Configure Common Settings: Pending
Configure Oracle Configuration Manager: Pending
0 seconds
FAILED CSS Validating that CSS has been initialized
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
4 seconds
FAILED EXT: External Authentication Checker execution failed.
Error: EPMCSS-00000: Failed to process request. Internal server error. Refer EPM Shared Services Security log file for related errors.
Recommended Action: Refer to the validation logs for exception details.
8 seconds
FAILED HUB Validating that HUB has been initialized
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
4 seconds
PASSED WEB: Permissions All HIT entries are present in system-jazn-data.xml
0 seconds
FAILED LCM Validating that LCM has been initialized
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
4 seconds
FAILED Single Sign-On Checker execution failed.
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
2 seconds
FAILED LNK: Registry Checking that all components in the registry have a link to host
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
0 seconds
PASSED CFG: Environment Checking whether system path variable length exceeds 2,000
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component SHARED_SERVICES_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
FAILED Registry Validating that Registry has been initialized
Error: Checker execution failed.
Recommended Action: Refer to the validation logs for exception details.
4 seconds
EPM System Registry
Essbase / Essbase
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Essbase Server: Pending
Register with Shared Services: Pending
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Essbase / Essbase Administration Services
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Database: Pending
Register with Shared Services: Pending
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_ADMINISTRATION_SERVICES_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Essbase / Essbase Integration Services
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Essbase Integration Services: Pending
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_INTEGRATION_SERVER_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Essbase / Essbase Studio
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Database: Pending
Register with Shared Services: Pending
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_STUDIO_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Essbase / Provider Services
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component ESSBASE_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Foundation / Calculation Manager
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Database: Pending
Register with Shared Services: Pending
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component CALC_MANAGER_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Foundation / Performance Management Architect
FAILED AppMgrLoadAdf Launch external checker with next command: C:\Oracle\Middleware\EPMSystem11R1\..\jdk160_35/bin/java -DEPM_ORACLE_HOME=C:\Oracle\Middleware\EPMSystem11R1 -DEPM_ORACLE_INSTANCE=C:\Oracle\Middleware\user_projects\epmsystem1 -Djava.util.logging.config.class=oracle.core.ojdl.logging.LoggingConfiguration -Doracle.core.ojdl.logging.config.file=C:\Oracle\Middleware\user_projects\epmsystem1\config\validation\11.1.2.0\validationTool-logging.xml com.oracle.epm.epma.config.validations.appmanager.AppMgrLoadAdf
Error: AppMgrLoadAdf failed on initialization. Please check all registry information is valid and that HSS is running.
Recommended Action: Make sure external checker is working.
11 seconds
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Create EPMA Virtual Directory: Pending
Configure Database: Pending
Register with Shared Services: Pending
Configure: Pending
0 seconds
FAILED DimEditorLoadAdf Launch external checker with next command: C:\Oracle\Middleware\EPMSystem11R1\..\jdk160_35/bin/java -DEPM_ORACLE_HOME=C:\Oracle\Middleware\EPMSystem11R1 -DEPM_ORACLE_INSTANCE=C:\Oracle\Middleware\user_projects\epmsystem1 -Djava.util.logging.config.class=oracle.core.ojdl.logging.LoggingConfiguration -Doracle.core.ojdl.logging.config.file=C:\Oracle\Middleware\user_projects\epmsystem1\config\validation\11.1.2.0\validationTool-logging.xml com.oracle.epm.epma.config.validations.dimeditor.DimEditorLoadAdf
Error: DimEditorLoadAdf failed on initialization. Please check all registry information is valid and that HSS is running.
Recommended Action: Make sure external checker is working.
12 seconds
FAILED EnumApplications Launch external checker with next command: C:\Oracle\Middleware\EPMSystem11R1\..\jdk160_35/bin/java -DEPM_ORACLE_HOME=C:\Oracle\Middleware\EPMSystem11R1 -DEPM_ORACLE_INSTANCE=C:\Oracle\Middleware\user_projects\epmsystem1 -Djava.util.logging.config.class=oracle.core.ojdl.logging.LoggingConfiguration -Doracle.core.ojdl.logging.config.file=C:\Oracle\Middleware\user_projects\epmsystem1\config\validation\11.1.2.0\validationTool-logging.xml com.oracle.epm.epma.config.validations.repository.EnumApplications
Error: EnumApplications failed on initialization. Please check all registry information is valid and that HSS is running.
Recommended Action: Make sure external checker is working.
11 seconds
FAILED EnumDataSyncs Launch external checker with next command: C:\Oracle\Middleware\EPMSystem11R1\..\jdk160_35/bin/java -DEPM_ORACLE_HOME=C:\Oracle\Middleware\EPMSystem11R1 -DEPM_ORACLE_INSTANCE=C:\Oracle\Middleware\user_projects\epmsystem1 -Djava.util.logging.config.class=oracle.core.ojdl.logging.LoggingConfiguration -Doracle.core.ojdl.logging.config.file=C:\Oracle\Middleware\user_projects\epmsystem1\config\validation\11.1.2.0\validationTool-logging.xml com.oracle.epm.epma.config.validations.repository.EnumDataSyncs
Error: EnumDataSyncs failed on initialization. Please check all registry information is valid and that HSS is running.
Recommended Action: Make sure external checker is working.
11 seconds
FAILED EnumDimensions Launch external checker with next command: C:\Oracle\Middleware\EPMSystem11R1\..\jdk160_35/bin/java -DEPM_ORACLE_HOME=C:\Oracle\Middleware\EPMSystem11R1 -DEPM_ORACLE_INSTANCE=C:\Oracle\Middleware\user_projects\epmsystem1 -Djava.util.logging.config.class=oracle.core.ojdl.logging.LoggingConfiguration -Doracle.core.ojdl.logging.config.file=C:\Oracle\Middleware\user_projects\epmsystem1\config\validation\11.1.2.0\validationTool-logging.xml com.oracle.epm.epma.config.validations.dimeditor.EnumDimensions
Error: EnumDimensions failed on initialization. Please check all registry information is valid and that HSS is running.
Recommended Action: Make sure external checker is working.
11 seconds
FAILED PMAJ: EPMA Service Validating whether jobmanager service is available.
Error: EPMVLD-01006: The EPMA service is not available. Check the log files for details.
Recommended Action: Check that the server is running.
0 seconds
FAILED DSC: EPMA DimensionServer Server Configuration Validating EPMA Dimension Server hyperion-bpma-server startup... Failed...
Error: Dimension server was not found in Shared Services Registry.
Recommended Action: Check application is started.
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component EPMA_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Foundation / Workspace
PASSED CFG: Configuration Validating that configuration tasks have been completed
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component WORKSPACE was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
PASSED REG: Registry All links are present in the registry.
0 seconds
Planning
WARNING CFG: Configuration Validating that configuration tasks have been completed
EPMVLD-01004: The following configuration tasks have not been completed:
Configure Database: Pending
Register with Shared Services: Pending
Configure: Pending
0 seconds
FAILED REG: Configuration Checking if product has only one product node in registry.
Error: Component PLANNING_PRODUCT was not found in the registry.
Recommended Action: Try to re-config product.
0 seconds
Test start time: 08/31/2013 00:49 AM
Test end time: 08/31/2013 00:51 AM
Total test duration: 102 seconds
Please advise
this is the second time this has happen

What I am doing is again running the Start EPM system from Foundation services
and then I will check to see if the service are up
Thanks I try that
Restarted the epmsystem
but the Oracle database is down
have to find out how to start
database error
Database Instance: Hyperion
Enterprise Manager is not able to connect to the database instance. The state of the components are listed below. Page Refreshed Aug 31, 2013 2:19:45 AM EDT
Database Instance
Host localhost
Port 1521
SID Hyperion
Oracle Home C:\app\Administrator\product\11.2.0\dbhome_1
Listener
Status Down
Host localhost
Port 1521
Name LISTENER
Oracle Home C:\app\Administrator\product\11.2.0\dbhome_1
Location C:\app\Administrator\product\11.2.0\dbhome_1\network\admin
Details TNS-12541: TNS:no listener
Agent Connection to Instance
Status Failed
Details ORA-12541: TNS:no listener (DBD ERROR: OCIServerAttach)
SQL*Plus: Release 11.2.0.1.0 Production on Sat Aug 31 02:50:09 2013
Copyright (c) 1982, 2010, Oracle. All rights reserved.
SQL> Connected to an idle instance.
SQL> SQL> ORA-00119: invalid specification for system parameter LOCAL_LISTENER
ORA-00132: syntax error or unresolved network name 'LISTENER_HYPERION'
Disconnected
i went to server server and start the oracle listener
but the database will not start up
Please advise

Crystal Reports 2008 Fails to Install on Client

I have installed Crystal Reports 2008 on the Server which is working very well.
When i Log to SAP Business One from a Client Workstation the message 'Add-On Executable Not Found' is displayed. I have tried this from Different Workstations and get the same message.
I have followed all the 17 Installation Instructions on Crystal Add-On for SAP Business One Version 2.0.06.
Logging a Support Log to SAP does not help Unfortunately SAP at this time we are unable to provide support on this add-on.
I would appreciate if someone could help me and know how to overcome is issue.

hi,
Check this links
"Add-On executable file not found"
Add-on executable file not found
Jeyakanthan

Problem installing SCCM client in remote untrusted forest

Hi,
My configuration is :
My network is in two parts : intranet and a DMZ. In the DMZ there is another forest and domain. There is no trust between the forest in the DMZ and the internal network. I configured the remote forest in SCCM with a user account that has Domain Admin acces
in the DMZ forest/domain.
The primary site server is located in the internal part of my network. SQL is installed on a remote server. Management point, distribution point, Fallback Status Point roles are installed on the primary site server. SMS Provider is installed on the primary
site server.
In the DMZ part, I have a management point, distribution point installed on one server.
The forest discovery works fine. I can query AD in the remote forest (DMZ).
I have a problem installing the SCCM client on computers located in the remote forest with client push or with the command line.
CCMSETUP.EXE /MP:DMZ site server /DP:DMZ site server /FSP: primary site server SMSSITECODE:SIT
In CCMSetup.log I can see that the client try to communicate with my DMZ site server but it reverts to the management point and distribution point located in the internal part of the network. The installation fails and will try in 10 minutes.
Do anyone has seen this problem before? Am I missing something? Could it be a configuration issue?
Could you help me whit this please?
Thanks in advance for your time!
Jacques

Does the client installation work when you install the client manually on the untrusted domain client? What does the CCM.log say on the site server?
Have you double checked the firewall ports for the client push installation? The ports needed for the client push to work are as follows (from the site server to the client):
SMB - TCP 445
RPC Endpoint Mapper - TCP 135 / UDP 135
RPC Dynamic Ports
And to Management Point:
HTTP - TCP 80 (When using HTTP)
HTTPS - TCP 443 (When using HTTPS)
Also a quote from
TechNet: "In addition to the ports listed in the following table, client push installation also uses Internet Control Message Protocol (ICMP) echo request messages from the site server to the client computer to confirm whether the client
computer is available on the network. ICMP is sometimes referred to as TCP/IP ping commands. ICMP does not have a UDP or TCP protocol number, and so it is not listed in the following table. However, any intervening network devices, such as firewalls, must
permit ICMP traffic for client push installation to succeed."

WindowsUpdateAgent30-x64.exe fails to install during OSD

I have a Task Sequence for Windows 7 x64 that is failing during the ConfigMgr client installation. I am using a vanilla install.wim from the Windows 7 Enterprise SP1 x64 ISO. It's the base Task Sequence and fails to install the ConfigMgr client
as the Windows Update Agent is failing. It does not fail when using a Hyper-V guest but fails on all newer Dell laptop and desktop models. I cannot find the error codes given in the logs below to determine the cause. Any help would be appreciated.
smsts.log:
<![LOG[Failed to install SMS Client (0x80004005)]LOG]!><time="11:56:52.844+360" date="01-16-2015" component="OSDSetupHook" context="" type="3" thread="3052" file="basesetuphook.cpp:1506">
WindowsUpdate.log
2015-01-22 17:10:51:321 1660 fc8 Misc =========== Logging initialized (build: 7.4.7600.226, tz: -0600) ===========
2015-01-22 17:10:51:321 1660 fc8 Misc = Process: c:\cd1cca7cd081047701f51564a370\wusetup.exe
2015-01-22 17:10:51:321 1660 fc8 Setup Windows Update Client standalone setup : resource dll path is c:\cd1cca7cd081047701f51564a370\en\wusetup.exe.mui
2015-01-22 17:10:51:321 1660 fc8 Setup Evaluating CBS package "c:\cd1cca7cd081047701f51564a370\WUClient-SelfUpdate-Core-TopLevel.cab"
2015-01-22 17:10:51:415 1660 fc8 Setup Package is not applicable
2015-01-22 17:10:51:415 1660 fc8 Setup Evaluating CBS package "c:\cd1cca7cd081047701f51564a370\WUClient-SelfUpdate-ActiveX.cab"
2015-01-22 17:10:51:431 1660 fc8 Setup Package is not applicable
2015-01-22 17:10:51:431 1660 fc8 Setup Evaluating CBS package "c:\cd1cca7cd081047701f51564a370\WUClient-SelfUpdate-Aux-TopLevel.cab"
2015-01-22 17:10:51:571 1660 fc8 Setup Package is not applicable
2015-01-22 17:10:51:571 1660 fc8 Setup No packages to install
2015-01-22 17:10:53:193 1660 fc8 Setup wusetup has finished.
Exit code is 17. Reboot is NOT needed
ccmsetup.log
<![LOG[C:\WINDOWS\ccmsetup\WindowsUpdateAgent30-x64.exe is Microsoft trusted.]LOG]!><time="10:28:02.131+360" date="01-19-2015" component="ccmsetup" context="" type="1" thread="3032" file="util.cpp:1520">
<![LOG[Installing file 'C:\WINDOWS\ccmsetup\WindowsUpdateAgent30-x64.exe' with options '/quiet /norestart'.]LOG]!><time="10:28:02.131+360" date="01-19-2015" component="ccmsetup" context="" type="1"
thread="3032" file="manifest.cpp:2189">
<![LOG[File 'C:\WINDOWS\ccmsetup\WindowsUpdateAgent30-x64.exe' returned failure exit code 23. Fail the installation.]LOG]!><time="10:28:03.570+360" date="01-19-2015" component="ccmsetup" context=""
type="3" thread="3032" file="manifest.cpp:2239">
<![LOG[InstallFromManifest failed 0x80070017]LOG]!><time="10:28:03.570+360" date="01-19-2015" component="ccmsetup" context="" type="3" thread="3032" file="ccmsetup.cpp:7202">
Thanks

When running the WUA from the ccmsetup folder on failed machines I am getting the error:
Windows Update Agent Installer encountered unrecoverable error.
I am using the default WUA from ConfigMgr 2012 R2.
I have also tried manually installing the newer version from
http://blogs.technet.com/b/configmgrteam/archive/2014/07/14/how-to-install-the-windows-update-agent-on-client-computers.aspx which succeeds on machines that fail on the original. But I don't know how I would integrate this update (see note)
I also tried downloading the same version as what is from the default install of ConfigMgr 2012 R2 from
https://support.microsoft.com/kb/949104/en-us?wa=wsignin1.0 and it fails with the same error when ran on failed machines.
Note: I am ONLY using the install.WIM from the Windows 7 Enterprise SP1 x64 ISO. I am not doing a build and capture. I have also not integrated any updates into the WIM with offline servicing. I have configured a TS like this in the
past with no issue on Dell machines. The Hyper-V VM works perfect but it fails on all Dell desktops and laptops which are all newer models. This is a very basic OSD TS. All the latest drivers for the models have been imported and wmi conditions
are applying the driver packages. I have also tried letting it install any driver it wants and the error is the same.
Thanks

QuickOffice Pro fails to Install on Symbian Anna

I have a Nokia N8 with Symbian Anna. I purchased QuickOffice Pro from Ovi Store and it downloads but then fails to install. The trial version from the QuickOffice site also fails to install. Before I purchased QuickOffice I deleted the version of QuickOffice that came with Symbian Anna.
Now I am left with no QuickOffice even though I have paid for it.
Can someone suggest what I should do so I can install the QuickOffice Pro that I have paid for.
Jen
Solved!
Go to Solution.

I emailed quickoffice tech support and they gave me a solution that works.
My unit is a C6-01 that I recently updated (successfully) to symbian anna including the 2 updates that came later.
Here's how I did it as per their advice:
Before you start, download the .sis file for the quickoffice pro version 7 (39) that you purchased from Quickoffice. You will use this later.
1. backup your phone using nokia ovi suite, if you want to shorten this, backup only the important data like phone contacts, device settings, applications settings, calender etc. You can do away with the backup of music, picture and video files as those take time.
2. reset your device as follows which I quote " At the main screen, enter *#7370# – The default lock code is 12345. This will restore the device to its original state, removing all user data, contacts, and third-party applications you may have installed."
this will tell you that the reset will also erase the contents of your memory card, if you dont want your memory card erased, remove it before resetting, then proceed to resetting. If you have entered your own lock code, use that instead of the default lock code 12345.
after you enter the lock code, the phone will shut down and reboot with a white screen only. Wait for it to compelete as it takes some time.
3. After the resetting is complete, all softwares that you installed will be temporarily gone (since you took out the memory card) but you can recover it later.
4. connect your cell to your PC and use Nokia Ovi suiet to install the Quickoffice pro 7 that you downloaded.
this should install the quickoffice pro successfully.
Check if the quickoffice pro is working.
5.then re-install your memory card which you removed in step 2. The restore the contents of your phone using OVI suite.
6. Finally, update your phone software using ovisuite. It will say that it has 2 or 3 updates pending. Just proceed with the update since that update will not erase the quickoffice pro that is already installed.
that's it. you should have a working copy of QUickoffice pro 7.
PLEASE TAKE NOTE: This worked on my Nokia C6-01 updated to Symbian Anna. I cannot speak for other nokia models.
I hope this helps.

Clients finds updates that is not deployed and fails to install them! Code: 80242006

Hello!
I have SCCM 2007 SP2 R2 and trying to setup the Software Update Point!.
The weird thing is that the computers finds updates that is not deployed or not even downloaded and tries to install them but the fail with the error code: 80242006.
See Pic:
http://img51.imageshack.us/img51/3180/errorjo.jpg
Some of those updates in the picture actually are downloaded and deployed but many of them are not.
"Computer Configuration --> Administrative Templates --> Windows Update --> Specify Intranet Microsoft Update Service Location" is pointing to our SCCM.
"Install Software Uppdates" in Task Sequance are disable.
The Update package is distrubuted to all DPs
Why does my computer find updates that is not is deployed or downloaded and why does it fail to install those that are?
Where do i start the troubleshoot?
// Clint eastwood!

First check the windowsupdate.log and see which WSUS server that is being used. A Configmgr controlled client will not install non-deployed updates.
Kent Agerlund | My blogs: blog.coretech.dk/keaand
SCUG.dk/| Twitter:
@Agerlund| Linkedin: Kent Agerlund
Hi!
I Reinstalled the computer through our Task Sequence and when i logged in the first time all the failed updates where there!
http://www.2shared.com/file/eZ_CYzDC/WindowsUpdate.html
I Have uploaded the WindowsUpdate.log
Some interesting things from the log:
2012-03-27 17:12:43:808 1008 848 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2012-03-27 17:12:43:808 1008 848 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2012-03-27 17:12:44:931 1008 848 PT WARNING: Cached cookie has expired or new PID is available
2012-03-27 17:12:44:931 1008 848 PT WARNING: PTWarn: Anonymous plug-in skipped for WU
2012-03-27 17:12:46:478 2584 a1c Misc =========== Logging initialized (build: 7.1.6001.65, tz: +0200) ===========
2012-03-27 17:12:46:478 2584 a1c Misc = Process: c:\bc396c964f9a1206ade01b43a1\wusetup.exe
2012-03-27 17:12:46:478 2584 a1c Setup Evaluating CBS package "c:\bc396c964f9a1206ade01b43a1\WUClient-SelfUpdate-Core-TopLevel.cab"
2012-03-27 17:12:47:823 2584 a1c Handler FATAL: UH: 0x8007047f: CreatePackage failed in CCbs::CreatePackage
2012-03-27 17:12:47:823 2584 a1c Setup WARNING: Failed to evaluate applicability, will try to install anyway, error = 0x8007047F
2012-03-27 17:12:47:823 2584 a1c Setup Evaluating CBS package "c:\bc396c964f9a1206ade01b43a1\WUClient-SelfUpdate-ActiveX.cab"
2012-03-27 17:12:47:823 2584 a1c Handler FATAL: UH: 0x8007047f: CreatePackage failed in CCbs::CreatePackage
2012-03-27 17:12:47:823 2584 a1c Setup WARNING: Failed to evaluate applicability, will try to install anyway, error = 0x8007047F
2012-03-27 17:12:47:823 2584 a1c Setup Evaluating CBS package "c:\bc396c964f9a1206ade01b43a1\WUClient-SelfUpdate-Aux-TopLevel.cab"
2012-03-27 17:12:47:854 2584 a1c Handler FATAL: UH: 0x8007047f: CreatePackage failed in CCbs::CreatePackage
2012-03-27 17:12:47:854 2584 a1c Setup WARNING: Failed to evaluate applicability, will try to install anyway, error = 0x8007047F
2012-03-27 17:12:47:854 2584 a1c Setup wusetup has finished. Exit code is 47f. Reboot is NOT needed
2012-03-27 17:13:11:539 1008 848 Agent WARNING: Failed to evaluate Installed rule, updateId = {818701AF-1182-45C2-BD1E-17068AD171D6}.101, hr = 80242013
2012-03-27 17:13:12:337 1008 848 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-03-27 17:13:12:337 1008 848 Misc Microsoft signed: Yes
2012-03-27 17:13:12:384 1008 848 Misc Validating signature for C:\Windows\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\muv4wuredir.cab:
2012-03-27 17:13:12:384 1008 848 Misc Microsoft signed: Yes
2012-03-27 17:13:12:384 1008 848 PT +++++++++++ PT: Synchronizing extended update info +++++++++++
2012-03-27 17:13:12:384 1008 848 PT + ServiceId = {9482F4B4-E343-43B6-B170-9A65BC822C77}, Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/secu/2011/01/windows6.1-kb2475792-x64_2e8f675625883458482042e128f54167f0193f9b.msu for file Lo9nViWINFhIIELhKPVBZ/AZP5s= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/secu/2011/01/windows6.1-kb2425227-x64_0749e0e8531479e1de9347fe584e61d43c209c0f.msu for file B0ng6FMUeeHek0f+WE5h1DwgnA8= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/secu/2011/01/windows6.1-kb2485376-x64_7082a10a94b6cfffdd28f5f57f02e15a5345f5a7.msu for file cIKhCpS2z//dKPX1fwLhWlNF9ac= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/dflt/2011/02/4114643_f51f1bdeb794bd3966e7fc1745b9f697584b6912.cab for file 9R8b3reUvTlm5/wXRbn2l1hLaRI= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/dflt/2011/02/4114639_25270be196f84651a08b6578559a014e067b04b9.cab for file JScL4Zb4RlGgi2V4VZoBTgZ7BLk= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/dflt/2011/02/4114417_7f54b04997e2e7a214de150fed8cbec149c31011.cab for file f1SwSZfi56IU3hUP7Yy+wUnDEBE= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/dflt/2011/02/4114242_dc45445930326e31180748cd5a2afa8f575c61f5.cab for file 3EVEWTAybjEYB0jNWir6j1dcYfU= when file has not been previously added to the datastore
2012-03-27 17:13:13:948 1008 848 DtaStor WARNING: Attempted to add URL http://download.windowsupdate.com/msdownload/update/software/secu/2011/01/windows6.1-kb2479628-x64_a774713ef62d45373a08d4a7c0acfa18e8ec87c8.msu for file p3RxPvYtRTc6CNSnwKz6GOjsh8g= when file has not been previously added to the datastore
2012-03-27 17:13:16:624 1008 848 Agent * Found 103 updates and 17 categories in search; evaluated appl. rules of 489 out of 647 deployed entities
I guess the computer is still in the OS installation during this time.
Then 13 Minutes after it finds our sccm:
2012-03-27 17:26:07:641 980 c70 Agent *********** Agent: Refreshing global settings cache ***********
2012-03-27 17:26:07:641 980 c70 Agent * WSUS server: http://<SCCM-SERVER>:8530 (Changed)
2012-03-27 17:26:07:641 980 c70 Agent * WSUS status server: http://<SCCM-SERVER>:8530 (Changed)
2012-03-27 17:26:07:641 980 c70 Agent * Target group: (Unassigned Computers) (Unchanged)
2012-03-27 17:26:07:641 980 c70 Agent * Windows Update access disabled: No (Unchanged)
2012-03-27 17:26:07:641 980 c70 AU AU received policy change subscription event
2012-03-27 17:26:07:641 980 c70 AU Sus server changed through policy.
2012-03-27 17:26:07:641 980 c70 AU AU Refresh required....
2012-03-27 17:26:07:641 980 c70 AU AU setting next detection timeout to 2012-03-27 15:26:07
2012-03-27 17:26:07:656 980 c70 AU Need to reset accelerated install required state
2012-03-27 17:26:07:656 980 c70 AU Accelerate Install required state reset
2012-03-27 17:26:07:656 980 c70 AU Auto-approving update for download, updateId = {4AE85C00-0EAA-4BE0-B81B-DBD7053D5FAE}.104, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
2012-03-27 17:26:07:656 980 c70 AU Auto-approving update for download, updateId = {C5306702-92EC-4E99-9C77-2B70FB60078B}.101, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
2012-03-27 17:26:07:656 980 c70 AU Auto-approving update for download, updateId = {C5171A07-B024-44B4-B74A-A2EC2EEC177C}.102, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
2012-03-27 17:26:07:656 980 c70 AU Auto-approving update for download, updateId = {1FE1AC0A-7B22-470B-A317-5DA507385409}.101, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
2012-03-27 17:26:07:656 980 c70 AU Auto-approving update for download, updateId = {609AEF10-0A3C-4484-BD38-86BB38E3EFA3}.104, ForUx=0, IsOwnerUx=0, HasDeadline=0, IsMinor=0
2012-03-27 17:26:07:656 980 c70 AU Auto-approved 65 update(s) for download (NOT for Ux)
This is the Updates that i see when i log on for the first time nad all of them is Failed! Still, Many of those updates does not exist on the SCCM server.
And here comes the error:
2012-03-27 17:26:07:937 980 914 Agent WARNING: fail to get update deployments with error 0x80248007
2012-03-27 17:26:07:937 980 a10 Agent WARNING: Failed to get deployment data from data store, error 80248007
2012-03-27 17:26:07:937 980 914 DnldMgr *************
2012-03-27 17:26:07:937 980 914 DnldMgr ** START ** DnldMgr: Downloading updates [CallerId = AutomaticUpdates]
2012-03-27 17:26:07:937 980 a10 AU WARNING: GetUpdateDeployment3 failed, error = 0x80248007
2012-03-27 17:26:07:937 980 914 DnldMgr *********
2012-03-27 17:26:07:937 980 914 DnldMgr * Call ID = {B6C9F0ED-9900-42BC-9BBE-61ADE865CADC}
2012-03-27 17:26:07:937 980 914 DnldMgr * Priority = 2, Interactive = 0, Owner is system = 1, Explicit proxy = 0, Proxy session id = -1, ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2012-03-27 17:26:07:937 980 914 DnldMgr * Updates to download = 1
2012-03-27 17:26:07:937 980 914 Agent * Title = Security Update for Windows 7 for x64-based Systems (KB2584146)
2012-03-27 17:26:07:937 980 914 Agent * UpdateId = {4AE85C00-0EAA-4BE0-B81B-DBD7053D5FAE}.104
2012-03-27 17:26:07:937 980 914 Agent * Bundles 1 updates:
2012-03-27 17:26:07:937 980 914 Agent * {112FA241-E8C9-4EE7-A8B4-D3A4C65F7FEB}.102
2012-03-27 17:26:07:953 980 c70 AU AU received handle event
2012-03-27 17:26:07:984 980 914 PT +++++++++++ PT: Synchronizing file locations +++++++++++
2012-03-27 17:26:07:984 980 914 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://<SCCM-SERVER>:8530/ClientWebService/client.asmx
2012-03-27 17:26:10:652 980 914 PT WARNING: GetFileLocations failure, error = 0x8024400D, soap client error = 7, soap error code = 300, HTTP status code = 200
2012-03-27 17:26:10:652 980 914 PT WARNING: SOAP Fault: 0x00012c
2012-03-27 17:26:10:652 980 914 PT WARNING: faultstring:Server was unable to read request. ---> There is an error in XML document (1, 369). ---> The string '' is not a valid AllXsd value.
2012-03-27 17:26:10:652 980 914 PT WARNING: ErrorCode:(null)(0)
2012-03-27 17:26:10:652 980 914 PT WARNING: Message:(null)
2012-03-27 17:26:10:652 980 914 PT WARNING: Method:(null)
2012-03-27 17:26:10:652 980 914 PT WARNING: ID:(null)
2012-03-27 17:26:10:652 980 914 PT WARNING: PTError: 0x8024400d
2012-03-27 17:26:10:652 980 914 PT WARNING: GetFileLocations_WithRecovery failed: 0x8024400d
2012-03-27 17:26:10:652 980 914 PT WARNING: PTError: 0x8024400d
2012-03-27 17:26:10:652 980 914 DnldMgr WARNING: SyncFileLocations failed with 0x8024400d.
2012-03-27 17:26:10:652 980 914 DnldMgr WARNING: PopulateFileUrlsForCall failed with 0x8024400d, but continuing with call {B6C9F0ED-9900-42BC-9BBE-61ADE865CADC}.
2012-03-27 17:26:10:652 980 914 DnldMgr *********** DnldMgr: New download job [UpdateId = {112FA241-E8C9-4EE7-A8B4-D3A4C65F7FEB}.102] ***********
2012-03-27 17:26:10:652 980 914 DnldMgr * Queueing update for download handler request generation.
2012-03-27 17:26:10:652 980 914 DnldMgr Generating download request for update {112FA241-E8C9-4EE7-A8B4-D3A4C65F7FEB}.102
2012-03-27 17:26:10:652 980 914 Handler Generating request for CBS update 112FA241-E8C9-4EE7-A8B4-D3A4C65F7FEB in sandbox C:\Windows\SoftwareDistribution\Download\9214be182ea0ec97ce8a55beaa608a67
2012-03-27 17:26:10:652 980 914 Handler FATAL: Self-contained package file does not exist or is not on server.
2012-03-27 17:26:10:652 980 914 Handler FATAL: Request generation for CBS update complete with hr=0x80242006 and pfResetSandbox=0
2012-03-27 17:26:10:652 980 914 Handler FATAL: Error source is 105.
2012-03-27 17:26:10:652 980 914 DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80242006.
2012-03-27 17:26:10:652 980 914 DnldMgr Error 0x80242006 occurred while downloading update; notifying dependent calls.
2012-03-27 17:26:10:668 980 914 Agent *********
2012-03-27 17:26:10:668 980 14b8 AU >>## RESUMED ## AU: Download update [UpdateId = {4AE85C00-0EAA-4BE0-B81B-DBD7053D5FAE}]
2012-03-27 17:26:10:668 980 914 Agent ** END ** Agent: Downloading updates [CallerId = AutomaticUpdates]
2012-03-27 17:26:10:668 980 14b8 AU # WARNING: Download failed, error = 0x80242006
Any ideas? :)

Installing Novell Client fails due to 'untrusted signer'

I am trying to update Novell Client on our Windows 7 workstations, using a Zenworks bundle. This method has worked in the past: copy the installation files to c:\temp\zeninstall\clnt2sp3ir5 (including appropriately modified NovellClientProperties.txt and install.ini) and then just launch "setup.exe /ncpf" as secure system user.
This time I noticed that the new client was only partially installed. When viewing Novell Client properties it shows the new version, however, some files are definitely from the previous client version (for example C:\Windows\System32\lgnwnt32.dll).
I dug up c:\windows\inf\setupapi.dev.log and it seems that installation was aborted due to "unsigned driver package":
Code:
sto: Validating driver package files against catalog 'netnvcli.cat'.
!!! sto: Driver package signer is unknown. Assuming untrusted signer. Error = 0x800F0242
!!! ndv: Driver package failed signature validation. Error = 0xE0000242
sto: {DRIVERSTORE_IMPORT_NOTIFY_VALIDATE exit(0xe0000242)} 12:37:47.960
!!! sto: Driver package failed signature verification. Error = 0xE0000242
!!! sto: Failed to import driver package into Driver Store. Error = 0xE0000242
sto: {Stage Driver Package: exit(0xe0000242)} 12:37:48.225
!!! sto: Failed to stage driver package to Driver Store. Error = 0xE0000242, Time = 6521 ms
sto: {Import Driver Package: exit(0xe0000242)} 12:37:49.973
inf: Opened INF: 'c:\temp\zeninstall\novell_client\c2sp3ir5\netnvcli.inf' ([strings])
! inf: Add to Driver Store unsuccessful
! inf: Error 0xe0000242: The publisher of an Authenticode(tm) signed catalog has not yet been established as trusted.
!!! inf: returning failure to SetupCopyOEMInf
<<< Section end 2014/02/11 12:37:51.439
<<< [Exit status: FAILURE(0xe0000242)]
If I run the installation manually, I am prompted at one point about unsigned driver and whether I want to install it. If I answer "yes", the installation is successful.
Looking at Windows' certificate store on our computers, I see under "Trusted Publishers" a certificate issued to Novell, Inc by "Verisign Class 3 Code Signing 2009-2 CA", but that certificate expired on 27.04.2013.
How can I obtain and deploy the certificate that would allow the silent installation of Novell Client 2 SP3 IR5 to proceed? Or am I going about this in an entirely wrong way?

Originally Posted by vatson
I am trying to update Novell Client on our Windows 7 workstations, using a Zenworks bundle. This method has worked in the past: copy the installation files to c:\temp\zeninstall\clnt2sp3ir5 (including appropriately modified NovellClientProperties.txt and install.ini) and then just launch "setup.exe /ncpf" as secure system user.
This time I noticed that the new client was only partially installed. When viewing Novell Client properties it shows the new version, however, some files are definitely from the previous client version (for example C:\Windows\System32\lgnwnt32.dll).
I dug up c:\windows\inf\setupapi.dev.log and it seems that installation was aborted due to "unsigned driver package":
Code:
sto: Validating driver package files against catalog 'netnvcli.cat'.
!!! sto: Driver package signer is unknown. Assuming untrusted signer. Error = 0x800F0242
!!! ndv: Driver package failed signature validation. Error = 0xE0000242
sto: {DRIVERSTORE_IMPORT_NOTIFY_VALIDATE exit(0xe0000242)} 12:37:47.960
!!! sto: Driver package failed signature verification. Error = 0xE0000242
!!! sto: Failed to import driver package into Driver Store. Error = 0xE0000242
sto: {Stage Driver Package: exit(0xe0000242)} 12:37:48.225
!!! sto: Failed to stage driver package to Driver Store. Error = 0xE0000242, Time = 6521 ms
sto: {Import Driver Package: exit(0xe0000242)} 12:37:49.973
inf: Opened INF: 'c:\temp\zeninstall\novell_client\c2sp3ir5\netnvcli.inf' ([strings])
! inf: Add to Driver Store unsuccessful
! inf: Error 0xe0000242: The publisher of an Authenticode(tm) signed catalog has not yet been established as trusted.
!!! inf: returning failure to SetupCopyOEMInf
<<< Section end 2014/02/11 12:37:51.439
<<< [Exit status: FAILURE(0xe0000242)]
If I run the installation manually, I am prompted at one point about unsigned driver and whether I want to install it. If I answer "yes", the installation is successful.
Looking at Windows' certificate store on our computers, I see under "Trusted Publishers" a certificate issued to Novell, Inc by "Verisign Class 3 Code Signing 2009-2 CA", but that certificate expired on 27.04.2013.
How can I obtain and deploy the certificate that would allow the silent installation of Novell Client 2 SP3 IR5 to proceed? Or am I going about this in an entirely wrong way?
You need to install the newest client (that have a never certificate) on a device and then export it from that machine, after that you import it on the devices you want to install the client before running setup.exe.
Thomas

Cisco Anyconnect Secure Mobility Client Fails to Install

I've followed and contributed to posts about this problem here: https://supportforums.cisco.com/thread/2057631
But this problem isn't only isolated to 2.5 client, so I thought a new discussion might attract a bit more attention and feedback.
For 5 or 6 users when I try to install the client as new as version 3.0.11042 (any version, not just the newest) I get a failure:
CustomAction VACon64_Install returned actual error code -536870348 (note this may not be 100% accurate if translation happened inside sandbox)
Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action VACon64_Install, location: C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\VACon64.exe, command: -install "C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\\vpnva64.inf" VPNVA
MSI (s) (44:94) [16:15:05:629]: Product: Cisco AnyConnect VPN Client -- Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action VACon64_Install, location: C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\VACon64.exe, command: -install "C:\Program Files (x86)\Cisco\Cisco AnyConnect VPN Client\\vpnva64.inf" VPNVA
Before it rolls back, I try to run the command manually which appears to do something, but doesn't fix the problem.
This is the step that is trying to install the service VPNVA, but it fails.
I have cleaned up all the files I know how (which registry entries might I also try?) and rebooted several times, but no luck.
The documented Cisco solution, and what i've been telling frustrated users one after another is "re-image your machine"
Does someone have an idea of what else I can try?

Thank you.
The workaround works. Yes, using Windows 8.1.
An HOW TO on how to set this for everyone who is not that computer savvy...
1. Go to the Start Screen of Windows 8.1 and look for the Cisco Anyconnect Secure Mobility Client icon (or just type it on the Start Screen).
2. Right click the icon and select 'Open file location'.
3. Right click the Cisco Anyconnect Secure Mobility Client (Shortcut) and select 'Properties'
4. Select the 'Compatibility' Tab.
5. Check the box 'Run this program in compatibility mode for:' and select 'Windows 8' in the drop down.
6. Click 'OK' to close the window.
7. Log off and log on again (or reboot the computer).
Note to point 5. If there are multiple users are using the PC with different user accounts and they're using the Cisco Secure Mobility Client as well, then go to 'Change settings for all users' and there apply point 5. To do so you'll need administrative rights to the computer though.

What query should I use to find all versions of Office 2013 64-bit installed on client computers?

What query should I use to find all versions of Office 2013 64-bit installed on client computers? Could someone create a custom query? I need all of the client computers names and which ones have any Office 64-bit components. Thank you so much! I really
appreciate it!

Hi,
You could edit the following query to meet your requirement.
SELECT     dbo.v_R_System.Name0, dbo.v_GS_OPERATING_SYSTEM.Caption0 AS [Operating System],
                      dbo.v_GS_OPERATING_SYSTEM.CSDVersion0 AS [OS Service Pack], arp.DisplayName0,
                      CASE WHEN arp.version0 LIKE '11.0.6361.0' THEN 'SP1' WHEN arp.version0 LIKE '11.0.7969.0' THEN 'SP2' WHEN arp.version0 LIKE '11.0.8173.0'
THEN 'SP3' WHEN
                       arp.version0 LIKE '12.0.6215.1000' THEN 'SP1' WHEN arp.version0 LIKE '12.0.6425.1000' THEN 'SP2' WHEN arp.version0 LIKE '14.0.6029.1000'
THEN 'SP1' ELSE '' END
                       AS 'Service Pack', arp.Version0
FROM         dbo.v_Add_Remove_Programs AS arp INNER JOIN
                      dbo.v_R_System ON arp.ResourceID = dbo.v_R_System.ResourceID INNER JOIN
                      dbo.v_RA_System_SMSInstalledSites AS ASSG ON dbo.v_R_System.ResourceID = ASSG.ResourceID INNER JOIN
                      dbo.v_GS_OPERATING_SYSTEM ON dbo.v_R_System.ResourceID = dbo.v_GS_OPERATING_SYSTEM.ResourceID
WHERE     (arp.DisplayName0 LIKE '%Microsoft Office%edition%' OR
                      arp.DisplayName0 LIKE '%Microsoft Office Standard 2007%' OR
                      arp.DisplayName0 LIKE '%Microsoft Office Enterprise 2007%' OR
                      arp.DisplayName0 LIKE '%Microsoft Office Professional%2007%' OR
                      arp.DisplayName0 LIKE '%Microsoft Office Standard 2010%' OR
                      arp.DisplayName0 LIKE '%Microsoft Office Enterprise 2010%' OR
                      arp.DisplayName0 LIKE '%Microsoft Office Professional%2010%' OR
                      arp.DisplayName0 LIKE 'Microsoft Office 2000%' OR
                      arp.DisplayName0 LIKE 'Microsoft Office XP%') AND (arp.DisplayName0 NOT LIKE '%update%') AND
                      (arp.DisplayName0 NOT LIKE '%Microsoft Office XP Web Components') AND (dbo.v_R_System.Operating_System_Name_and0 NOT LIKE '%server%')
AND
                      (arp.InstallDate0 NOT LIKE 'NULL')
ORDER BY dbo.v_R_System.Name0, arp.DisplayName0, arp.Version0
Full details:http://social.technet.microsoft.com/Forums/systemcenter/en-US/7baeb348-fb63-4115-8d76-2c884d18f708/sql-query-to-check-ms-office-service-pack-level?forum=configmgrreporting
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

If I were to purchase the Apple Remote Desktop with Unlimited licenses, would I be able to install the client software on each of there computers/laptops and have them remote desktop into the server?

I have several friends and family who are looking for a central place to access information from ( Pictures, home movies etc ). So I am considering setting up an OSX Lion Server. There are some other things I can use it for as well.
Here is my question:
If I were to purchase the Apple Remote Desktop with Unlimited licenses, would I be able to install the client software on each of there computers/laptops and have them remote desktop into the server? Or would I have to install the Admin software on each? Do they intend it to be used strictly as one admin to access many clients?
I always could set up a network drive so they can log in and just see the folders they have created with space on the server I provide them. But I want them to be able to log an and actually use it as a Remote Desktop.
Thanks,
Eric

Dave,
Thanks for the feedback. I understand that ARD is meant for Remote Administration, but I was not sure if it could be used for my purpose as well. The reason I was looking to do it this was was because I read several articles online about security and performance issues with setting up VNC and activating screen sharing. Unless I am misunderstood.
As far as people's activities on the server, mostly it is going to be used as a place for them to store their media. I will only allow own person ( Who I trust and I know wont botch the server ), to run applications. Everyone else will be restricted to uploading and downloading content to their designated account on the server as well as a community share on the server.
I appreciate your help.
Thanks,
Eric

Client installation fails with error: The client version 4.00.6487.2000 does not match the MP version 2.50.4253.3000. The client wil not be installed.

Hello World,
I have this remote server that used to be a sms 2003 secondary site server. We uninstalled the SMS role. And used the server as an SCCM remote distribution point. We also want to install an client agent on that server machine. But no mather how i try
to install the client i always see the same error in ccmsetup.log:
File download 100% complete (17847296 of 17847296 bytes). ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
Download complete. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
Successfully downloaded client files. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
Searching for available transform ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
Failed to find resource file 'client.mst' ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
No transform available for this locale. Installation will proceed with no transformation. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
Updated security on object C:\WINDOWS\system32\ccmsetup\. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
An MP exists on this machine. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
The client version 4.00.6487.2000 does not match the MP version 2.50.4253.3000. The client will not be installed. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
A Fallback Status Point has not been specified. Message with STATEID='318' will not be sent. ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
Deleted file C:\WINDOWS\system32\ccmsetup\WindowsServer2003-KB923845-x86-ENU.exe.download ccmsetup 8/18/2010 9:17:18 AM 9916 (0x26BC)
I think the installer finds some remenance of the old SMS_MP. When looking i found some remains in IIS . I tried to remove the remains but still have the same error when installing the client. I uninstalled IIS completly. Can someone tell me where the client
installer looks for the MP version? Would it help if i installed an SCCM MP on that server and the uninstalled it (Upgrade the MP)?

Hello Kent, i ran the ccmclean.exe from the SMS2003 Toolkit. It informed me that my system was cleaned. I ran the sccm client setup manualy and found this in the ccmsetup.log
MSI PROPERTIES are SMSSITECODE=AUTO CCMHTTPPORT="80" CCMHTTPSPORT="443" INSTALL=ALL ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
IsFileMicrosoftTrusted Verified file 'C:\WINDOWS\system32\ccmsetup\{4CD82FBB-0AFC-4864-A089-15364DF5F14B}\client.msi' is MS signed. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
Running installation package
Package: C:\WINDOWS\system32\ccmsetup\{4CD82FBB-0AFC-4864-A089-15364DF5F14B}\client.msi
Log: C:\WINDOWS\system32\ccmsetup\client.msi.log
Properties: SMSSITECODE=AUTO CCMHTTPPORT="80" CCMHTTPSPORT="443" INSTALL=ALL ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: INSTALL. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SystemFolder. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SystemFolder.12C909B6_5F69_4C4D_8EC3_C225C1607933. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SystemFolder.A6940213_CD40_4753_8BA2_E803376DECC3. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SystemFolder.F65FD590_5BEA_48BE_8408_26F7244E8B61. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: WindowsFolder.8AE6A59B_5597_4D75_9BFD_7F566BF56500. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SystemFolder.98C5B086_7EB0_422A_B0A8_674010F525CD. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SystemFolder.4C5E03E8_F8E5_47CB_8FF4_E46FE34D35A6. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: System64Folder.597B26B2_B5D6_40FF_90DA_B8E672626B1D. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: System64Folder.541D9CA5_CE53_4DCE_903A_9B9E5A6EF2C6. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:21: SmsCheckConfig. ccmsetup 8/18/2010 10:48:21 AM 3140 (0x0C44)
MSI: Action 10:48:22: SMSValidateClientInstallStamp. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: LaunchConditions. Evaluating launch conditions ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: SmsDetectWindowsEmbeddedFBWF. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: SmsCheckNewRemoteTools. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: AppSearch. Searching for installed applications ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: CCPSearch. Searching for qualifying products ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: RMCCPSearch. Searching for qualifying products ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: ValidateProductID. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: CcmSetInstallDir. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: BCDSetX64Dir. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: CcmSetInstallDirFromCmdLine. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: CcmSetPrimaryFolder. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: FindRelatedProducts. Searching for related applications ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: Action 10:48:22: SmsDetectInvalidOrderColocUpgrade. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
MSI: An older version of the SMS Management Point is installed. Please upgrade the Management Point before attempting to upgrade the client. ccmsetup 8/18/2010 10:48:22 AM 3140 (0x0C44)
Installation failed with error code 1603 ccmsetup 8/18/2010 10:48:23 AM 3140 (0x0C44)
Next retry in 120 minute(s)... ccmsetup 8/18/2010 10:48:23 AM 3140 (0x0C44)
Their must be something remaining that ccmclean can't find or can' access so i ran ccmclean /mp. This did some stuff and told me the system was clean again. I reran the client setup.
Guess what
It worked !
Thanxs Kent

I am unable to activate an old windows copy of CS3 that I have. Did previously install it on other computers which I then failed to deactivate before discarding them. What can I do now?

I am unable to activate an old windows copy of CS3 that I have. Did previously install it on other computers which I then failed to deactivate before discarding them. What can I do now?ACT

why can't you install it?
if it's because you've used your max of 2 current activations and need to deactivate (and you'll see that message if that's the problem), contact adobe support - http://helpx.adobe.com/x-productkb/global/service1.html
otherwise, explain.

Failed to install CM Client on computers located in untrusted site

Similar Messages

Maybe you are looking for