Installing and Managing SCCM 2012 R2 client in workgroup

Hi,
I'm trying to install sccm 2012 r2 client on a workgroup workstation, but i can't manage to put the client working.
Already tried this solutions
http://blogs.technet.com/b/anilm/archive/2012/05/06/managing-workgroup-clients-in-configuration-manager-2012.aspx
http://eskonr.com/2013/08/sccm-configmgr-2012-manage-workgroup-computers-for-deploymentremote-tools-etc/
if i use this commands to install the client the client don't install.
ccmsetup.exe /source:C:\client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=cm12lab.com
if i use this one same happens
Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX FSP=sccmserver DNSSUFFIX=dnssuffix
If i use this one the client gets installed and the site code assigned but nothing more. It shows at the sccm console, but don't receive informations from sccm i think
Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX SMSSLP=sccmserver DNSSUFFIX=dnssuffix
on the client, clicking in Site tab and configure settings, the site code is there, clicking in Find Site returns error saying that cant find the site. on the locationservices log i'm getting
Policy prevents failover to WINS for lookup
Unable to retrieve AD Site membership
No Location reply received from xxxxxx.domain.xxx
No location reply received from xxxxxx
thks in advance

It should work just by:
Copy the client files (the whole directory) to the workgroup computer (c:\tmp\Client)
Run ccmsetup.exe /source:c:\tmp\Client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=CM12LAB.COM
Examine %windir%\ccmsetup\logs\ccmsetup.log for more information if the client doesn't install at all, possible causes might be corrupted WMI, lack of BITS (if running Windows 2003 server).. in these cases you could run WMIDiag (http://www.microsoft.com/en-us/download/details.aspx?id=7684)
to get more info on the errors and how to fix them.
Couple of checks:
DNS is working correctly both ways? Workgroup machine can find ConfigMgr server and ConfigMgr server can find workgroup machine by name? You can test this by running
nslookup <target.fqdn> on both
Workgroup computer is in the boundary / boundary group that has a site server assigned

Similar Messages

SCCM 2012 R2 client version 1101 and 1104 queries

There are several samples of collection query code for SCCM 2012 R2 client version 5.00.7958.1000, which is the base R2 client version. Patches can change this to 5.00.7958.1101 and 5.00.7958.1104. But there is a problem. These two patches
display as 1101 and 1104 when you go to Control Panel\Configuration Manager\General tab but when you go to Programs and Features and look in there the DisplayVersion is 5.00.7958.1000--so all query code samples are unable to different between the base versions
and version 1101 and 1004. I have been unable to find out how to write a query that finds version s 1101 and 1104. Does anyone know how to do this? Thanks.

Use ClientVersion from SMS_R_System within a console query or ClientVersion0 from V_R_system in a SQL query.
Even this can be deceptive though because the agent only reflects the highest version number of one of its subcomponets. This post, specific to 2007, describes the complexity: http://blog.configmgrftw.com/configmgr-client-hotfix-versioning/.
Specific to your question though, why do you care if either of these hotfixes are distributed to your clients? 2905002 is only necessary during WinPE (and if you are actually not using download on demand content during OSD) and 2910552 is only applicable
if you are rolling out Win 8.1 using a single TS to your XP systems using a refresh methodology.
Jason | http://blog.configmgrftw.com

Problem Installing SCCM 2012 R2 client on Windows Thin PC 7 (Windows Embedded)

Hi, I'm trying to install SCCM 2012 R2 client on Windows thin pc 7
I check the ccmsetup.log and it returned this:
Failed to get list of protected volume: List pointer is NULL (3)
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
DetectEWF failed with 0x80070003. ccmsetup
07/08/2014 08:06:26'' 2040 (0x07F8)
DetectWindowsEmbeddedWF failed with 0x80070003.
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
A Fallback Status Point has not been specified. Message with STATEID='304' will not be sent.
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
Cannot install over embedded OS with WF enabled on the system drive.
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
CcmSetup failed with error code 0x80004005 ccmsetup
07/08/2014 08:06:26'' 1960 (0x07A8)
Can somebody help me?
Thanks
Renzo
PD: Sorry for my bad English

Cannot install over embedded OS with WF enabled on the system drive.
You have to disable write filters on that device first.
Torsten Meringer | http://www.mssccmfaq.de

Coexistence of the SCCM 2012 R2 client and the App-V Full Infrastructure Model

Our environment currently has the App-V Full Infrastructure Model deployed with Windows 7 clients using hundreds of App-V apps. We plan to deploy SCCM 2012 R2 to the environment.
What is the affect on our Windows 7 users when the SCCM 2012 R2 client is deployed - will their existing App-V apps (utilizing the App-V Full Infrastructure Model) continue to function? Or will SCCM 'take over' all App-V functionality?
The only documentation I can find on this is one paragraph in the App-V and ConfigMgr 2012 White Paper (http://download.microsoft.com/download/1/5/A/15AD0DD6-40A8-49E3-86D6-C21E5D0BC7F8/App-V%20and%20ConfigMgr%202012%20White%20Paper.pdf) which
states:
Q: Is it possible to perform a phased migration from an App-V standalone or App-V Full Infrastructure
to Configuration Manager virtual application management?
A: Yes, migration to Configuration Manager virtual application management begins with deployment of
an App-V application from Configuration Manager 2012. Upon the first deployment in Configuration
Manager 2012, no new applications can be deployed via other methods, but all previously deployed
packages will be retained.
A blog post here (http://www.applepie.se/config-mgr-2012-and-app-v) seems to indicate this is expected behavior.
But then, this contradicts what Microsoft says on the TechNet website (http://technet.microsoft.com/en-us/library/jj822982.aspx):
Configuration Manager begins to manage virtual applications on a client after the first deployment of a virtual application. After this, all App-V applications on the computer must be managed by Configuration Manager.
Does anyone have any opinions or experience on this? Or further information?
My Microsoft Core Infrastructure & Systems Management blog -
blog.danovich.com.au

As soon as an App-V package is deployed to a user/device via SCCM then it takes over the management of the client on that device, therefore App-V packages coming from the App-V publishing server will no longer be deployed to that device.
I would assume that full cached apps would continue to be run on the local device but new content would no longer be deployed from it.
Cheers
Paul | sccmentor.wordpress.com

Error installing SCCM 2012 SP1 client

Hi All,
I am getting the following error, detailed in the client.msi.log, when trying to install the SCCM 2012 SP1 client on a couple of windows 2008 R2 servers.
Error 1904. Module C:\Windows\CCM\StatusAgentProxy.dll failed to register. HRESULT -2147010895
The ccmsetup.log details the same message without Error 1904 indicated.
I am installing the client using the SUP method, which has worked without any problems on all 180 other windows servers I have done. ccmsetup starts and downloads all pre reqs required for the client rollout, but it then hits this error and does not
finish the installation.
Any help would be much appreciated?
Regards PowerShell90

Hi,
I've seen this issue a couple of times and usually it's related to incorrect Versions of C++ Library installed on the system you try to install the Client. Try and remove any existing installations, reboot and install this version;
http://www.microsoft.com/en-us/download/details.aspx?id=26368
Let me know how it goes.

SCCM 2012 R2 Client only showing 2 items under Actions

I've enable AD Forest Discovery on Primary Site also checked Automatically create AD site boundaries when they are discovered and Automatically create IP address range boundaries for IP subnets when they are discovered.
I didn't change this (default) Disable AD Forest Discovery on CAS.
I am still running SCCM 2007 R3 SP2 in Production environment. Do I need to remove all the boundaries first on SCCM 2007? Before I could install SCCM 2012 R2 client?
The reason that I manually install SCCM 2012 R2 client to my test computers just want to see if the SCCM 2012 R2 client will install without any issues. Right now, there's :(
On my Client Push Installation Properties, I haven't Enable automatic site-wide push installation. I just don't want SCCM 2012 R2 client is automatically pushing it out. Should I enable this? Is there any effect?
Two nights ago, I manually deploy SCCM 2012 R2 client (right click to deploy SCCM Client) to my test Win7x64 Enterprise and Win8.1x64 Enterprise. Until this morning Actions are not fully there (it should be total 11)
SCCM 2012 R2 client (version 5.00.7958.1000) installed but SCEP 2012 is not install (I think there's a problem here) since I checked the Actions button on both of Win7x64 Enterprise and Win8.1x64 Enterprise are only showing 2 Actions:
1. Machine Policy Retrieval & Evaluation Cycle
2. User Policy Retrieval & Evaluation Cycle
I've checked on both of Win7x64 Enterprise and Win8.1x64 Enterprise logs (using CMTrace):
1. CcmExec.log -> no errors
2. LocationServices.log -> Current AD site of machine is Default-First-Site-Name
3. ClientLocation.log -> It knows my new MP (correct one)
4. ClientIDManagerStartup.log -> with errors below
ClientIDManagerStartup.log has lots of RED errors (same one):
<![LOG[RegTask: Failed to send registration request message. Error: 0x8000000a]LOG]!><time="11:26:13.695+420" date="07-03-2014" component="ClientIDManagerStartup" context="" type="3" thread="1716"
file="regtask.cpp:1297">
I am hoping someone will be able to point me to the right direcly, please. Thanks, Reza
Reza Prawirasatya

Idan,
Thanks for the info.
I have check this registry below:
Check in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Mobile Client
It's pointing to my new site code of SCCM 2012 R2 (it's not SCCM 2007 site code).
What I did wrong I deploy SCCM 2012 Client Custom Settings to a collection that I created and also Antimalware Policies to that collection as well where that collection has 0 (none members).
So I deleted and just simply pointed both SCCM 2012 Client Custom Settings and Antimalware Policies to All Systems and all my test computers (workstations & servers) have SCCM 2012 R2 client along with SCEP 2012.
I have more questions below:
What's the best way for me to approach this SCCM 2012 R2 Client push to a test computers (workstations and servers).
I have SCCM 2007 R3 SP2 is still running in Production, currently Boundaries set as IP subnet (not using AD Site, it used but I changed it 2 years ago).
Now, SCCM 2012 R2 Primary Site set Enable AD Forest Discovery with Automatically create AD & Automatically create IP address range boundaries for IP subnets.
Of course, by turning this option above, it will pick up lots of different IP subnets. Even the one our sister company (lots of different domain).
1. In SCCM 2012 R2 Boundary Groups, I set Default-First-Site-Name (AD Site), under Site Systems tab, I have also my Primary Site SCCM 2012 R2 here.
Here's the questions:
1. Do I need to add IP subnet in SCCM 2012 R2 Boundary Groups? Do I need to add let's say 10.xxx.20.xxx (IP subnet here).
2. Also, do I need to delete IP subnet in SCCM 2007 Boundaries that correspond to that IP subnet? Let's say I have 10.xxx.20.xxx (IP subnet here) and remove this one since I have added on number 1?
Reza Prawirasatya

SCCM 2012 R2 Clients are not retrieving policy

Hi - I know this question has been asked many times before - but I have tried almost everything and a no closer to solving the problem.
Background: Recently a SCCM 2012 SP1 single stand-alone site was upgraded to SCCM 2012 R2. The site is a single stand-alone primary site with a single DP, single MP, using mixed mode
(HTTP). The R2 upgrade ran without any problem and all SCCM components are showing as healthy.
A few test SCCM 2012 SP1 clients were upgraded to the R2 client using client-push.
However the upgraded clients are not retrieving policy from the Management Point. In the Actions Tab of the SCCM client, only Machine Policy Retrieval and User Policy Retrieval are available. But kicking of those actions does not
result in any of the advertised applications, Task Sequences becoming available. Infact Custom Client Settings are not being set either (e.g. Organisation Name in software Center).
I have checked and rechecked the following:
The upgrade of the client completed successfully (checked ccmsetup.log) and the version number went from 5.00.7804.1000 (SP1) to 5.00.7958.1000 (R2).
The MP health in the SCCM console is showing healthy.
The MP access URL's load correctly when run from SCCm client computers
“http://<ServerName>/sms_mp/.sms_aut?mplist” is ok
“http://<ServerName>/sms_mp/.sms_aut?mpcert” is ok
The SCCM clients are assigned to the site correctly – verified via the SCCM client and
ClientLocation.Log
ClientIDManager.Log is not showing any errors
CCMExec.log and ExecMgr.log don't show any advertisements being executed (Execmgr.log is almost empty and only has "Software ditrbution site settings policy does not yet exist on the client). If the client is not yest
registered this is expected behaviour")
The SCCM clients are Approved and NOT Blocked in SCCM
I have attempted to upgrade the SCCM client and also completely removed and reinstalled - and both have the same result (no client policy dpwnloaded)
I have also deleted the above clients completely from SCCM, Run divoery again and pushed the client to the machines again ...with the same result (SCCM client installs, assigns to correct site and then no policy downloaded)
SCCM 2012 Boundaries are configured correctly and assigned to Boundary Groups correctly
The SCCM client’s do not have the firewall enabled
Changed boundary from AD Site to Subnet to IP Address Range: Same issue exists
Uninstalled MP role and reinstalled it: same Issue exists
Tried to connect to SCCm client using 3rd party SCCM Client center tool but cannot connect
??? Not sure what else to try ???

Hi all - sorry for the late response.
We managed to resolve the issue after logging a job with Microsoft Support.
The issue was that the SCCM 2012 R2 upgrade corrupted 2 tables in the SCCM Database - leading to corrupt SCCM client policies.
I am pasting the resolution email from Microsoft below:
(NOTE: This may not be the exact sypmtoms you are experiencing so do not implement this fix assuming it will fix your problem!)
ISSUE:
- All clients are unable to download policies from the server
CAUSE:
- Bad policies in the Database
RESOLUTION:
-Issue with PADbID - Run below query against SCCM DB to verify corrupt entries:
SELECT * FROM
ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
Confirmed Bad policies entries in the SCCM database
Run below query to delete the bad policy after which we resolved the issue:
Delete FROM ResPolicyMap
WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)"

Cannot install or manage Server 2012 R2 RDS server locally but works remotely

I am working with a Server 2012 R2 standard machine and attempting to get Remote Desktop Services installed and configured on it. Using the Add Roles and Features wizard while logged on locally to the server in question resulted in the error
“Unable to connect to the server by using Windows PowerShell remoting.” However, if I use a different Server 2012 R2 machine to run the Add Roles and Features wizard remotely targeted
at the original server then I can successfully get RDS installed.
Also, after the installation has completed I cannot manage RDS locally on the server but can successfully manage it remotely from another Server 2012 R2 box. When attempting to use Server Manager locally and choose the Remote Desktop Services menu the error
message "A Remote Desktop Services deployment does not exist in the server pool."
The server appears to be functioning correctly and can be managed remotely just not locally. I can reproduce the behavior on other Server 2012 boxes in the environment.
What would cause local install and management to fail but remote management work?

Hi,
Have you added the RDS server under server manager ADD server? Does it show the server in server list?
Check whether there is any wrong IP address\hostname entry occurs under DNS record which looks\points the DNS entry successfully.
Add Servers to Server Manager
https://technet.microsoft.com/en-in/library/hh831453.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Error installing SQL Management Studio 2012

have visual studio 2013 ultimate and windows 8.1 . I tried to install SQL Management Studio 2012 and the error occurs
The following error has occurred:
Could not write value to key \SOFTWARE. Verify that you have sufficient access to that key, or contact your support personnel.
Need help to solve this.

Running as adiministrator
Summary log file
Overall summary:
Final result: Failed: see details below
Exit code (Decimal): -2068052610
Start time: 2014-07-21 01:25:26
End time: 2014-07-21 01:32:11
Requested action: Install
Setup completed with required actions for features.
Troubleshooting information for those features:
Next step for SSMS: Use the following information to resolve the error, and then try the setup process again.
Machine Properties:
Machine name: GHAZANFAR
Machine processor count: 4
OS version: Future Windows Version
OS service pack:
OS region: United States
OS language: English (United States)
OS architecture: x64
Process architecture: 64 Bit
OS clustered: No
Product features discovered:
Product Instance Instance ID Feature
Language Edition Version Clustered
SQL Server 2012 LocalDB
1033 Express Edition 11.1.3000.0 No
Package properties:
Description: Microsoft SQL Server 2012
ProductName: SQL Server 2012
Type: RTM
Version: 11
SPLevel: 0
Installation location: c:\350b2b28d35e58b5113af189b3c5\x64\setup\
Installation edition: Express
Product Update Status:
User selected not to include product updates.
User Input Settings:
ACTION: Install
ADDCURRENTUSERASSQLADMIN: true
AGTSVCACCOUNT: <empty>
AGTSVCPASSWORD: <empty>
AGTSVCSTARTUPTYPE: Manual
ASBACKUPDIR: Backup
ASCOLLATION: Latin1_General_CI_AS
ASCONFIGDIR: Config
ASDATADIR: Data
ASLOGDIR: Log
ASPROVIDERMSOLAP: 1
ASSERVERMODE: MULTIDIMENSIONAL
ASSVCACCOUNT: <empty>
ASSVCPASSWORD: <empty>
ASSVCSTARTUPTYPE: Automatic
ASSYSADMINACCOUNTS: <empty>
ASTEMPDIR: Temp
BROWSERSVCSTARTUPTYPE: Disabled
CLTCTLRNAME: <empty>
CLTRESULTDIR: <empty>
CLTSTARTUPTYPE: 0
CLTSVCACCOUNT: <empty>
CLTSVCPASSWORD: <empty>
CLTWORKINGDIR: <empty>
COMMFABRICENCRYPTION: 0
COMMFABRICNETWORKLEVEL: 0
COMMFABRICPORT: 0
CONFIGURATIONFILE:
CTLRSTARTUPTYPE: 0
CTLRSVCACCOUNT: <empty>
CTLRSVCPASSWORD: <empty>
CTLRUSERS: <empty>
ENABLERANU: false
ENU: true
ERRORREPORTING: true
FEATURES: SSMS
FILESTREAMLEVEL: 0
FILESTREAMSHARENAME: <empty>
FTSVCACCOUNT: <empty>
FTSVCPASSWORD: <empty>
HELP: false
INDICATEPROGRESS: false
INSTALLSHAREDDIR: C:\Program Files\Microsoft SQL Server\
INSTALLSHAREDWOWDIR: C:\Program Files (x86)\Microsoft SQL Server\
INSTALLSQLDATADIR: <empty>
INSTANCEDIR: C:\Program Files\Microsoft SQL Server\
INSTANCEID: <empty>
INSTANCENAME: <empty>
ISSVCACCOUNT: NT AUTHORITY\Network Service
ISSVCPASSWORD: <empty>
ISSVCSTARTUPTYPE: Automatic
MATRIXCMBRICKCOMMPORT: 0
MATRIXCMSERVERNAME: <empty>
MATRIXNAME: <empty>
NPENABLED: 0
PID: *****
QUIET: false
QUIETSIMPLE: false
ROLE: AllFeatures_WithDefaults
RSINSTALLMODE: DefaultNativeMode
RSSHPINSTALLMODE: DefaultSharePointMode
RSSVCACCOUNT: <empty>
RSSVCPASSWORD: <empty>
RSSVCSTARTUPTYPE: Automatic
SAPWD: <empty>
SECURITYMODE: <empty>
SQLBACKUPDIR: <empty>
SQLCOLLATION: SQL_Latin1_General_CP1_CI_AS
SQLSVCACCOUNT: <empty>
SQLSVCPASSWORD: <empty>
SQLSVCSTARTUPTYPE: Automatic
SQLSYSADMINACCOUNTS: <empty>
SQLTEMPDBDIR: <empty>
SQLTEMPDBLOGDIR: <empty>
SQLUSERDBDIR: <empty>
SQLUSERDBLOGDIR: <empty>
SQMREPORTING: true
TCPENABLED: 0
UIMODE: AutoAdvance
UpdateEnabled: false
UpdateSource: MU
X86: false
Configuration file: C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\20140721_012339\ConfigurationFile.ini
Detailed results:
Feature: Management Tools - Basic
Status: Failed: see logs for details
Reason for failure: An error occurred during the setup process of the feature.
Next Step: Use the following information to resolve the error, and then try the setup process again.
Component name: SQL Server Management Services
Component error code: 1406
Component log file: C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\20140721_012339\sql_ssms_Cpu64_1.log
Error description: Could not write value to key \SOFTWARE. Verify that you have sufficient access to that key, or contact your support personnel.
Error help link: http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.2100.60&EvtType=sql_ssms.msi%40WriteRegistryValues%401406
Rules with failures:
Global rules:
Scenario specific rules:
Rules report file: C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\20140721_012339\SystemConfigurationCheck_Report.htm

Arch Linux install and management on multiple workstations

Hello
I've been asked to install and manage an installation of 20+ computers at my school. They will be dual-boot with Windows and Linux. Even though i've never used Arch, i chose it for the install because i've heard a lot of good about it. I ask for tips on installing and managing such an installation. All the computers and their disks are identical, and i wish all my systems to be identical as well. There is a separate server with LDAP to which i have no root access, but which holds all user accounts.
Install:
I probably can suffer installing all the systems manually. I'll dedicate one workstation and create an ftp mirror so that i may do a netinstall on the others -- is this an ok idea? Also, how can i setup hostnames? Can DHCP do this?
Management:
The computers will be randomly shut down and powered on as the users please. Perhaps i can boot them all on once a fortnight and use cssh (cluster ssh) to do a system update -- but maybe there is a better way? A local mirror of the packages seems wise. I don't think it's a good idea to create a diskless setup, since if all machines are powered on at once it will significantly decrease boot time and increase network usage, to the annoyance of the users.
I ask for criticism of those ideas and additional hints.
PS. I appreciate the joke of asking someone without a Linux installation what the output of a Linux command is:) (when registering to this forum)

If I was in your position...
Setup arch on one machine, from scratch to production ready, with the following in mind.
-Decide what desktop environment and window manager(s) you want installed/want to support.
-Which applications your users will need
-Which privileges are required or groups your users will need to be in.
-Install everything, and note the names of the packages, everything installed after the base install.
Then make a simple setup sh script that calls pacman to install everything you need and check any settings/group memberships etc, checking the logs afterwords to make sure that there were no issues. You could use this to streamline setup on the rest, or just do what tomk said and clone it.
I wouldn't wait more than a week between updates. You could probably setup a cron job to run pacman and accept the defaults. You should run this on a test machine before the rest though to insure nothing breaks; that happens occasionally.
I would probably choose Gnome as the DE personally. Not that it is any better than the others, but it is what I am familiar with, and seemed a bit less cluttered than KDE last time I used it. Less clutter and easily changeable settings means less time fixing users' mistakes.
You could setup your own local arch repo/mirror and just have the rest of the machines sync from that, it'd save a lot of bandwidth and make updates a bit faster.

Support for Internet based client Management - SCCM 2012

Hi There,
My Company wants to go for Internet based client Management in SCCM 2012 SP1 R2 and here is the design I'm proposing. I'm getting a bit confused at one point and need suggestion....
Everything would work on HTTPS ( PKI Certificate based )... LAN and Internet.
1 Primary ( with non-client facing roles installed ) on LAN with two site systems.
- One Site System configured for INTRANET support only with MP, DP and SUP -> To support LAN users ( Allow
Intranet-only connections )
- One Site System configured for INTERNET support only with MP, DP and SUP -> To support Internet users ( Allow
Internet-only connections )
The INTERNET facing site system is in DMZ network connected to parent Primary via Firewall.
We want internet clients to talk to ONLY DMZ SCCM Site System and no connection to corporate LAN. We cannot open any ports for internet based clients to LAN.
If this is the supported scenario, then why we need to put the Internet FQDN in the Primary server Site System property. This server would not be available to internet. It should only be my DMZ SCCM server client should connect for MP, DP and SUP and only
this DMZ server should be accessible to client over internet.
Also, what least ports should be opened between :
- Parent Primary and its internet facing site system kept in DMZ
- DMZ Site system and internet clients.
Thanks in advance for your suggestions.
Sam

The FQDN has only to be specified on the Internet facing site system. You can leave this field blank on the primary site Server.
Ports to Open:
Internet --> DMZ Site Server:
TCP Port 443
TCP Port 80, if Fallback Status Point is installed
DMZ Site Server --> Primary Site:
TCP 135, 49152-65535
TCP 445
TCP 135, 24158 (fixed with
http://msdn.microsoft.com/en-us/library/bb219447(v=vs.85).aspx )
TCP 80, 443
If you have some other roles installed, please consult this page:
http://technet.microsoft.com/en-us/library/hh427328.aspx
Cheers,
Thomas Kurth
Netree AG, System Engineer
Blog:
http://netecm.netree.ch/blog | Twitter:
| LinkedIn:
| Xing:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Manage SCCM 2012 clients in DMZ (OS Deploy, Windows updates) via DP/MP

Hi,
We ’d like to manage (=OS Deploy, Packages,Windows updates) Windows clients (Windows 2008/2012 R2 servers for now, about 20 of them) in a DMZ (= different domain).
There is this article
https://nikifoster.wordpress.com/2011/01/31/installing-configmgr-clients-on-servers-in-a-dmz/ which explains what to do … in 2011. Since then lots of things are changed I guess
Before I dive in, I’d need to have an overview + do some administrative tasks (like asking for firewall accesses).
Current setup DMZ:
Our SCCM 2012 R2 server is on a Windows 2008 R2 OS
Client communication is done via HTTP (not HTTPS)
An extra physical Distribution point is setup (only DP, nothing more) in our current domain
A new Windows 2012 server is setup in the DMZ which should host the DP and probably management point (since it should manage the clients over there)
There are clients in DMZ that are currenlty managed by SCCM 2007 but
this server will be phased out, these client have:
Correct sccm functionality
Correct DNS resolution
My steps/questions, please comment:
Add the DMZ ip range to SCCM 2012 boundary as “DMZ”
Add the network access account to be able to deploy as well clients as distribution point in DMZ
In the DMZ accesses on firewall for server VLAN have to be asked
When we have a distribution point and communication is “HTTP only” then http (port 80) from DMZ to sccm server should suffice, correct? Or are
extra firewall openings needed for management point access/packages and windows updates sync?
Now the sccm clients will be deployed to the servers in DMZ: deploy SCCM clients to hosts in DMZ, how this should be done: we connect a console to the SCCM-server in the DMZ then deploy the discovered clients?
OS Deploy should be made available, but no dhcp is available in DMZ and it is not an option either, therefore we would boot from an ISO then enter an ip (or pre-enter it so there is already filled in an ip?). So tasksequences/deployments
for servers in DMZ, where are they configured/deployed then? Via console access on DMZ management point or can we deploy on our domain SCCM management point (not in DMZ) and it will be synced to the DMZ management point? Not clear
Selective sync of software to this distribution point (howto? not sure), we don’t need any Windows 8 software/drivers to be synced.
Thanks for your input!
J.
Jan Hoedt

No comment;
I think you mean the client push installation account and the site system installation account;
More ports are required, see site server > distribution point and distribution point > management point from the provided link;
The console will always be connected to your primary site server. The client will be pushed from the primary site server and it will provide the initial files. The other files will be downloaded from the local distribution point;
The task sequence deployment will be just like a normal taks sequence deployment. The only difference is the location of the server;
Only the content that's distributed to the distribution point in the DMZ will be available on that distribution point.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Previously blocked client computers - now cannot install SCCM 2012 R2 client

Hello,
I have a Primary Site on SCCM 2012 R2. New installation of 2012 R2, not upgrade from SCCM 2007. My environment is pretty small for now, having added just few dept computers in the company.
We are using SCCM for Endpoint Security antivirus deployment. Some time ago I had not configured the Discovery methods correctly and the scep client started to install on few machines on which it was not supposed to be installed. I removed the clients then
(both remote and local uninstallation) but since the sccm client was getinng installed again - I had to Block these few machines. Now the problem is that I cannot install the scep client on these computers that have previously been blocked. I am sure the previous
block is the reason because these are about 6-7 machines and only they do not install. All others do install scep client. The installation process goes smooth on these problematic machines, ccmsetup folder gets created in C:\Windows, I follow the ccmsetup.log
and it says " <![LOG[CcmSetup is exiting with return code 0]LOG]!><time="12:33:56.415-180" date="10-08-2014" component="ccmsetup" context="" type="1" thread="3992"
file="ccmsetup.cpp:10875"> " at the end of the log which is what it is supposed to show when installation goes ok, then Ccmexec.exe process continues running but folder Microsoft Security Client in C:\Program Files never gets
created and no scep client gets installed.
I tried deleting the computers from the sccm console and discovering them anew - did not help. Tried even renaming the comp locally, after having it deleted from sccm console, then adding it anew hoping sccm will regard it as a new resource-again no good.
All these computers have the Approve, Block and Unblock buttons greyed out/inactive in console.
Has anyone had this same problem? Any ideas what can be done. Thank you.
Regards,
Hristo

Hi,
were you ever able to fix this?
I'm running in a similar issue here.
One single client was blocked, then deleted, lateron recreated (imported manually name and MAC address).
Now the client is unable to register itself in SCCM 2012 R2 (no CU yet).
Tried the usual stuff: uninstalled SCCM client, remove the entries of CCMsetup and SMS from registry, deleted the SMS certs from the computer personal
store and deleted the smscfg.ini from C:\Windows. Then re-installed the SCCM client
Client logs look fine, except ClientIDManagerStartup.log:
<![LOG[[RegTask] - Client is not registered. Sending registration request for GUID:F295F120-9C99-4D10-82B7-027FDD86B5F6 ...]LOG]!><time="14:46:11.555-60" date="01-12-2015" component="ClientIDManagerStartup" context=""
type="1" thread="6320" file="regtask.cpp:1609">
<![LOG[[RegTask] - Server rejected registration request: 3]LOG]!><time="14:46:12.616-60" date="01-12-2015" component="ClientIDManagerStartup" context="" type="3" thread="6320" file="regtask.cpp:1675">
On the server:
Begin validation of Certificate [Thumbprint 12923BCACDAE5B89547A25E54BF11E533163742F] issued to 'SMS'   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
Completed validation of Certificate [Thumbprint 12923BCACDAE5B89547A25E54BF11E533163742F] issued to 'SMS'   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
Encountered database error while verifying headers for client 'GUID:F3063334-69B4-471F-B158-56782E499F4A' (0x87d00238).   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
CCMValidateAuthHeaders failed (0x87d00238) to validate headers for client 'GUID:F3063334-69B4-471F-B158-56782E499F4A'.   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
A client is trying to re-register with an administrator revoked certificate: SMSID='GUID:F295F120-9C99-4D10-82B7-027FDD86B5F6'.   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
MP Reg: Processing completed. Completion state = 0   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
We are using HTTP for client communication.
Any ideas appreciated.
Michael

Couldn't verify 'C:\Windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x80096001 - SCCM 2012 R2 Client Deployment

Hi All,
I installed SCCM 2012 R2 one primary site from one of our customer & using SQL 2012 SP1 DB at the back-end.
Facing Issues while deploying agent from one of our client machine - OS - window 7 Professional Sp1:
==========[ ccmsetup started in process 3828 ]==========
ccmsetup 25-02-2014 02:20:37 PM
284 (0x011C)
Running on platform X86 ccmsetup
25-02-2014 02:20:37 PM 284 (0x011C)
Updated security on object C:\Windows\ccmsetup\cache\.
ccmsetup 25-02-2014 02:20:37 PM
284 (0x011C)
Launch from folder C:\Windows\ccmsetup\ ccmsetup
25-02-2014 02:20:37 PM 284 (0x011C)
CcmSetup version: 5.0.7958.1000 ccmsetup
25-02-2014 02:20:37 PM 284 (0x011C)
Successfully started the ccmsetup service ccmsetup
25-02-2014 02:20:37 PM 332 (0x014C)
In ServiceMain ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Folder 'Microsoft\Configuration Manager' not found. Task does not exist.
ccmsetup 25-02-2014 02:20:37 PM
332 (0x014C)
CcmSetup is exiting with return code 0 ccmsetup
25-02-2014 02:20:37 PM 332 (0x014C)
Running on 'Microsoft Windows 7 Professional ' (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 18
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/config:C:\Windows\ccmsetup\MobileClientUnicode.tcf" "/RetryWinTask:1"
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/config:C:\Windows\ccmsetup\MobileClientUnicode.tcf" "/RetryWinTask:1"
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
SslState value: 224 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPPORT: 80 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPSPORT: 443 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPSSTATE: 480 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPSCERTNAME: ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
FSP: SCCM.MYDOMAIN.COM ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMCERTISSUERS: CN=MYDOMAIN-CA-CA; DC=MYDOMAIN; DC=COM
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
CCMFIRSTCERT: 1 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcf
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Retry time: 10 minute(s)
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
MSI log file: C:\Windows\ccmsetup\Logs\client.msi.log
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
MSI properties: INSTALL="ALL" SMSSITECODE="PRI" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="480" FSP="SCCM.MYDOMAIN.COM" CCMCERTISSUERS="CN=MYDOMAIN-CA-CA; DC=MYDOMAIN; DC=COM"
CCMFIRSTCERT="1" ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Source List: ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
\\SCCM.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
\\SCCMDMZ.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
\\SCCM.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
\\SCCMDMZ.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
MPs: ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
SCCM.MYDOMAIN.COM
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
No version of the client is currently detected.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Folder 'Microsoft\Configuration Manager' not found. Task does not exist.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Attempting #1 retry. Max 5 retries. ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Updated security on object C:\Windows\ccmsetup\.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Sending Fallback Status Point message to 'SCCM.MYDOMAIN.COM', STATEID='100'.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Failed to get client version for sending messages to FSP. Error 0x8004100e
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Params to send FSP message '5.0.7958.1000 Deployment '
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Request failed: 500 Internal Server Error
FSPStateMessage
25-02-2014 02:20:37 PM 1480 (0x05C8)
Running as user "SYSTEM" ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Detected 69650 MB free disk space on system drive.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Checking Write Filter Status. ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
This is not a supported write filter device. We are not in a write filter maintenance mode.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=PRI))'
ccmsetup 25-02-2014 02:20:38 PM
1480 (0x05C8)
OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>448</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers>CN=MYDOMAIN-CA-CA;
DC=MYDOMAIN; DC=COM</CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>PRI</RootSiteCode><CCM>
<CommandLine>SMSSITECODE=PRI</CommandLine> </CCM><FSP> <FSPServer>SCCM.MYDOMAIN.COM</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0" /></Capabilities><Domain
Value="MYDOMAIN.COM" /><Forest Value="MYDOMAIN.COM" /></ClientOperationalSettings>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Unable to open Registry key Software\Microsoft\CCM. Return Code [80070002]. Client HTTPS state is Unknown.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
The MP name retrieved is 'SCCM.MYDOMAIN.COM' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
MP 'SCCM.MYDOMAIN.COM' is compatible ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
Retrieved 1 MP records from AD for site 'PRI'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Retrived site version '5.00.7958.1000' from AD for site 'PRI'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
SiteCode: PRI ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
SiteVersion: 5.00.7958.1000
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Only one MP SCCM.MYDOMAIN.COM is specified. Use it.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Searching for DP locations from MP(s)... ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
Current AD site of machine is Default-First-Site
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Local Machine is joined to an AD domain LocationServices
25-02-2014 02:20:39 PM 1480 (0x05C8)
Current AD forest name is MYDOMAIN.COM, domain name is MYDOMAIN.COM
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
DhcpGetOriginalSubnetMask entry point is supported.
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Begin checking Alternate Network Configuration
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Finished checking Alternate Network Configuration
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Adapter {95A6D3CE-4F28-4E55-A29A-FF3F1A317C61} is DHCP enabled. Checking quarantine status.
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Adapter {6024AB68-EB5E-4370-BD9E-8B2CEFE261A8} is DHCP enabled. Checking quarantine status.
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="PRI"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0"
UseInternetDP="0">
<ADSite Name="Default-First-Site"/>
<Forest Name="MYDOMAIN.COM"/>
<Domain Name="MYDOMAIN.COM"/>
<IPAddresses>
<IPAddress SubnetAddress="10.0.0.0" Address="10.10.10.192"/>
</IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
' ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
Sending message header '<Msg SchemaVersion="1.1"><ID>{F6331322-941A-4E44-974F-A755B1B016A4}</ID><SourceHost>POOJASETHI</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:POOJASETHI:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>SCCM.MYDOMAIN.COM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-02-25T08:50:39Z</SentTime><Body
Type="ByteRange" Offset="0" Length="1126"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
CCM_POST 'HTTP://SCCM.MYDOMAIN.COM/ccm_system/request'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Content boundary is '--aAbBcCdDv1234567890VxXyYzZ'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Received header '<Msg SchemaVersion="1.1">
<ID>{14ADB6F1-95C1-4EEF-B8BA-16CD020ACFCF}</ID>
<SourceID>GUID:526CE573-6351-407E-AC2A-2C3927979AD9</SourceID>
<SourceHost>SCCM</SourceHost>
<TargetAddress>direct:POOJASETHI:LS_ReplyLocations</TargetAddress>
<ReplyTo>MP_LocationManager</ReplyTo>
<CorrelationID>{00000000-0000-0000-0000-000000000000}</CorrelationID>
<Priority>3</Priority>
<Timeout>600</Timeout>
<Capabilities><Property Name="SSL" Version="1"/></Capabilities><ReplyCapabilities><AllowRegistrationReset>direct:SCCM:ClientRegistration</AllowRegistrationReset></ReplyCapabilities><TargetHost>POOJASETHI</TargetHost><TargetEndpoint>LS_ReplyLocations</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>https</Protocol><SentTime>2014-02-25T08:50:39Z</SentTime><Body
Type="ByteRange" Offset="0" Length="3494"/><Hooks><Hook3 Name="zlib-compress"/><Hook Name="authenticate"><Property Name="Signature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roperty><Property
Name="AuthSenderMachine">SCCM;SCCM.MYDOMAIN.COM;</Property><Property Name="MPSiteCode">PRI</Property></Hook></Hooks><Payload Type="inline"/></Msg>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Received reply body '<ContentLocationReply SchemaVersion="1.00"><ContentInfo PackageFlags="16777216"><ContentHashValues/></ContentInfo><Sites><Site><MPSite SiteCode="PRI" MasterSiteCode="PRI"
SiteLocality="LOCAL" IISPreferedPort="80" IISSSLPreferedPort="443"/><LocationRecords><LocationRecord><URL Name="http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003" Signature="http://SCCM.MYDOMAIN.COM/SMS_DP_SMSSIG$/PRI00003"/><ADSite
Name="Default-First-Site"/><IPSubnets><IPSubnet Address="10.0.0.0"/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SCCM.MYDOMAIN.COM</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="1"/><Locality>LOCAL</Locality></LocationRecord><LocationRecord><URL
Name="http://SCCMDMZ.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003" Signature="http://SCCMDMZ.MYDOMAIN.COM/SMS_DP_SMSSIG$/PRI00003"/><ADSite Name="Default-First-Site"/><IPSubnets><IPSubnet Address="172.16.10.0"/><IPSubnet
Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SCCMDMZ.MYDOMAIN.COM</ServerRemoteName><DPType>SERVER</DPType><Windows
Trust="1"/><Locality>FALLBACK</Locality></LocationRecord></LocationRecords></Site></Sites><ClientPackage FullPackageID="PRI00003" FullPackageVersion="1" FullPackageHash="BFC11E099E8F451107B43E0DBEFD93B01DB2D6453DA74F8A2CB94B73D676C1CD"
MinimumClientVersion="5.00.7958.1000" RandomizeMaxDays="7" ProgramEnabled="false" LastModifiedTime="30354761;897103744" SiteVersionMatch="true" SiteVersion="5.00.7958.1000" EnablePeerCache="true"/><RelatedContentIDs/></ContentLocationReply>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Found local location 'http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Found remote location 'http://SCCMDMZ.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Discovered 1 local DP locations. ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
PROPFIND 'http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Using DP location http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
GET 'http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003/ccmsetup.cab'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Couldn't verify 'C:\Windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x80096001
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Sending Fallback Status Point message to 'SCCM.MYDOMAIN.COM', STATEID='316'.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Failed to get client version for sending messages to FSP. Error 0x8004100e
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Params to send FSP message '5.0.7958.1000 Deployment Error 0x80004005. Pre-req file name: C:\Windows\ccmsetup\ccmsetup.cab'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Request failed: 500 Internal Server Error
FSPStateMessage
25-02-2014 02:20:39 PM
1480 (0x05C8)
Failed to extract manifest cab file with error 0x80004005. Try next location.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Enumerated all 1 local DP locations but none of them is good. Fallback to MP.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
GET 'HTTP://SCCM.MYDOMAIN.COM/CCM_Client/ccmsetup.cab'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Couldn't verify 'C:\Windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x80096001
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
CcmSetup failed with error code 0x80004005
ccmsetup 25-02-2014 02:20:39 PM
284 (0x011C)
Please let me know any solution or workaround for this
Thanks Rahul$

Hi,
The client cannot verify the signature of ccmsetup.cab. I suggest you check the Trusted Root Certification Authorities in certificate store on the client to see whether a certificate is missing.
Try to enable verbose logging for SCCM client installation. Then check the log to see whether there are some useful information.(http://technet.microsoft.com/en-us/library/gg699356.aspx)
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 R2 clients not being automatically 'Approved'

We have a development SCCM 2012 R2 environment that consists of one server with the following roles:
-Component Server
-Distribution Point
-Management point
-Reporting services point
-Site database server
-Site server
-Site system
We're using this for OSD to deploy Windows 8.1 (we have MDT integrated). The problem lies in the fact that once systems are imaged and the client is installed on them, they do not get Approved, and therefore cannot receive any further OSD task sequences
to be reimaged, or any task sequence for that matter.
What are a list of things one should check in troubleshooting this? We've checked AD permissions on the System Management container, they look fine.
What else?

In the Administration workspace, go to Site Configuration, right click on Sites, and select Hierarchy Setttings.
The Client Approval and Conflicting Records tab has a 'Client approval method' section. Do you have "Automatically approve computers in trusted domains" selected? Are these clients a member of a trusted domain when the client is installed?
If you have "Manually approve each computer" selected, then all devices would have to be manually approved.
Regards,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you've found a bug or want the product worked differently,
share your feedback.
<-- If this post was helpful, please click "Vote as Helpful".

Installing and Managing SCCM 2012 R2 client in workgroup

Similar Messages

Maybe you are looking for