How do Virtual Applications get published in SCCM 2012

SCCM 2012 Virtrual applications are deployed, icons appear on desktop and appear to be installed according to the Application Management Client console. However the SCCM2012 AppDiscovery.log states "Required component is not published".
We are running MS Application Virtualization Desktop Client is V4.6.3.25171. Where can I find the publishing errors?

Only find Dll, exe files and some XML files there.
I do see in the CCM\log\AppDiscovery.log the following:
<![LOG[ Performing detection of app deployment type PRU-VAPP_U_ATTRouteIt131-A - Microsoft Application Virtualization 4(ScopeId_756A69C5-BB0D-442E-BC79-54E767A8B034/DeploymentType_1acd73db-4883-43c9-90b2-ac044ed12dd8, revision 3) for
user.]LOG]!><time="13:38:29.891+300" date="12-04-2014" component="AppDiscovery" context="" type="1" thread="936" file="appprovider.cpp:2148">
<![LOG[Required component [Route It! 1.0.0.1] is not published for S-1-5-21-31572-1897081133-3783826585-2300]LOG]!><time="13:38:32.730+300" date="12-04-2014" component="AppVHandler" context="" type="1"
thread="936" file="appvhandler.cpp:584">
<![LOG[+++ AppV application not discovered for S-1-5-21-31572-1897081133-3783826585-2300 [AppDT Id: ScopeId_756A69C5-BB0D-442E-BC79-54E767A8B034/DeploymentType_1acd73db-4883-43c9-90b2-ac044ed12dd8, Revision: 3, AppV Pkg GUID: {D699AA09-CA0E-4774-A5D6-BBD97496FA69},
AppV Version GUID: {AC834D03-3524-43A3-B5FC-8ED6FE3079E1}]. Some required components are not published.]LOG]!><time="13:38:32.730+300" date="12-04-2014" component="AppVHandler" context="" type="1"
thread="936" file="appvhandler.cpp:224">
<![LOG[+++ Did not detect app deployment type PRU-VAPP_U_ATTRouteIt131-A - Microsoft Application Virtualization 4(ScopeId_756A69C5-BB0D-442E-BC79-54E767A8B034/DeploymentType_1acd73db-4883-43c9-90b2-ac044ed12dd8, revision 3) for S-1-5-21-31572-1897081133-3783826585-2300.]LOG]!><time="13:38:32.730+300"
date="12-04-2014" component="AppDiscovery" context="" type="1" thread="936" file="appprovider.cpp:540">
But I don't know why all the components are not getting published.
I have the icons for this app on the desktop and my ID is in the uninstall collection. The uninstall collection says:
SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User inner join SMS_G_System_AppClientState on SMS_R_USER.UniqueUserName = SMS_G_System_AppClientState.UserName where SMS_G_System_AppClientState.AppName='AppV
- ATTRouteIt131-A' and SMS_G_System_AppClientState.ComplianceState = 1
But it seems like the AppDiscovery.log does not think the app is installed. Everytime I run the Application Deployment Evaluation Cycle on the client the AppDiscovery.log shows it trying to install. And since it does not think the app is
installed, the uninstall does not seem to run. I know I am missing something as I have many apps that act this way.
Hope you can help!

Similar Messages

App-V 5.0 SP2 user applications published via SCCM 2012 to VDI workstations with roaming only

Hi,
The environment consists of App-V 5.0 SP2 (KB2956985) user based applications published via SCCM 2012 to Windows 7 VDI snapshotted workstations that are reset at user logoff.
When a user logs on the SCCM 2012 client initiates App-V client package publishing. After a couple of minutes after logon the shortcuts appear and the user can launch their applications.
The issue is that at logoff, even with roaming enabled, the publishing information disappears. This causes the next logon process for that user to repeat, the applications are not available until the SCCM client has completed it's publishing cycle.
Roaming profiles are implemented. %APPDATA% is redirected to a UNC path. The following registry key is set
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\AppV\Client\Integration\PreserveUserIntegrationsOnLogin=1
U-EV, global publishing of applications, and AppLocker rules are not an option. Also, I have read this already - http://technet.microsoft.com/en-us/library/dn659478.aspx#BKMK_PE
I do not want to wait for the SCCM client to kick in prior to the user applications being available. What do I need to roam or run to create a seamless transition for the user between sessions?
Eddie.

Hi Tywin (bad username considering the last GoT Episode ;))
If you ask Microsoft, they always recommend using SCCM for deploying App-V packages and reuse your current SCCM infrastructure if that is already in place. Problem is, as you now experience, is that there is some big caveats both in regards to publishing
time and to roaming of settings.
As Nické states I would suggest looking into the Full Infrastructure Model for App-V 5.x, which gives you much better performance in what I call "from no apps" to "being able to click the shortcut" - the add and publishing phase. If you don't have the time/budget/whatever
to start looking into that, you could look into some community tools like App-V Scheduler which is developed specific by Citrix guys to ease the publishing and management in a Citrix world.
Microsoft have a great article about Performance Guidelines, which you have read, but it mostly presumes you work with Full Infrastructure. Have you looked into Steve Thomas' session from TechEd NA? It talks about "implementation trends".
Senior Consultant at Atea Denmark - http://Atea.dk Atea Technical Evangelist for App-V NoLightPeople - http://NoLightPeople.com Access Director - http://www.nolightpeople.com/index.aspx#accessdirector

App-v OSD's not getting imported to SCCM 2012

Hi
Currently i am migrating APP-V 4.6 PACKAGES to SCCM 2012, as part of this process few OSD's of applications are not getting imported.
ex:- if application has 10 OSD then only 5 OSD are getting imported.
Since App-v 4.6 was earlier standalone all the OSD were published to different user using different AD groups,
Do the package has to be edited again to import all OSD or manifest files has to be changed to include all OSD to get imported to SCCM 2012.
Thanks

Open up the app in the sequencer, add the file to your scripts folder. If the script requires to be run elevated, you'll want to use the Deployment config file and use Global publishing....
If you don't need elevation you can use the User Config and won't need to publish globally.
Fore more info and some examples, check this out:
http://blogs.technet.com/b/appv/archive/2012/12/10/scripting-and-embedded-scripting-for-appv-5-0-dynamic-deployment-and-user-configuration-scripting.aspx
PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog:
rorymon.com Twitter: @Rorymon

How to create an exclusion into an SCCM 2012 to not discover Non Windows OS

How to create an exclusion into an SCCM 2012 to not discover Non Windows OS

I assume they are in your AD. In that case your only option is to not discover them by not including their OUs in your
Active Directory System Discovery.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Variations - how to make page get published automatically ?

Hello guys,
I am working with multi-lingual publishing site (English and Arabic).
I have created Variations and set automatic creation of page of English
Version to Arabic Version.
Issue : When English Version Page is created and Published,
Arabic Version is also created but Arabic Version of page is in checkout mode and it is not published.
I want to make all arabic versions of the page in publish mode.
Is there any configuration or something so all the pages of arabic gets published automatically whenever it gets created ?
Thanks,

Hi Soyeb,
so in that case you will need to write some code to do that by adding event handler
this contains the event handler
http://blogs.technet.com/b/stefan_gossner/archive/2011/11/16/sharepoint-variations-the-complete-guide-part-3-triggers.aspx
this contains the code to check in
https://dkolitha.wordpress.com/2011/05/13/publishing-pages-check-in-file-programmatically/
http://blogs.msdn.com/b/sowmyancs/archive/2008/03/15/create-publishing-pages-in-portal-sites-programmatically.aspx
Kind Regards,
John Naguib
Technical Consultant/Architect
MCITP, MCPD, MCTS, MCT, TOGAF 9 Foundation
Please remember to mark your question as answered if this solves your problem

How to manage Work group Computer through SCCM 2012 R2

Hello..Experts,
We have to manage the Workgroup Computers both Linux and windows Environment through SCCM 2012 R2.
what are limitation associated with managing Workgroup computer both with Linux and windows Computers through SCCM.
Please help us how to achieve this.

Windows devices that are Workgroup members have the same features for management as domain joined devices except that it is slightly more difficult to get the client installed on these 'unmanaged' devices.
The Linux computers have only basic support for Inventory, Application Management, and Compliance.
I hope that helps,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you've found a bug or want the product worked differently,
share your feedback.
<-- If this post was helpful, please click "Vote as Helpful".

Application uninstall bug of SCCM 2012 R2 with Cu2?

I install SCCM 2012 R2, then Update to CU1, last moth I had updated to CU2
I create two deployment type for winzip application.
It is 'available' and not 'required'.
Use script installer, it contains mst file. the script is vbs
One is for x64, the other is for x86. all of them contains uninstall program(msiexec /x {code} /q)
Install is ok
But the uninstall button is grayed out.
When I delete x86 deployment type then can uninstall this application
It seem if it has more than one of deployment type, the uninstall button is grayed out
I saw CU1 had fixed this bug, but why I met it again? It is new bug of SCCM 2012 R2 CU2?
I find R2 CU1 and R2 CU2 client update package in SCCM.
Do I need to deploy them to all PC?
If I use sccm OSD to install OS(Use default Configuration Manager Client Package）, If I need to update Client in this client？

Thanks, Narcoticoo & Torsten
I also do the test, it is because I didn't push the update to client, I have some new questions about Update CU
http://social.technet.microsoft.com/Forums/en-US/1b6161f4-2cdb-42a5-b59a-4b49970e2daf/how-to-update-cu1-cu2-to-sccm-2012-r2?forum=configmanagergeneral

Updates Publisher 2011 + SCCM 2012 - no signing certificate every time (Bug?)

Hello everybody,
I got a strange problem with the System Center Updates Publisher 2011 which I want to use with SCCM 2012 (SP1).
Some weeks ago I was able to enable the publishing on the update server (SCUP + SCCM + WSUS are the same machine), to create a self signed certificate and to astablish the connection to the WSUS server.
Some weeks later the SCUP seems to "forgot" the certificate and the option "Enable publishing to an update server" is disabled.
If I try to reactivate this option then I can not create a new self signed certificate anymore.
I get always the "... test connection succeeded. However, no signing certificate was detected ..." dialog.
I also can not choose the existing certificate (.pfx) file ("No certificate information available").
Is this a bug?
Can I deinstall the SCUP completely and create a new certificate again?

Did you open SCUP as administrator? But Yes, you can reinstall SCUP and create another cert or use the existing cert.
Kent Agerlund | My blogs: blog.coretech.dk/kea and
SCUG.dk/ | Twitter:
@Agerlund | Linkedin: Kent Agerlund |
Mastering ConfigMgr 2012 The Fundamentals

How to determine linked reports of a SCCM 2012 Report

Hi,
My end objective is to get the SQL statement for a report - 'Deployment that target a computer'.
I can see SQL statements through Data sets in Report Builder. those SQL Statements are accepting few parameters from some linked report i believe. I want to determine the values of those linked parameters.
let me know how can we check what are the linked reports for a particular report in SCCM 2012
Sonam Rastogi

You could open a Report in Report Builder, right click on one of the field in the Report and click properties. There under Action you should see if the field is linked to another report.

Automate import applications(app-v) in sccm 2012

Hi,
I wonder it there are some ready made tools to import applications, specifically app-v in SCCM 2012.
F.e. an excel-sheet/csv that is filled in with predefined fields and then can import applications.
Pls advise.
J.
Jan Hoedt

The only community tool that I know is SCCM 2012 Application Importer, see:
https://sccmappimp.codeplex.com/
AFAIK, this tool doesn't work with App-V applications, yet.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Why do some Security Updates get flagged by SCCM 2012 as "Not Required" when the Bulletin ID states they are?

Hiya
We've just pushed all updates from the March patch Tuesday Security Bulletin to our test Workstations/Servers (using SCCM 2012 R2)
One of the patches (MS14-013 - KB2929961) hasn't applied to a selection of 2008 R2 and 2012 Servers, but according to the Bulletin notes for this it is applicable to both. It has applied to my Windows 8 boxes.
The servers don't already have this applied, its not a superseded update and SCCM has flagged this as "Required" for x64 versions of Windows 7, Windows 8, Windows 8.1 but "Not required" for any servers.
Bulletin ID states its applicable to all except Itanium based editions - https://technet.microsoft.com/en-us/security/bulletin/ms14-013
If I download the update and try to run it manually on the servers I get "The update is not applicable to your computer"
So it looks as though the WUAgent and SCCM compliance are reporting correctly, but that the Bulletin ID isn't entirely correct??
Has anyone else found this? We use the Bulletin IDs for monthly meetings on what we're patching and what system it will affect so causes a lot of confusion with system owners when a patch doesn't apply that they're expecting to get applied.
Thanks!

Hi,
Without any indepth investigation if I am not mistaking the update is for Directshow and that component is installed with the Desktop Experience on the server OS's, and therefor the update is not applicable on the servers..
Could that be the case?
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

How will the applications gets translated using Globalization

Hi,
By using the Apex user guide, I have done with the multilingual process but not able to view the translated application in the application builder list, How can I get the arabic language gets effected in my applications(Apex).
What are the steps I need to follow?
Please help.
Thanks in advance.
PNR

If you're asking about compatibility, that would be something you would need to ask of the app developers, though most apps compatible with Mountain Lion should be compatible with Mavericks. You can also consult the tables here:
http://roaringapps.com/apps
though that information comes from user reports and so should not be considered authoritative.
If you're asking whether installing Mavericks will delete your apps, no, it won't, though a good backup is always highly recommended.
Regards.

How to repackage "jre-7u72-windows-i586.exe" application and deploy through SCCM 2012

Hi,
Along with IE 11 we are planning to deploy "jre-7u72-windows-i586.exe"
Created transform file for "jre-7u72-windows-i586.exe" by using Adminstudio Installshield.
Identified vendor .MSI file at
%AppData%\LocalLow\Sun\Java\jre1.7.0_72\jre1.7.0_72.msi"
%AppData%\LocalLow\Sun\Java\jre1.7.0_72\Data1.cab
Created Transform file
Created transform file for "jre-7u72-windows-i586.exe" by using Adminstudio Installshield with the Tuner feature
My queries:
Do we have any best practices while repackaging “jre-7u72-windows-i586.exe?” by Adminstudio
How to deploy the jre-7u72-windows-i586.exe application assuming with parallel deployment of IE
11.
Do we uninstall lower versions of Java when installing any newer versions like jre-7u72-windows-i586.exe?
if yes then how to handle
Do we install jre-7u72-windows-i586.exe application without uninstallations of any lower version of JAVA , if yes then how to handle
Looking for best practices / Customizations ?
Thanks, appreciate your help.
Han,
Gc.Hanumareddy

Alternatively, why not actually reference Oracle official documentation or post in their forums (because as Torsten said, this really has nothing to do with ConfigMgr or Microsoft even).
http://java.com/en/download/help/msi_install.xml looks to be a great place to start.
Jason | http://blog.configmgrftw.com | @jasonsandys

Installing an application through Powershell with SCCM 2012 r2 is not working as expected

I am trying to install a VOIP client using a powershell script. When I run the powershell script on the client in a administrative powershell prompt the script runs fine and it installs the application as expected. When I try to do the same thing through
the SCCM client using an application it does not install.
I am not a Powershell Guru so the script below is my simple understanding of installations through powershell as of this moment
<#
Installatiescript CIC Client SU6 32 bit (kantoor)
Versie 1.3
17 april 2015 - Uitbreiding logfile. Fix opschonen startmenu
16 april 2015 - Aanpassing verwijderen oude client, logfile aanmaken in TEMP
13 maart 2015 - Eerste versie
#>
# Bepaal installatiebron
$SourceDir = "\\VSC0501\SetupShare\APP_IC_Client_SU6\x86"
# Bepaal logvariabelen
$logfile = "$env:TEMP\cic_su6-install.txt"
$Logdate = get-date -f yyyyMMdd-HHmm
# Controleer of oude CIC client aanwezig is (versie 4.04.316) en deinstalleer deze indien nodig
If (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{543BE3AC-426D-4FDD-8160-ECEEC2E211B6}")
$val = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{543BE3AC-426D-4FDD-8160-ECEEC2E211B6}").DisplayVersion
if($val -eq "4.04.316") {
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {3F20671C-9CA2-41FA-B94A-C7C7FD95C7B4} /QN" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - Client has been succesfully removed" | out-file $logfile -Append
else {
Write-Output "$logdate - Client cannot be succesfully removed" | out-file $logfile -Append
exit
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {543BE3AC-426D-4FDD-8160-ECEEC2E211B6} /QN" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - Client has been succesfully removed" | out-file $logfile -Append
else {
Write-Output "$logdate - Client cannot be succesfully removed - " $process.ExitCode | out-file $logfile -Append
exit
#(Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {3F20671C-9CA2-41FA-B94A-C7C7FD95C7B4} /QN" -Wait -Passthru).exitcode
#(Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {543BE3AC-426D-4FDD-8160-ECEEC2E211B6} /QN" -Wait -Passthru).exitcode
Get-ChildItem "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Abvakabo FNV\Interactive Intelligence" | Remove-Item -Recurse
Remove-Item -Path "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Abvakabo FNV\Interactive Intelligence" -Recurse -Force
else {
Write-Output "$logdate - Client not present" | out-file $logfile -Append
# Installeer CIC Client SU6
$Arguments = "/i `"$SourceDir\ICUserApps_32bit.msi`" /l*vx `"$env:TEMP\cic_su6.log`" TRANSFORMS=`"$SourceDir\Kantoor.mst`" PATCH=`"$SourceDir\ICUserApps_32bit_SU6.msp`" ICSERVERNAME=cic.abvakabofnv.local /QN /norestart"
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "$Arguments" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - CIC Client SU6 (kantoor) has been succesfully installed" | out-file $logfile -Append
else {
Write-Output "$logdate - CIC Client SU6 (kantoor) cannot be succesfully installed - " $process.ExitCode | out-file $logfile -Append
exit
# Installeer CIC Client SU6 NL Language Plugin
$Arguments = "/i `"$SourceDir\LanguagePlugins\ICUserApps_LanguagePlugin_nl.msi`" /l*vx `"$env:TEMP\cic_su6_nl.log`" PATCH=`"$SourceDir\LanguagePlugins\ICUserApps_LanguagePlugin_nl_SU6.msp`" /QN /norestart"
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "$Arguments" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - CIC Client SU6 Languagepack NL has been succesfully installed" | out-file $logfile -Append
else {
Write-Output "$logdate - CIC Client SU6 Languagepack NL cannot be succesfully installed - " $process.ExitCode | out-file $logfile -Append
exit
# Opschonen Desktop en Start menu
Remove-Item -Path "$env:PUBLIC\Desktop\Interaction Fax.lnk"
Remove-Item -Path "$env:PUBLIC\Desktop\Interaction Voicemail Player.lnk"
Move-Item -Path "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Interactive Intelligence" "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Abvakabo FNV" -force
The uninstall part works fine, but the installation (2 parts) do not. As I mentioned before... when I run the script manually it all works fine.
The application is installed using a script. The commandline is
powershell.exe -excecutionpolicy bypass -file Install_UserApps_SU6_Kantoor.ps1
The application runs hidden in the context of the system wether or not the user is logged on. The maximum allowed run time is sufficient (30 minutes).
There is no installation log from the msiexec command so the line were the application should be installed is not executed at all. There is also no mention in my own little log ($logfile = "$env:TEMP\cic_su6-install.txt") mentioning the result
of the installation.
The appenforce.log says...
+++ Starting Install enforcement for App DT "Interaction Client - Standaard SU6" ApplicationDeliveryType - ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, Revision - 7, ContentPath - C:\WINDOWS\ccmcache\13, Execution Context - System AppEnforce 17-4-2015 16:31:05 640 (0x0280)
A user is logged on to the system. AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Performing detection of app deployment type Interaction Client - Standaard SU6(ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, revision 7) for system. AppEnforce 17-4-2015 16:31:05 640 (0x0280)
+++ Application not discovered. [AppDT Id: ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, Revision: 7] AppEnforce 17-4-2015 16:31:05 640 (0x0280)
App enforcement environment:
Context: Machine
Command line: Powershell.exe -executionpolicy bypass -file Install_UserApps_SU6_Kantoor.ps1
Allow user interaction: No
UI mode: 0
User token: null
Session Id: 1
Content path: C:\WINDOWS\ccmcache\13
Working directory: AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Prepared working directory: C:\WINDOWS\ccmcache\13 AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Found executable file Powershell.exe with complete path C:\WINDOWS\System32\WindowsPowerShell\v1.0\Powershell.exe AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Prepared command line: "C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -executionpolicy bypass -file Install_UserApps_SU6_Kantoor.ps1 AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Executing Command line: "C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe" -executionpolicy bypass -file Install_UserApps_SU6_Kantoor.ps1 with user context AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Working directory C:\WINDOWS\ccmcache\13 AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Post install behavior is BasedOnExitCode AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Waiting for process 2916 to finish. Timeout = 30 minutes. AppEnforce 17-4-2015 16:31:05 640 (0x0280)
Process 2916 terminated with exitcode: 0 AppEnforce 17-4-2015 16:31:08 640 (0x0280)
Looking for exit code 0 in exit codes table... AppEnforce 17-4-2015 16:31:08 640 (0x0280)
Matched exit code 0 to a Success entry in exit codes table. AppEnforce 17-4-2015 16:31:08 640 (0x0280)
Performing detection of app deployment type Interaction Client - Standaard SU6(ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, revision 7) for system. AppEnforce 17-4-2015 16:31:08 640 (0x0280)
+++ Application not discovered. [AppDT Id: ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, Revision: 7] AppEnforce 17-4-2015 16:31:08 640 (0x0280)
++++++ App enforcement completed (3 seconds) for App DT "Interaction Client - Standaard SU6" [ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4], Revision: 7, User SID: ] ++++++ AppEnforce 17-4-2015 16:31:08 640 (0x0280)
I'm thinking of going back to a batchfile because that seems to do the job, but Powershell is much more powerfull.
Anybody got any answers on what is going wrong are some suggestions for a better script?

You have a number of problems here.
1. As mentioned you have UNC paths ... which means there's no reason for a package at all. f you want SCCM to use the package it just downloaded you should use $PSScriptRoot (PS equivelant of %~0dp). If the client is using v2 or earlier
... fix that quick by starting your script with:
If (!$PSScriptRoot) {
$PSSCriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
Now you can call your install easy enough with a $PSScriptRoot+"\app.exe"
2. your discovery is failing after install. This will always make SCCM report an installation failed even when the exit code is 0. You can see it at the end of your log:
Matched exit code 0 to a Success entry in exit codes table. AppEnforce 17-4-2015 16:31:08 640 (0x0280)
Performing detection of app deployment type Interaction Client - Standaard SU6(ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, revision 7) for system. AppEnforce 17-4-2015 16:31:08 640 (0x0280)
+++ Application not discovered. [AppDT Id: ScopeId_2EC1E80A-D73E-4152-A94F-546E7827CCB6/DeploymentType_720b132a-5626-4055-9555-18b4775724c4, Revision: 7] AppEnforce 17-4-2015 16:31:08 640 (0x0280)
So either your installation script is spitting out a exit code 0 regardless of the event OR your detection is wrong.
EDIT: you have exit statemetns after failed installs ... but no exit code (simply exit). Change those to exit 1 so sccm knows it's a failed exit and not just a generic exit. That's probably your problem (unc can't be reached as system, you're
getting an exit .... not defining exit 1).
Something like this (warning this is a fast change so review it):
<#
Installatiescript CIC Client SU6 32 bit (kantoor)
Versie 1.3
17 april 2015 - Uitbreiding logfile. Fix opschonen startmenu
16 april 2015 - Aanpassing verwijderen oude client, logfile aanmaken in TEMP
13 maart 2015 - Eerste versie
#>
If (!$PSScriptRoot) {
$PSSCriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent
# Bepaal installatiebron
#$SourceDir = "\\VSC0501\SetupShare\APP_IC_Client_SU6\x86"
$SourceDir = $PSScriptRoot
# Bepaal logvariabelen
$logfile = "$env:TEMP\cic_su6-install.txt"
$Logdate = get-date -f yyyyMMdd-HHmm
# Controleer of oude CIC client aanwezig is (versie 4.04.316) en deinstalleer deze indien nodig
If (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{543BE3AC-426D-4FDD-8160-ECEEC2E211B6}")
$val = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{543BE3AC-426D-4FDD-8160-ECEEC2E211B6}").DisplayVersion
if($val -eq "4.04.316") {
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {3F20671C-9CA2-41FA-B94A-C7C7FD95C7B4} /QN" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - Client has been succesfully removed" | out-file $logfile -Append
else {
Write-Output "$logdate - Client cannot be succesfully removed" | out-file $logfile -Append
exit 1
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {543BE3AC-426D-4FDD-8160-ECEEC2E211B6} /QN" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - Client has been succesfully removed" | out-file $logfile -Append
else {
Write-Output "$logdate - Client cannot be succesfully removed - " $process.ExitCode | out-file $logfile -Append
exit 1
#(Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {3F20671C-9CA2-41FA-B94A-C7C7FD95C7B4} /QN" -Wait -Passthru).exitcode
#(Start-Process -Filepath "msiexec.exe" -Argumentlist "/x {543BE3AC-426D-4FDD-8160-ECEEC2E211B6} /QN" -Wait -Passthru).exitcode
Get-ChildItem "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Abvakabo FNV\Interactive Intelligence" | Remove-Item -Recurse
Remove-Item -Path "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Abvakabo FNV\Interactive Intelligence" -Recurse -Force
else {
Write-Output "$logdate - Client not present" | out-file $logfile -Append
# Installeer CIC Client SU6
$Arguments = "/i `"$SourceDir\ICUserApps_32bit.msi`" /l*vx `"$env:TEMP\cic_su6.log`" TRANSFORMS=`"$SourceDir\Kantoor.mst`" PATCH=`"$SourceDir\ICUserApps_32bit_SU6.msp`" ICSERVERNAME=cic.abvakabofnv.local /QN /norestart"
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "$Arguments" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - CIC Client SU6 (kantoor) has been succesfully installed" | out-file $logfile -Append
else {
Write-Output "$logdate - CIC Client SU6 (kantoor) cannot be succesfully installed - " $process.ExitCode | out-file $logfile -Append
exit 1
# Installeer CIC Client SU6 NL Language Plugin
$Arguments = "/i `"$SourceDir\LanguagePlugins\ICUserApps_LanguagePlugin_nl.msi`" /l*vx `"$env:TEMP\cic_su6_nl.log`" PATCH=`"$SourceDir\LanguagePlugins\ICUserApps_LanguagePlugin_nl_SU6.msp`" /QN /norestart"
$process = Start-Process -Filepath "msiexec.exe" -Argumentlist "$Arguments" -Wait -Passthru
if ($process.ExitCode -eq 0) {
Write-Output "$logdate - CIC Client SU6 Languagepack NL has been succesfully installed" | out-file $logfile -Append
else {
Write-Output "$logdate - CIC Client SU6 Languagepack NL cannot be succesfully installed - " $process.ExitCode | out-file $logfile -Append
exit 1
# Opschonen Desktop en Start menu
Remove-Item -Path "$env:PUBLIC\Desktop\Interaction Fax.lnk"
Remove-Item -Path "$env:PUBLIC\Desktop\Interaction Voicemail Player.lnk"
Move-Item -Path "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Interactive Intelligence" "$env:SYSTEMDRIVE\ProgramData\Microsoft\Windows\Start Menu\Programs\Abvakabo FNV" -force
Exit 0

Endpoint Protection clients no getting updates from SCCM 2012 in new Secondary Site

I recently stood up a secondary site behind a PCI firewall to manage PCI in-scope systems. All of my boundaries are properly configured and there are no overlaps. I am able to push packages to these clients and the clients are reporting as healthy however
I am not able to get updates to the SCEP clients. There is no internet access from these systems so I have to rely on updates from SCCM. From what I can see in the WindowsUpdate log it is only trying to go to Microsoft for the definitions. Here is the Log:
2014-04-30 11:05:09:739
828 da8
Misc WARNING: Send failed with hr = 80072ee2.
2014-04-30 11:05:09:739
828 da8
Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2014-04-30 11:05:09:739
828 da8
Misc WARNING: Send request failed, hr:0x80072ee2
2014-04-30 11:05:09:739
828 da8
Misc WARNING: WinHttp: SendRequestUsingProxy failed for <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=41&L=en-US&P=&PT=0x7&WUA=7.9.9600.16422>.
error 0x80072ee2
2014-04-30 11:05:09:739
828 da8
Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2014-04-30 11:05:09:739
828 da8
Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2014-04-30 11:05:09:739
828 da8
Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2014-04-30 11:05:09:739
828 da8
SLS FATAL: GetResponse failed with hresult 0x80072ee2...
2014-04-30 11:05:09:739
828 da8
EP FATAL: EP: CSLSEndpointProvider::GetWUClientDataAndInitParser - failed to get SLS data, error = 0x80072EE2
2014-04-30 11:05:09:739
828 da8
EP FATAL: EP: CSLSEndpointProvider::GetEndpointFromSLS - Failed to get client data and init parser, error = 0x80072EE2
2014-04-30 11:05:09:739
828 da8
EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80072EE2
2014-04-30 11:05:09:739
828 da8
Agent WARNING: Failed to obtain the authorization cab URL for service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0
2014-04-30 11:05:09:739
828 da8
Agent FATAL: Caller <NULL> failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0X80072EE2
2014-04-30 11:05:09:739
828 da8
SLS Retrieving SLS response from server...
2014-04-30 11:05:09:739
828 da8
SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=41&L=en-US&P=&PT=0x7&WUA=7.9.9600.16422
2014-04-30 11:05:30:742
828 da8
Misc WARNING: Send failed with hr = 80072ee2.
2014-04-30 11:05:30:742
828 da8
Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
2014-04-30 11:05:30:742
828 da8
Misc WARNING: Send request failed, hr:0x80072ee2
2014-04-30 11:05:30:742
828 da8
Misc WARNING: WinHttp: SendRequestUsingProxy failed for <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=41&L=en-US&P=&PT=0x7&WUA=7.9.9600.16422>.
error 0x80072ee2
2014-04-30 11:05:30:742
828 da8
Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
2014-04-30 11:05:30:742
828 da8
Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
2014-04-30 11:05:30:742
828 da8
Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
2014-04-30 11:05:30:742
828 da8
SLS FATAL: GetResponse failed with hresult 0x80072ee2...
2014-04-30 11:05:30:742
828 da8
EP FATAL: EP: CSLSEndpointProvider::GetWUClientDataAndInitParser - failed to get SLS data, error = 0x80072EE2
2014-04-30 11:05:30:742
828 da8
EP FATAL: EP: CSLSEndpointProvider::GetSecondaryServicesEnabledState - Failed to get client data and init parser, error = 0x80072EE2
2014-04-30 11:05:30:742
828 da8
Agent   * WARNING: Online service registration/service ID resolution failed, hr=0x80248014
2014-04-30 11:05:30:742
828 da8
Agent   * WARNING: Exit code = 0x80248014
2014-04-30 11:05:30:742
828 da8
Agent *********
2014-04-30 11:05:30:742
828 da8
Agent ** END ** Agent: Finding updates [CallerId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB) Id = 9]
2014-04-30 11:05:30:742
828 da8
Agent *************
2014-04-30 11:05:30:742
828 da8
Agent WARNING: WU client failed Searching for update with error 0x80248014
2014-04-30 11:05:30:742
828 da8
IdleTmr WU operation (CSearchCall::Init ID 9, operation # 99) stopped; does use network; is not at background priority
2014-04-30 11:05:30:742
828 da8
IdleTmr Decremented PDC RefCount for Network to 0
2014-04-30 11:05:30:742
828 da8
IdleTmr Decremented idle timer priority operation counter to 0
2014-04-30 11:05:30:743
576 12c0
COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
2014-04-30 11:05:30:743
576 12c0
COMAPI   - Updates found = 0
2014-04-30 11:05:30:743
576 12c0
COMAPI   - WARNING: Exit code = 0x00000000, Result code = 0x80248014
2014-04-30 11:05:30:743
576 12c0
COMAPI ---------
2014-04-30 11:05:30:743
576 12c0
COMAPI -- END -- COMAPI: Search [ClientId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
2014-04-30 11:05:30:743
576 12c0
COMAPI -------------
2014-04-30 11:05:30:743
576 1254
COMAPI WARNING: Operation failed due to earlier error, hr=80248014
2014-04-30 11:05:30:743
576 1254
COMAPI FATAL: Unable to complete asynchronous search. (hr=80248014)
The log is from a Server 2012 R2 Client. The only thing I was able to find was this Article which did not resolve my issue. Anyone else encounter anything similar? Any help would be appreciated.
Regards, Evan Mills - Systems Administrator

Every two hours is too aggressive for the ADR. Definitions are only released 2-3 times a day so every 8 hours is what most consider best practice. Is your WSUS sync occurring every two hours as well? If not, then the ADR wouldn't have anything new to pick
up anyway. It's best to set the WSUS sync for every 8 hours and then set the ADR to run after any successful WSUS sync.
So the EP definitions are caching but not installing? What does the WUAHandler.log show? One of my machines shows the following which indicates a successful installation from the ConfigMgr delivered update:
1. Update (Missing): Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.933.0) (0a156122-d4f8-4215-9e63-8f0f1e32c9c6, 200)   WUAHandler   4/30/2014 6:49:33 AM   11080 (0x2B48)
Async installation of updates started.   WUAHandler   4/30/2014 6:49:34 AM   11080 (0x2B48)
Update 1 (0a156122-d4f8-4215-9e63-8f0f1e32c9c6) finished installing (0x00000000), Reboot Required? No   WUAHandler   4/30/2014 6:50:23 AM   8664 (0x21D8)
Async install completed.   WUAHandler   4/30/2014 6:50:23 AM   8664 (0x21D8)
Installation of updates completed.   WUAHandler   4/30/2014 6:50:23 AM   11032 (0x2B18)
It sounds like if you set "Check for Endpoint Protection definitions at a specific interval" to 0 then it would prevent the WindowsUpdate.log activity you're seeing when the EP client tries to reach out for updates.

How do Virtual Applications get published in SCCM 2012

Similar Messages

Maybe you are looking for