Is the client/agent required on distribution points?

For license reasons we are advised to uninstall the agent on a bunch of servers. All our distribution point servers are amongst these. I can't find out if the config mgr client is actually required on the DPs or not. Anyone here know this?

No, it's not required.

Similar Messages

Anyconnect 3.1.0.1065 "the client agent has encountered an error"

Hi there.
I trying to resolve a problem with VPN connection. We use ASA 5540, anyconnect ver. 3.1.0.1065 which works fine for almost every workstations. But some of them after successful authentication crash with error attached below:
"the client agent has encountered an error"
Operation system is Win 7 64bit. Has anybody sow sth like that?
thanks.

Hi Ad,
Could you please disable any FW / AV and try?
How did you install 3.1? Did you upgrade it from a previous version?
What if you uninstall it and install it again?
What does the DART bundle reveal?
Thanks.
Portu.
Please rate any helpful posts

What is the process that SCCM clients access content from Distribution Points?

I already know that the (Network Access Account) NAA is one method, and that it also has to have the
Access this computer from the net network right configured on the Distribution Point (Default server settings allow this). I am trying to understand what happens when the connection to the Distribution Point fails when using the NAA. Does the
client use the computer account (computername$) of the SCCM client or is the SCCM Site Server account (SCCMSiteServer$) instead. After reading
this and
this, I am not sure now. Hopefully someone can help clear this up.
--Tony

The first link also states: When Configuration Manager tries to use the computername$
account to download the content and it fails, it automatically tries the Network Access Account again, even if it has previously tried and failed.
The way this reads to me is that the Network Access Account is first attempted since it is tried again after the computername$ is
attempted. Peter, I am I just misunderstanding what it is trying to say? Also, is computername$ referring to the client machine and not
the SCCM site server? Is the SCCM site server ever used which is referenced in Gerry's blog?
Just to make sure I completely understand the process goes:
Local Computer account (ComputerName$)
Network Access Account (NAA)
No use of SCCM Site Server\s
--Tony

Some Clients not using Local Distribution Point

I have a new physcial site that we are wanting to put the SCCM client on the workstations. The local DP has been setup and the SCCM 2012 config settings for the new site have been made. I did a manual push to 5 workstations and monitored the ccmsetup.log.
I had some clients using the local DP for the client install and some went back across the WAN to the MP to get the files. The ones that come back across the WAN to the MP have this in their log shown below. It does not appear to be boundary related or
Client OS as they are in the same subnet that is configured and have both xp and win7 working and not working. I found a few others have had this issue come up searching the web, but none of solutions helped in my situation. The client is installing on
all of the workstations I have manually pushed it to. I just can't figure out why some are not using the local DP and YES I have verified that the ones not using the local DP are in the same boundary group as the ones that do.
Any help is appreciated. FVH081-DP1 is the local DP and AHDC400 is my MP
Only one MP AHDC400.phs-sfalls.amck.net is specified. Use it. ccmsetup 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Searching for DP locations from MP(s)... ccmsetup 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Current AD site of machine is FVH LocationServices 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Local Machine is joined to an AD domain LocationServices 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Current AD forest name is amck.net, domain name is fvh.amck.net LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
DhcpGetOriginalSubnetMask entry point not supported. LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Begin checking Alternate Network Configuration LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Finished checking Alternate Network Configuration LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Adapter {AB6BAB2C-7B65-441A-A83C-C91FF8B8498D} is DHCP enabled. Checking quarantine status. LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="MCK"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0"
UseInternetDP="0">
    <ADSite Name="FVH"/>
    <Forest Name="amck.net"/>
    <Domain Name="fvh.amck.net"/>
    <IPAddresses>
<IPAddress SubnetAddress="10.7.64.0" Address="10.7.79.3"/>
    </IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Sending message header '<Msg SchemaVersion="1.1"><ID>{DA5C91BE-3A3E-4E14-AF6E-DB0E9AC36878}</ID><SourceHost>FVHH008</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:FVHH008:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>AHDC400.phs-sfalls.amck.net</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2015-01-23T20:56:42Z</SentTime><Body
Type="ByteRange" Offset="0" Length="1068"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
CCM_POST 'HTTP://AHDC400.phs-sfalls.amck.net/ccm_system/request' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Content boundary is '--aAbBcCdDv1234567890VxXyYzZ' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Received header '<Msg SchemaVersion="1.1">
<ID>{45121E9D-C6EE-4154-BF60-AADD6204B66E}</ID>
<SourceID>GUID:1B6F821D-DF54-4E9D-89BD-D68DD917DBD2</SourceID>
<SourceHost>AHDC400</SourceHost>
<TargetAddress>direct:FVHH008:LS_ReplyLocations</TargetAddress>
<ReplyTo>MP_LocationManager</ReplyTo>
<CorrelationID>{00000000-0000-0000-0000-000000000000}</CorrelationID>
<Priority>3</Priority>
<Timeout>600</Timeout>
<TargetHost>FVHH008</TargetHost><TargetEndpoint>LS_ReplyLocations</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2015-01-23T20:56:42Z</SentTime><Body Type="ByteRange"
Offset="0" Length="2590"/><Hooks><Hook3 Name="zlib-compress"/><Hook Name="authenticate"><Property Name="Signature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roperty><Property
Name="AuthSenderMachine">AHDC400;AHDC400.phs-sfalls.amck.net;</Property><Property Name="MPSiteCode">MCK</Property></Hook></Hooks><Payload Type="inline"/></Msg>' ccmsetup 1/23/2015
2:56:42 PM 2728 (0x0AA8)
Received reply body '<ContentLocationReply SchemaVersion="1.00"><ContentInfo PackageFlags="16777216"><ContentHashValues/></ContentInfo><Sites><Site><MPSite SiteCode="MCK" MasterSiteCode="MCK"
SiteLocality="LOCAL" IISPreferedPort="80" IISSSLPreferedPort="443"/><LocationRecords><LocationRecord><URL Name="http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002" Signature="http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSSIG$/AHS00002"/><ADSite
Name="FVH"/><IPSubnets><IPSubnet Address="10.7.64.0"/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7804</Version><Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>FVH081-DP1.phs-sfalls.amck.net</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="1"/><Locality>LOCAL</Locality></LocationRecord></LocationRecords></Site><Site><MPSite
SiteCode="MCK" MasterSiteCode="MCK" SiteLocality="LOCAL"/><LocationRecords/></Site></Sites><ClientPackage FullPackageID="AHS00002" FullPackageVersion="1" FullPackageHash="5EF3A189C48F3469440A83026EC8ECD36EAD6EAF3B5D35663F8201BDE175413C"
MinimumClientVersion="5.00.7804.1000" RandomizeMaxDays="7" ProgramEnabled="false" LastModifiedTime="30282566;3841038464" SiteVersionMatch="true" SiteVersion="5.00.7804.1000" EnablePeerCache="true"/></ContentLocationReply>' ccmsetup 1/23/2015
2:56:42 PM 2728 (0x0AA8)
Found local location 'http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Discovered 1 local DP locations. ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
PROPFIND 'http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Got 401 challenge Retrying with Windows Auth... ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
PROPFIND 'http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Failed to correctly receive a WEBDAV HTTP request.. (StatusCode at WinHttpQueryHeaders: 401) ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Failed to check url http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002. Error 0x80004005 ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Enumerated all 1 local DP locations but none of them is good. Fallback to MP. ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
GET 'HTTP://AHDC400.phs-sfalls.amck.net/CCM_Client/ccmsetup.cab' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
C:\WINDOWS\ccmsetup\ccmsetup.cab is Microsoft trusted. ccmsetup 1/23/2015 2:56:43 PM 2728 (0x0AA8)

Single forest with mutiple child domains. SCCM is in one child domain trying to get this other child domain's workstations as clients. We have the same setup for another child domain and it worked without any issues.
The IIS log file in C:\inetpub\logs\logfiles\w3svc1 only shows the successful installs. There are no entries about any failures in the log to correlate unfortunately. All failures have been XP SP3 machines except for one Win7 pc and all successes have been
Win7 except for one xp machine.
You wouldn't think it is network related because some workstations can access the DP fine.
It's not boundaries because the successes and failures are all sharing the same subnet that is configured.
Wasn't MSI 4.5 required for SCCM 2012 clients?

What are the Client machine requirements for running Forms 6i?

What are the minimum/ideal hardware requirements of the client machines which run forms 6i in separate frames.
The reason for asking this is that the users have multiple sessions of separate Forms frames. When they do a lot of activity/transactions, and try to do a windows Print Screen on a MSWord file, nothing seems to print on the Word document. If they save the document and reboot the computer and open the same word document again then the screen print shows up. I am thinking it is because the separate frames take up lot of RAM. Typical configurations of our m/c are PII 400's with 64MB RAM.
Thanks in advance.

Hi Lionel,
As a general rule of thumb, the ATI Rage 128 Pro will not support a 20" LCD. That being said, there are reports of it doing just that (possibly the edition that went into the cube).
I'm not that familiar with the ins and outs of the Cube, so I can't give you authoritative information on it.
A good place to start looking for answers is:
http://cubeowner.com/kbase_2/
Cheers!
Karl

Ports Required for SCCM Distribution point

Hi All,
Can anybody tell me the ports required for distribution point. as in I have a site server with distribution point in HO, i want to have a distribution point server on a remote site. i went through the microsoft document which says u require port 445 open between site server and distribution point and it says u only require port 80 or 443 open between distribution point and branch distribution point. little confused!!!. which ports i require to be open between site server with distribution and remote site distribution point.
Cheers.

Hi,
Regarding the doc here:
http://technet.microsoft.com/en-us/library/bb632618.aspx
Site Server -- > Distribution Point
SMB 445 TCP
RPC Endpoint Mapper 135 UDP and TCP
RPC dynamic TCP
Site Server < -- > Site Server
SMB 445 TCP
Point to Point Tunneling Protocal (PPTP) 1723 TCP
Follow me through my blog and Twitter!

Restrict clients from a distribution Point

Is there any way to restrict distribution points to clients from a particular limiting collection or at least change the priority of a distribution point used?

Our organization has several entities that provide support desktop. Central IT provides core services support such as networking, directory services and email services to the entire organization. Central IT also provides Desktop support to a large
portion of our organization. We offer the entities of our organization that have their own desktop support use of our tools such as SCCM. It is configured with collection limiting to limit access to each entities OU so that the admins can administer
the machines in their ou and that's it. We also allow them to use the content, i.e. Applications, programs, task sequences etc that we (Centeral IT) create. In some cases the admins distribute our content to their Distribution points. I am
noticing that this causes some of our deployments to use their distribution points for content and not ours. We don't have a very clear cut IP configuration to break out each entities with their own boundary group. I just want our clients to use
our distribution points because with they use other distribution points, we are noticing slowness in deployments such as OSD.

How to enable Client Cert Required, only for certain URL's in the webserver

WE are using netegrity siteminder for authentication and their plugin is executed as AuthTrans function. If I enable clientauth in server.xml ( which is basically turning on the client cert required for entire site), everything works fine. But If I want to turn that on only for certain URL's how do I do that.
I tried turning global clientauth off in server.xml and tried using PathCehck fn"get-client-cert" in obj.conf for the URL's that need client cert, but the problem is AuthTrans is getting executed first and my netegrity plugin is throwing an error saying it cann't find the cert.
What are diffrent options to enable cert required only for certian URL's.
Thanks

What is the condition you want to match?
You can use get-client-cert in If tags in Web Server 7.0 :
For e.g. If the condition is matched, This gets a cert, requesting it if it is not already present and failing the request if it can't obtain an acceptable cert only on POST requests.
<If $url ~="*abc*>
PathCheck fn="get-client-cert" method="POST" dorequest="1" require="1"
</If>
or
<Object ppath="*abc*">
PathCheck fn="get-client-cert" dorequest="1" require="1"
<Object>
for more details :
http://docs.sun.com/app/docs/doc/819-2630/6n4thbiek?a=view#indexterm-380

SCCM 2012 R2 - Distribution Point untrusted domain - Not acknowledging Network Access Account (FYI)

Hello!
Scenario
Built a single primary site server in one domain with multiple distribution points. All site servers are member of this one site.
The distribution points in the primary site servers' domain function as expected. The distribution point deployed to an untrusted domain does not. The primary site server can see all objects in the domain, publishes successfully, and CCM client on the
DP in the untrusted domain knows its part of the site, knows its AD site (according to locationservices.log). The DP role is installed properly, logs are populating, queries are being made for application lists and updates. nfortuantely authentication
errors indicate that this software can'tbe downloaded.
In essence the DP in the untrusted domain can't pull down content from the primary site server. The role uses BITS to download content from IIS on the primary site server, but the requests each throw a 401 error. Unauthorised. This should be an easy fix.
Create a Network Access Account in the primary site server's domain, assign it to the site (Software Distribution setting), wait for the DP to pick up the setting and watch it retrieve its content. The DP in the untrusted domain is configured as a Pull DP,
implying it has to use a Network Access Account to download content. It knows the content is available and makes every effort to download it.
Problem
The DP in the untrusted domain doesn't know a Network Access Account (NAA) has been defined for the site.
The account does exist, created in the primary site server's domain and assigned to the site. Its not a password issue. IIS has not been set for Anonymous access as this isn't needed - the NAA should provide the credentials it requires to pull down content.
A manual check using the URL of the package confirms the package is accessible from the DP when using the NAA's credentials. I've allowed enough time (i think) for the DP to acknowledge the NAA. For fun the DP role was removed, and the CCM agent removed. Both
were reinstalled. A fresh install didn't detect the NAA.
Solution
After some soul searching and a little frustration, it came down to this: A Pull DP always uses the Network Access Account. If the DP can't find a Network Access account it will fail to pull down content. This is undisputed. Found an article that states
the Pull DP always uses the CCM client configuration to do its dirty work. At that point the CCM client was checked. It had the classic problem of only displaying two Actions - Machine Policy Retrieval & Evaluation Cycle, User policy Retrieval & Evaluation
Cycle. Most components were installed but not enabled. This is fairly common. Looked at the console, found the device, added the Approval column. Turns out it wasn't auto-approved. Reason being that the client is in an untrusted domain and clients in untrusted
domains aren't approved automatically (by default).
In this case something as simple as an Approving the client fixed these issues.
The DataTransferService.log highlights the issue:
<![LOG[CDTSJob::JobError: DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' BITS Job ID='{38B81ADE-55B5-4BD7-A881-DBFF13943EDE}' ErrorCode=0x80190191]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
context="" type="1" thread="3136" file="dtsjob.cpp:3501">
<![LOG[CDTSJob::JobError: DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' URL='http://PRIMARYSERVER.A.B.COM:80/SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68'
ProtType=1]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3136" file="dtsjob.cpp:3504">
<![LOG[Authentication required by the proxy, DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' BITS Job ID='{38B81ADE-55B5-4BD7-A881-DBFF13943EDE}'.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
context="" type="3" thread="3136" file="dtsjob.cpp:3513">
<![LOG[DTSJob {8814E9A1-3D26-4089-83CF-3C7D17BCEC6E} in state 'Cancelled'.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3688"
file="dtsjob.h:166">
<![LOG[DTS job {17E0B672-F699-434D-B063-87CC2ACF715C} BITS job
{38B81ADE-55B5-4BD7-A881-DBFF13943EDE} encountered Access Denied error during download. Will retry using Network Access Account.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
context="" type="2" thread="3136" file="dtsjob.cpp:3652">
<![LOG[DTSJob {8814E9A1-3D26-4089-83CF-3C7D17BCEC6E} cancelled by client.]LOG]!><time="18:25:54.280+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3688"
file="dtsjob.cpp:3205">
<![LOG[No network access account info found.]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context="" type="1"
thread="3136" file="netaccessaccount.cpp:288">
<![LOG[The network access account is not defined.]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context=""
type="1" thread="3136" file="netaccessaccount.cpp:858">
<![LOG[DTSJob {17E0B672-F699-434D-B063-87CC2ACF715C} encountered error setting BITS job to use Network Access Account
(0x00000000).]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context="" type="3" thread="3136" file="dtsjob.cpp:1885">
The IIS server logs u_ex150219.log captures the request:
2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
401 2 5 1509 2
2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
401 1 3221225581 1509 4
2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
401 1 3221225581 1509 3
2 x Domains: DomainA and DomainX
- Single domain forests
- No trusts between domains/forests
DomainA\PRIMARYSERVER
- Primary Site Server, MP, DP, IIS, all roles
DomainX\DP1
- Distribution Point, IIS, etc
- CCM client installed

Based on the above, you are using a PullDP. If so, have you installed the client agent on this system? The client agent is required on PullDPs in untrusted domains so that they can acquire the NAA.
Jason | http://blog.configmgrftw.com | @jasonsandys

PKI Client starts to intialize, then 7 minutes later client agents go back to disabled for upwards of an hour

Starting a new thread on this as I have done much digging and no longer believe its a conflicting record issue.
I am SCCM 2012 SP1 on Server 2008 R2/SQL 2012 CU2. My "Lan" based management point is HTTP and I also have an Internet Management point that is HTTPS. All scenerios discussed in this thread are installing the 2012 SP1 client while connected
to the Lan. We have a fully functional PKI infrastructure with auto enrol enabled.
The issue at hand:
Wether I install the client during OSD, or manually install the client I get the same result. This is that the client agent upon successful install begins communicating with the HTTP management point and starts retrieving policy. If I open the
ConfigMgr applet in Control Panel I see the client shows "Client Certificate: PKI", "Connection Type: Currently Intranet". If I view actions I see all actions with the exception of Discovery Data Collection Cycle and Hardware Inventory
Cycle.
I have watched the client logs the only thing that seems to stick out is in the CcmNotificationAgent.log which shows the bgb client agent actions. it repeats the following aprox every 5 minutes:
bgb client agent is starting...
bgb client agent is disabled
TCP Listener is disabled
bgbController main thread us started with settings: [bgb enable = 0], {tcp enable = 0} and {http enable = 0}.
Wait 3600 seconds for even notification
The ClientIDManagerStartup.log files shows:
PopulateRegistrationHint: Using the Certificate selected by the current version of SCCM to set the hint. ClientIDManagerStartup 1/23/2013 5:00:51 PM 2100 (0x0834)
CCMCreateAuthHeadersEx failed (0x80004005). ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
PopulateRegistrationHint failed (0x80004005), expected upon first start of non-upgrade client. ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Begin searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Certificate Issuer 1 [CN=myrootca; DC=mydomain; DC=com] ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Finding certificate by issuer chain returned error 80092004 ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Completed searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Unable to find any Certificate based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230052.204000+000";
HRESULT = "0x87d00215";
ProcessID = 2352;
ThreadID = 2100;
ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Failed to submit event to the Status Agent. Attempting to create pending event. ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Raising pending event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230052.204000+000";
HRESULT = "0x87d00215";
ProcessID = 2352;
ThreadID = 2100;
ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
PKI Client Certificate matching SCCM certificate selection criteria is not available. ClientIDManagerStartup 1/23/2013 5:00:52 PM 2100 (0x0834)
Generated a new Signing certificate ClientIDManagerStartup 1/23/2013 5:00:54 PM 2100 (0x0834)
Generated a new Encryption certificate ClientIDManagerStartup 1/23/2013 5:00:54 PM 2100 (0x0834)
Initializing registration renewal for potential PKI issued certificate changes. ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
Succesfully intialized registration renewal. ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
[RegTask] - Executing registration task synchronously. ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
Read SMBIOS (encoded): 32003100350039002D0039003900320037002D0032003500360036002D0038003300320035002D0037003500340032002D0035003200370031002D0033003900 ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
Evaluated SMBIOS (encoded): 32003100350039002D0039003900320037002D0032003500360036002D0038003300320035002D0037003500340032002D0035003200370031002D0033003900 ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
No SMBIOS Changed ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
SMBIOS unchanged ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
SID unchanged ClientIDManagerStartup 1/23/2013 5:00:56 PM 2348 (0x092C)
HWID unchanged ClientIDManagerStartup 1/23/2013 5:00:57 PM 2348 (0x092C)
Windows To Go requires a minimum operating system of Windows 8 ClientIDManagerStartup 1/23/2013 5:00:59 PM 2348 (0x092C)
GetSystemEnclosureChassisInfo: IsFixed=TRUE, IsLaptop=FALSE ClientIDManagerStartup 1/23/2013 5:00:59 PM 2348 (0x092C)
Windows To Go requires a minimum operating system of Windows 8 ClientIDManagerStartup 1/23/2013 5:00:59 PM 2348 (0x092C)
Computed HardwareID=2:9C8C08C4B3E16249A2F1457998D16528B656DE30
Win32_SystemEnclosure.SerialNumber=2159-9927-2566-8325-7542-5271-39
Win32_SystemEnclosure.SMBIOSAssetTag=9344-3677-7824-5579-3797-0729-37
Win32_BaseBoard.SerialNumber=2159-9927-2566-8325-7542-5271-39
Win32_BIOS.SerialNumber=2159-9927-2566-8325-7542-5271-39
Win32_NetworkAdapterConfiguration.MACAddress=00:15:5D:0B:78:20 ClientIDManagerStartup 1/23/2013 5:00:59 PM 2348 (0x092C)
[RegTask] - Client is not registered. Sending registration request for GUID:b4aacc70-6de3-4829-88e0-498777c49379 ... ClientIDManagerStartup 1/23/2013 5:00:59 PM 2348 (0x092C)
[RegTask] - Client registration is pending. Server assigned ClientID is GUID:b4aacc70-6de3-4829-88e0-498777c49379 ClientIDManagerStartup 1/23/2013 5:01:00 PM 2348 (0x092C)
[RegTask] - Sleeping for 60 seconds ... ClientIDManagerStartup 1/23/2013 5:01:00 PM 2348 (0x092C)
RenewalTask: Executing renewal task. ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Begin searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Certificate Issuer 1 [CN=myrootca; DC=mydomain; DC=com] ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Based on Certificate Issuer 'MyrootCA' found Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Begin validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Completed validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Completed searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Begin to select client certificate ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Begin validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Completed validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
>>> Client selected the PKI Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230143.106000+000";
HRESULT = "0x00000000";
ProcessID = 2352;
ThreadID = 2620;
ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Client PKI cert is available. ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
RenewalTask: Certificate has changed, initiating a renewal. ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Aborting any pending registration. ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
Re-registration/renewal initiated. Restarting the service. ClientIDManagerStartup 1/23/2013 5:01:43 PM 2620 (0x0A3C)
[----- SHUTDOWN -----] ClientIDManagerStartup 1/23/2013 5:01:44 PM 2100 (0x0834)
[----- STARTUP -----] ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Machine: W21599927256 ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
OS Version: 6.1 Service Pack 1 ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
SCCM Client Version: 5.00.7804.1000 ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Client is set to use HTTPS when available. The current state is 448. ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Certificate Issuer 1 [CN=myrootca; DC=mydomain; DC=com] ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Based on Certificate Issuer 'MyrootCA' found Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Completed validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Completed searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin to select client certificate ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Completed validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
>>> Client selected the PKI Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230145.722000+000";
HRESULT = "0x00000000";
ProcessID = 3612;
ThreadID = 3888;
ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Failed to submit event to the Status Agent. Attempting to create pending event. ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Raising pending event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230145.722000+000";
HRESULT = "0x00000000";
ProcessID = 3612;
ThreadID = 3888;
ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
'RDV' Identity store does not support backup. ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
CCM Identity is in sync with Identity stores ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Certificate Issuer 1 [CN=myrootca; DC=mydomain; DC=com] ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Based on Certificate Issuer 'MyrootCA' found Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Completed validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Completed searching client certificates based on Certificate Issuers ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin to select client certificate ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Begin validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Completed validation of Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
>>> Client selected the PKI Certificate [Thumbprint 52BFCF407B7071512CE65F8868D66578244ABDD9] issued to 'myclient.mydomain.com' ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230145.752000+000";
HRESULT = "0x00000000";
ProcessID = 3612;
ThreadID = 3888;
ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Failed to submit event to the Status Agent. Attempting to create pending event. ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Raising pending event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:b4aacc70-6de3-4829-88e0-498777c49379";
DateTime = "20130123230145.752000+000";
HRESULT = "0x00000000";
ProcessID = 3612;
ThreadID = 3888;
ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Client PKI cert is available. ClientIDManagerStartup 1/23/2013 5:01:45 PM 3888 (0x0F30)
Initializing registration renewal for potential PKI issued certificate changes. ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
Succesfully intialized registration renewal. ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
[RegTask] - Executing registration task synchronously. ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
Read SMBIOS (encoded): 32003100350039002D0039003900320037002D0032003500360036002D0038003300320035002D0037003500340032002D0035003200370031002D0033003900 ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
Evaluated SMBIOS (encoded): 32003100350039002D0039003900320037002D0032003500360036002D0038003300320035002D0037003500340032002D0035003200370031002D0033003900 ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
No SMBIOS Changed ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
SMBIOS unchanged ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
SID unchanged ClientIDManagerStartup 1/23/2013 5:01:48 PM 3928 (0x0F58)
HWID unchanged ClientIDManagerStartup 1/23/2013 5:01:49 PM 3928 (0x0F58)
Windows To Go requires a minimum operating system of Windows 8 ClientIDManagerStartup 1/23/2013 5:01:53 PM 3928 (0x0F58)
GetSystemEnclosureChassisInfo: IsFixed=TRUE, IsLaptop=FALSE ClientIDManagerStartup 1/23/2013 5:01:53 PM 3928 (0x0F58)
Windows To Go requires a minimum operating system of Windows 8 ClientIDManagerStartup 1/23/2013 5:01:53 PM 3928 (0x0F58)
Computed HardwareID=2:9C8C08C4B3E16249A2F1457998D16528B656DE30
Win32_SystemEnclosure.SerialNumber=2159-9927-2566-8325-7542-5271-39
Win32_SystemEnclosure.SMBIOSAssetTag=9344-3677-7824-5579-3797-0729-37
Win32_BaseBoard.SerialNumber=2159-9927-2566-8325-7542-5271-39
Win32_BIOS.SerialNumber=2159-9927-2566-8325-7542-5271-39
Win32_NetworkAdapterConfiguration.MACAddress=00:15:5D:0B:78:20 ClientIDManagerStartup 1/23/2013 5:01:53 PM 3928 (0x0F58)
[RegTask] - Client is not registered. Sending registration request for GUID:b4aacc70-6de3-4829-88e0-498777c49379 ... ClientIDManagerStartup 1/23/2013 5:01:53 PM 3928 (0x0F58)
[RegTask] - Client registration is pending. Server assigned ClientID is GUID:b4aacc70-6de3-4829-88e0-498777c49379 ClientIDManagerStartup 1/23/2013 5:01:54 PM 3928 (0x0F58)
[RegTask] - Sleeping for 60 seconds ... ClientIDManagerStartup 1/23/2013 5:01:54 PM 3928 (0x0F58)
[RegTask] - Client registration is pending. Sending confirmation request for GUID:b4aacc70-6de3-4829-88e0-498777c49379 ... ClientIDManagerStartup 1/23/2013 5:02:54 PM 3928 (0x0F58)
[RegTask] - Client is registered. Server assigned ClientID is GUID:b4aacc70-6de3-4829-88e0-498777c49379. Approval status 2 ClientIDManagerStartup 1/23/2013 5:02:54 PM 3928 (0x0F58)
After almost 7 minutes exactly, the all the client agent actions besides Machine Policy Retrieval and UserPolicy Retrieval disappear (as if client policy was Reset)
If I let the client sit for 45-minutes to an hour, everything starts working again and works fine from there on out. (cycling the SMS Agent service nor rebooting the machine makes it recover until the 45-min to an hour pass)
My command line I am using to install the client is:
ccmsetup.exe /mp:MYLANBASEDMP /UsePKICert /NOCRLCheck CCMHOSTNAME="myinternetmp.mydomain.com" SMSSITECODE=P10 SMSCACHESIZE=7000 FSP=MYLANBASEDMP CCMLOGMAXSIZE=1000000
If I take out the /usePKICert, /NOCRLCheck and CCMHOSTNAME Entries, the client install and continues to function without issue.
Anyone have any others ideas on where to troubleshoot this issue? It would make more sense if the client NEVER worked after install. Tearing my hair out trying to figure out why it starts to intialize, then reverts, then comes back online and
works fine. This happens at both my primary site MP as well as my secondary site/mp. It happens on my standard Win7 image as well as Windows 8 test machines so I dont believe its a client OS issue.

Good news! (and potentially bad news)
Good news, I received and email from the new support tech stating that indeed this issue was NOT fixed in CU3, however there is a workaround:
At present we have a workaround for the issue by setting the following registry
HKLM\Software\Microsoft\CCM\UserPolicyReRequestDelay (REG_DWORD) value: 6,000,000 (decimal).
Please add a step in your Task Sequence to add this registry value.
If you are also facing the issue while trying to install the client manually then please follow these steps
1. Install the client manually
2. Immediately disable and stop the CCMExec service (SMS Agent Host)
3. Set the following registry HKLM\Software\Microsoft\CCM\UserPolicyReRequestDelay (REG_DWORD) value: 6,000,000 (decimal)
4. Enable and set the CCMExec service to automatic
5. Start the CCMExec service
I have tested when doing a manual client install and it works perfectly..IF you make sure to stop CCMEXEC directly after the client finishes installing as denoted in step 2 above. I have every reason to believe that will will also work during a Task
Sequence base don these results. I'll be testing that soon.
The bad news: If you are using Client Push, this workaround would not work since there isn't a way to wrap a script around the installer to perform the steps above. Maybe you could add this value to all machines prior to client push using GPP's or a
startup script?
I don't currently use Client Push so its not a huge issue for me, I will just need to adjust my machine startup script to perform the steps but can see how this will still be an issue for others.
Either way, its a step in the right direction. Certainly tells me they have identified the issue and will hopefully be including a true fix in an upcoming hotfix or update.

SCCM 2012 Distribution Point not working properly on a Windows 2012 Server

I have an SCCM SP1 site running on a Server 2008 R2 machine. I had a couple of distribution points, also running on 2008 machines. These served as DPs and PXE boot points. I had no problems with these.
I resently added a Server 2012 machine, and set it up as a DP, with a PXE boot point. The servers is part of a boundary group containing about 1500 clients. I distributed all of packages that are included in my main task sequence, and am able
to PXE boot, and image machines successfully.
However, I am having problems deploying other packages and Windows update packages from this DP. It seems like I am only able to deploy packages that have the "Copy the content in the package to a package share on distribution points" enabled.
If this is not enabled, the client will get the deployment policy, but will never download the package. The "In Progress" tab for the deployment status will just say "Waiting for content".
I have checked the rereqs for IIS on the Server 2012 DP, also checked the firewall. Everything that I see seems to be OK. Are there other things that I can check to determine why this DP isn't working right?

Hello,
According to the following description, this behavior would be normal:
If you configured the option Run program from distribution point on the
Distribution Points page of the Deploy Software Wizard, do not clear the option
Copy the content in this package to a package share on distribution points, because this will make the package unavailable to run from distribution points.
http://technet.microsoft.com/en-in/library/gg682178.aspx

Business Process - Sales Process through Distribution point but revenue booked to Manufacturing Profit Center

Dear Expats
Our company now planning to decentralized the sales by introducing Sales distribution Point.
We have three manufacturing plant and every manufacturing plant are individual profit center.
Material is same.
Now company is planning to introducing sales distribution point.
Goods transfer from three manufacturing plant to sales distribution point and sale from the distribution point.
Now our requirement is - revenue will be booked to every manufacturing profit center.
How can we process this business process.
Note : We don't want to create separate material code - manufacturing plant wise.
Regards
Tarek H Chy

Hi
I have the issue like..
1. For each line item of the sales order check, whether the profit center is filled or not, if it is not filled then determine the profit center and populate.
2. If material of the line item is "sub component code" of a material that is "Offering component code", then compare the profit centers of line item with the profit center maintained for the material that is offering component code. If the profit centers are different, replace the sales order line item profit center with the profit center of the offering component code material.
3. Above activities should happen when the sales order is saved.
can somebody tell me which user exit ?? where coding can be dine.

Help regarding Client agent

hi all,
I have a scenario where in I need to call two secured web services using my BPEL process. I want to associate my client agent to securely invoke the two services. How do I change the setting in the wsif-wsm-config.xml (for two services) so that they can be securely invoked. Is that possible two associate two secured webservices in wsif-wsm-config.xml??
Can any one tell me with these what do I do regarding this??
thanks in advance,
Manoj Nair

Thanks Chintan,
I have resolved it.. I hope you will not mind if I pose many questions to you that keep on tickling me and I hope you will be in a better position to reply for these and I have seen your blogs too..
Kindly help me out with these....
The question is....
I want to construct a Client Agent and Server Agent architecture.
I will tell you the scenario...
I have my client agent in my system1 and I do have a server agent in my system 2 (both systems have there own SOA suite installed running on them)
In my System2 I have created two webservices(BPELProcesses) and I have associated a Server agent to both of them. The thing is like I don't want to register my services to my gateway. So it is evident that I will not be getting the SID that owsm provides. So here lies the question;
The question is ;
I want to create two separate policies for my two different services say "Policy for BPEL1" and "Policy for BPEL2"
so that I can enforce different policies for different services according to my requirement.
Had I registered my services to the gateway, I would have got the unique SIDs and I would have created policies in the Server Agent and I would have mapped those policies to SID1 and SID2 respectively. But as I told you I don't want to configure my web services to the gateway.
So could you please tell me how do I create two separate policies for my two web services apart from the default policiy that Server agent has???
The next question is....
In my System1,,,, Another process say BPEL3 invokes these two services in system2 . So it is for sure that the client agent will intercept in between when my BPEL3 sends in a request for BPEL1 and BPEL2..
The question araises here....
How do I create two separate policies in my Client Agent as well apart from that default policy that Client agent provides??
It will be really be helpful to me if you could help me out in coming up with this...
I hope you would kindly revert to me with the needful...
Thanks & regards,
Manoj Nair

Protected Distribution Points

Can anyone validate the below statement for Protected DP
There were AD sites used as network boundaries. This is A particular AD site is mapped to DP to get packages. This is done to achieve a definite DP for a said AD (network boundaries). The network boundary here AD site does not have protected DP then it can
go to any DP may be far in network hierarchy to access packages. This will increase network traffic. Ideally all network boundaries should be protected to a dp to have better delivery of packages avoiding network threshold exceed.
Regards Sushain KApoor

Hi,
Setting protected DP is not compulsory. By default an SCCM Client chooses a nearby DP, and if it is not available due to some reason, then the clients will go a step higher (parent of the DP) to access the package.
The following flowchart shows the process used by SCCM 07 clients to select a distribution point, including protected distribution points.
http://technet.microsoft.com/en-us/library/bb932150.aspx
Also check this link for info on using IP address Range instead of AD Site & IP Subnet :
http://social.technet.microsoft.com/Forums/windows/en-US/d9760b64-2e37-41a9-b8e1-1d68212c4134/protected-distribution-points?forum=configmgrswdist
~ Räjeésh M | Blog:
ScorpITs | Please remember to 'Mark as Answer' or 'Vote as Helpful' on the post that helps. It helps others reading the thread and recognizes useful contributions.

Application won't download/install from distribution point

Hello,
I have a new distribution point that clients refuse to download application deployments from. The advertisement(s) get stuck at "Downloading 0%".
The DP monitor confirms that the package is distributed. Boundary and boundary group is created and should be OK for this DP (which has firewall disabled).
When I take a client and put it on a different subnet, the application downloads from another working DP.
Any suggestions?

CAS.log --->Download started for content Content_310d8d2d-9457-455b-ac4a-1a03fb4567f3.1
-->And it will just hang until I cancel the deployment/install on the client.
LocationServices.log --> no errors
Unable to retrieve AD site membership --> ????both the client and the DP are domain members
Distribution Point='http://MNTH-SP-SRV01.xxxx.local/SMS_DP_SMSPKG$/Content_310d8d2d-9457-455b-ac4a-1a03fb4567f3.1', Locality='LOCAL', DPType='SERVER', Version='7958', Capabilities='<Capabilities SchemaVersion="1.0"><Property Name="SSLState"
Value="0"/></Capabilities>', Signature='http://MNTH-SP-SRV01.xxxx.local/SMS_DP_SMSSIG$/Content_310d8d2d-9457-455b-ac4a-1a03fb4567f3.1.tar', ForestTrust='TRUE'
(MNTH-SP-SRV01, this is the DP I'm trying to deploy from)
DP is associated to a boundary group, and the boundary with the address range which the server is on is a member of the boundary group.

Is the client/agent required on distribution points?

Similar Messages

Maybe you are looking for