Network Access Account, used by only Workgroup Computers or Domain Computers also?

Our environment has a few servers that are in a workgroup (not ideal, but is an application requirement on these few boxes) rather than being on the domain. We have to patch these servers routinely and would like to use SCCM 2012 to do so. As
I understand it all that is needed is to configure the Network Access Account for the site and install the client manually on the workgroup computers, correct? My next question is, do the domain computers continue to use their computer accounts to access
network locations during content deployment or will they too use the newly configured network access account? Or, does the client first attempt to use its computer account and if that fails then results to using the SCCM Network Access Account?
I've searched everywhere and can't seem to find this info. Thanks in advance if you can point me in the right direction.

Hi,
I haven't seen any table like this for the Configuration Manager 2012 so this is for 2007, I haven't heard of any changes to this and the conclusion is that the account is used more often than you would think depending on what you are doing with the client.
http://technet.microsoft.com/en-us/library/bb680398.aspx
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Similar Messages

SCCM 2012 R2 - Distribution Point untrusted domain - Not acknowledging Network Access Account (FYI)

Hello!
Scenario
Built a single primary site server in one domain with multiple distribution points. All site servers are member of this one site.
The distribution points in the primary site servers' domain function as expected. The distribution point deployed to an untrusted domain does not. The primary site server can see all objects in the domain, publishes successfully, and CCM client on the
DP in the untrusted domain knows its part of the site, knows its AD site (according to locationservices.log). The DP role is installed properly, logs are populating, queries are being made for application lists and updates. nfortuantely authentication
errors indicate that this software can'tbe downloaded.
In essence the DP in the untrusted domain can't pull down content from the primary site server. The role uses BITS to download content from IIS on the primary site server, but the requests each throw a 401 error. Unauthorised. This should be an easy fix.
Create a Network Access Account in the primary site server's domain, assign it to the site (Software Distribution setting), wait for the DP to pick up the setting and watch it retrieve its content. The DP in the untrusted domain is configured as a Pull DP,
implying it has to use a Network Access Account to download content. It knows the content is available and makes every effort to download it.
Problem
The DP in the untrusted domain doesn't know a Network Access Account (NAA) has been defined for the site.
The account does exist, created in the primary site server's domain and assigned to the site. Its not a password issue. IIS has not been set for Anonymous access as this isn't needed - the NAA should provide the credentials it requires to pull down content.
A manual check using the URL of the package confirms the package is accessible from the DP when using the NAA's credentials. I've allowed enough time (i think) for the DP to acknowledge the NAA. For fun the DP role was removed, and the CCM agent removed. Both
were reinstalled. A fresh install didn't detect the NAA.
Solution
After some soul searching and a little frustration, it came down to this: A Pull DP always uses the Network Access Account. If the DP can't find a Network Access account it will fail to pull down content. This is undisputed. Found an article that states
the Pull DP always uses the CCM client configuration to do its dirty work. At that point the CCM client was checked. It had the classic problem of only displaying two Actions - Machine Policy Retrieval & Evaluation Cycle, User policy Retrieval & Evaluation
Cycle. Most components were installed but not enabled. This is fairly common. Looked at the console, found the device, added the Approval column. Turns out it wasn't auto-approved. Reason being that the client is in an untrusted domain and clients in untrusted
domains aren't approved automatically (by default).
In this case something as simple as an Approving the client fixed these issues.
The DataTransferService.log highlights the issue:
<![LOG[CDTSJob::JobError: DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' BITS Job ID='{38B81ADE-55B5-4BD7-A881-DBFF13943EDE}' ErrorCode=0x80190191]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
context="" type="1" thread="3136" file="dtsjob.cpp:3501">
<![LOG[CDTSJob::JobError: DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' URL='http://PRIMARYSERVER.A.B.COM:80/SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68'
ProtType=1]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3136" file="dtsjob.cpp:3504">
<![LOG[Authentication required by the proxy, DTS Job ID='{17E0B672-F699-434D-B063-87CC2ACF715C}' BITS Job ID='{38B81ADE-55B5-4BD7-A881-DBFF13943EDE}'.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
context="" type="3" thread="3136" file="dtsjob.cpp:3513">
<![LOG[DTSJob {8814E9A1-3D26-4089-83CF-3C7D17BCEC6E} in state 'Cancelled'.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3688"
file="dtsjob.h:166">
<![LOG[DTS job {17E0B672-F699-434D-B063-87CC2ACF715C} BITS job
{38B81ADE-55B5-4BD7-A881-DBFF13943EDE} encountered Access Denied error during download. Will retry using Network Access Account.]LOG]!><time="18:25:54.264+00" date="02-19-2015" component="DataTransferService"
context="" type="2" thread="3136" file="dtsjob.cpp:3652">
<![LOG[DTSJob {8814E9A1-3D26-4089-83CF-3C7D17BCEC6E} cancelled by client.]LOG]!><time="18:25:54.280+00" date="02-19-2015" component="DataTransferService" context="" type="1" thread="3688"
file="dtsjob.cpp:3205">
<![LOG[No network access account info found.]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context="" type="1"
thread="3136" file="netaccessaccount.cpp:288">
<![LOG[The network access account is not defined.]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context=""
type="1" thread="3136" file="netaccessaccount.cpp:858">
<![LOG[DTSJob {17E0B672-F699-434D-B063-87CC2ACF715C} encountered error setting BITS job to use Network Access Account
(0x00000000).]LOG]!><time="18:25:54.327+00" date="02-19-2015" component="DataTransferService" context="" type="3" thread="3136" file="dtsjob.cpp:1885">
The IIS server logs u_ex150219.log captures the request:
2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
401 2 5 1509 2
2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
401 1 3221225581 1509 4
2015-02-19 123.11.12.13 GET /SMS_DP_SMSPKG$/5af1680e-4a14-4dc5-8a60-bda7370e6d68/sccm /windows6.1-kb3021917-x64.cab 80 - 9.10.11.12 Microsoft+BITS/7.7 -
401 1 3221225581 1509 3
2 x Domains: DomainA and DomainX
- Single domain forests
- No trusts between domains/forests
DomainA\PRIMARYSERVER
- Primary Site Server, MP, DP, IIS, all roles
DomainX\DP1
- Distribution Point, IIS, etc
- CCM client installed

Based on the above, you are using a PullDP. If so, have you installed the client agent on this system? The client agent is required on PullDPs in untrusted domains so that they can acquire the NAA.
Jason | http://blog.configmgrftw.com | @jasonsandys

2012 R2 OSD refresh WinPE Network Access Account issue?

Hi,
Environment: SCCM 2012 R2/MDT2013
Since upgrading to R2 we're experiencing failures during an OS refresh task sequence. But only in one physical location.
The same MDT task sequence runs fine for new computer builds (in both locations)
Hardware is identical in both locations. One location completes the refresh correctly. The other location prestages content correctly, reboots into WinPE then immediately fails as soon as it attempts to download the first item (MDT toolkit package) from
the distribution point.
SMSTS.log (below) logs 'no credential information in environment' and fails when attempting to pull from the dp.
This implies the network access account is not set.
It is set and it works correctly at the other location (for the same refresh task sequence)
I know that R2 allows for multiple network access accounts. We've made no changes. We're just using the same account we used before the upgrade.
Boundaries are set correctly. Not sure what else to look for.
The error:
Start executing an instruction. Instruction name: Use Toolkit Package. Instruction pointer: 61 TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Set a global environment variable _SMSTSCurrentActionName=Use Toolkit Package TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Set a global environment variable _SMSTSNextInstructionPointer=61 TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Set a global environment variable _SMSTSLogPath=X:\windows\TEMP\SMSTSLog TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Expand a string: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Expand a string: TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Command line for extension .exe is "%1" %* TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Set command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Start executing the command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
!--------------------------------------------------------------------------------------------! TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Expand a string: WinPEandFullOS TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
Executing command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 22/11/2013 12:41:45 p.m. 1072 (0x0430)
[ smsswd.exe ] InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
PackageID = 'NZX000FC' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
BaseVar = '', ContinueOnError='' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
ProgramName = 'cscript.exe Scripts\ZTISCCM.wsf' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
SwdAction = '0001' InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
ResolveSource flags: 0x00000000 InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
SMSTSPersistContent: . The content for package NZX000FC will be persisted InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
DownloadOnDemand flag is true. Attempting to download content locally for Package NZX000FC. InstallSoftware 22/11/2013 12:41:45 p.m. 1176 (0x0498)
Locations: Multicast = 0, HTTP = 2, SMB = 0. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Package Flags: 0x00000000 InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Multicast is not enabled for the package. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Trying https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
GetDirectoryListing() entered InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
No credential information in environment. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Initializing HTTP transport. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Setting URL = https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Address=https://SCCM.domain.local, Scheme=https, Object=/NOCERT_SMS_DP_SMSPKG$/NZX000FC, Port=443. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Setting Authenticator. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Set authenticator in transport InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Setting Media Certificate. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Media pfx is empty InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
CLibSMSMessageWinHttpTransport::Send: URL: SCCM.domain.local:443 PROPFIND /NOCERT_SMS_DP_SMSPKG$/NZX000FC InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
In SSL, but with no client cert InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
In SSL, but with no media cert InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
401 - Unsuccessful with anonymous access. Retrying with context credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Using thread token for request InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
401 - Unsuccessful with context credentials. Retrying with supplied credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Network access account credentials not supplied. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
401 - Unsuccessful on all retries. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
SendResourceRequest() failed. 80190191 InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
SendResourceRequest(), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\downloadcontent.cpp,516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
oDavRequest.GetDirectoryListing (setDirs, setFiles), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,2516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Download() failed. 80190191. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Here's the log from the location that works correctly.
Start executing an instruction. Instruction name: Use Toolkit Package. Instruction pointer: 19 TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Set a global environment variable _SMSTSCurrentActionName=Use Toolkit Package TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Set a global environment variable _SMSTSNextInstructionPointer=19 TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Set a global environment variable _SMSTSLogPath=X:\WINDOWS\TEMP\SMSTSLog TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Expand a string: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Expand a string: TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Command line for extension .exe is "%1" %* TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Set command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Start executing the command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
!--------------------------------------------------------------------------------------------! TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Expand a string: WinPEandFullOS TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
Executing command line: smsswd.exe /run:NZX000FC cscript.exe Scripts\ZTISCCM.wsf TSManager 21/11/2013 5:17:12 p.m. 536 (0x0218)
[ smsswd.exe ] InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
PackageID = 'NZX000FC' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
BaseVar = '', ContinueOnError='' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
ProgramName = 'cscript.exe Scripts\ZTISCCM.wsf' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
SwdAction = '0001' InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
ResolveSource flags: 0x00000000 InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
SMSTSPersistContent: . The content for package NZX000FC will be persisted InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
DownloadOnDemand flag is true. Attempting to download content locally for Package NZX000FC. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Locations: Multicast = 0, HTTP = 1, SMB = 0. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Package Flags: 0x00000000 InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Multicast is not enabled for the package. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Trying https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
GetDirectoryListing() entered InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Initializing HTTP transport. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Setting URL = https://SCCM.domain.local/NOCERT_SMS_DP_SMSPKG$/NZX000FC. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Address=https://SCCM.domain.local, Scheme=https, Object=/NOCERT_SMS_DP_SMSPKG$/NZX000FC, Port=443. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Setting Authenticator. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Set authenticator in transport InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Setting Media Certificate. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
WinHttp credentials set InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
CLibSMSMessageWinHttpTransport::Send: URL: SCCM.domain.local:443 PROPFIND /NOCERT_SMS_DP_SMSPKG$/NZX000FC InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
In SSL, but with no client cert InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
401 - Unsuccessful with anonymous access. Retrying with context credentials. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Using thread token for request InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
401 - Unsuccessful with context credentials. Retrying with supplied credentials. InstallSoftware 21/11/2013 5:17:12 p.m. 460 (0x01CC)
Request was successful. InstallSoftware 21/11/2013 5:17:15 p.m. 460 (0x01CC)
Cheers

So, still having issues after a lot of testing. Same machine type as before, I feel like this is a bug in R2 but I can't find a lot of information on it around the web. same thing every time.
401 - Unsuccessful with anonymous access. Retrying with context credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Using thread token for request InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
401 - Unsuccessful with context credentials. Retrying with supplied credentials. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Network access account credentials not supplied. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
401 - Unsuccessful on all retries. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
SendResourceRequest() failed. 80190191 InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
SendResourceRequest(), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\downloadcontent.cpp,516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
oDavRequest.GetDirectoryListing (setDirs, setFiles), HRESULT=80190191 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,2516) InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
Download() failed. 80190191. InstallSoftware 22/11/2013 12:41:46 p.m. 1176 (0x0498)
The only information I can find on this regarding 2012 R2 is what Torsten posted in his blog. Although he doesn't post a solution to the problem.
I believe there needs to be a KB hotfix released regarding the issue. at least some steps we can take to resolve it.
the only thing I haven't tried that I believe could help is to recreate the boot images from scratch instead of just re distributing them to the DP. From scratch using the latest 8.1 ADK WinPE tools.
Other info: when the SCCM 2012 R2 update became available, the 8.1 ADK that was available at the time had many bugs and was re released almost immediately!:
http://www.deploymentresearch.com/Research/tabid/62/EntryId/114/Windows-ADK-8-1-re-released.aspx
I only mention this because in my case, I updated my SCCM server to R2 within hours of the update becoming available which means I most likely had the "bad" 8.1 ADK before the re released it ^
recreating the boot images from the newly downloaded 8.1 ADK could be the solution to our problems!
This is the best guide that I have found about how to create boot images from scratch (meaning that no current media on the server is used to create the boot image(s)) :
http://myitforum.com/myitforumwp/2013/08/01/how-to-create-configmgr-2012-boot-images-from-scratch/
For now, the only work around (which I hate) is to enable anonymous access to the Distribution Point.. when I do this the task sequences complete without error.....
some input from Microsoft would be AMAZING at this point.

SCCM 2012 Network Access Account password problem

Hello Everyone,
I got a problem with the Network Access Account on SCCM 2012. I didn't have any problem previously and can deploy OS successfully. The problem started last week when I tried to deploy an OS. It gave me a error on Task Sequence then I searched for the error
and found that its related with the Network Access Account. On SCCM Config Manager I checked the Network Access Account and found that I had the wrong password. But the bigger problem starts here: on configManager Administration/Security/accounts window
I open my NAS properties and on the verify window tried to reach a simple network share and it says the password is wrong, then I change the password and tried to verify one more time and it successfully reaches the share, I simply click apply and
OK as usual but when I open the properties window I always see the old password stays there. I tried to change the password maybe 100 time but I didn't work. My NAS is a normal domain account with Domain Users permissions, I ve already
checked the password, account and password never expires options, they are all rightly configured. I also tried to make a new account to use as a NAS, then I set it on SCCM as a NAS but the result is always the same. Accounts
have wrong password and I cant change and save it. Actually I can change till I close the properties window then its all gone , reset to old wrong password. Please help me with that, I am googling it like 2 days and found that the same thing happened
to 2 other people, but there is no solution...

That workaround seems to work. Only verify when you first type the password and get the success/confirmation message. Once you hit OK to save the password, something happens to it (probably encrypts the password entered). If you open the account
settings again, I assume SCCM takes the password from the database or task sequence in it's encrypted form and presents that in the text boxes. Clicking OK will save the password again, but because it is presented in it's encrypted form, will re-encrypt
this as a new password and effectively change what you originally entered as the password. Again, I'm just assuming this based on what I observed. If it's true, then definately a bug.
I think this is pretty correct. This whole (non?)-issue was a massive red-herring for me. I spent a week trying to understand what was wrong, but eventually discovered the issue was a couple of steps down the line. SCCM errors on the surface level are pretty
consistently confusing. 9 times out of ten, I have been lead astray by them. Crack open your log files, your real problems will be in there.

Network Access Account tab is unavailable

Hello and Happy new year,
I just finished to install SCCM 2012 R2 and the installation was successful.
I now want to configure the Network Access Account but when I go to Administration -> Site Configuration -> Sites -> Configure Site Components -> Software Distribution, I just see the general tab but not the network access account tab.
Could you please tell me if I forgot to do something which prevent me to see this tab ?
Best Regards.
Seb.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hello Peter,
Thanks for your help.
As I begin with SCCM I don't really know what you want to mean with CAS.
I Imagine it's for central administration site.
I followed a MOAC lesson which told me to choose "Install a configuration manager central administration site" which was apparently not the good option.
I uninstalled SCCM and choose install a configuration manager primary site.
This time it's seems to be ok.
Thank you.
Best regards.
Seb.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Where is the MailAccounts.plist stored for a network user account using Apple Mail on Snow Lion?

Where is the MailAccounts.plist file stored for a network user using Apple Mail on Snow Leopard? It appears one of my users has managed to do something to their mail account as Apple Mail will no longer close once opened and the Sent Folder has a perpetual spinning pinwheel.

They would have to be logged in as separate users in order not to see your account in Mail. Whatever accounts put in Mail under your account will show up. All mail accounts usually have there own user and password. The only thing you can do is to remove the password from Keychain and take the account offline so you don't keep getting prompts for passwords each time it checks for mail.
Not a great solution.
Best way is to give the other user their own user account with their own mail and enable fast user swithcing to log between the different users if all access the computer frequently.

Can no longer create a new account using Exchange, only POP or IMAP?

Using the latest system update (10.5.7) I can no longer create new Exchange accounts in Mail. I have one in my list, but when editing it it shows up looking similar to an IMAP account. Is this a local problem in my installation, or did Apple remove Exchange support?

Mail still supports Exchange.

Network Access Account issues..

Help!!!!,
I have been trying for 2 days to get this working again and having no luck... So to give all the steps Ive taken thus far.
Upgraded to SCCM 2012 R2
Uninstalled ADK 8.0 and installed 8.1
Installed MDT 13
Patched Primary and Clients hotfix (KB2905002)
After hoping the hotfix would correct my issues with the upgrade Im still dealing with what seems to be related to NAA. I have seen this issue in the forums and tried to resolve using the create new, delete and select old naa account with no luck.
DownloadFile() failed for
http:\\site server /SMS_DP_SMSPKG$/NTE000F3/sccm?/Scripts/DeployWiz_ProductKeyVista.vbs, C:\_SMSTaskSequence\Packages\NTE000F3\Scripts/DeployWiz_ProductKeyVista.vbs.
80072ee2.
Does anyone have any ideas??? Thank you in advance!

Sorry Jason,
You are correct, I copied in the wrong code... Error: 80070002
Failed to run the action: Use Toolkit Package.
The system cannot find the file specified. (Error: 80070002; Source: Windows)
Im running the TS again it looks like the SMSPKG was missing the toolkit package.
Not sure why that would happen as it was working fine but I decided to select the copy content to DP option and issue is resolved. Thank you for the follow up!

How does sccm access admin shares on workgroup computers???

Hey guys, how does sccm access admin shares on workgroup computers??? I know that in software distribution component i can add domain account that is used by client to access dp's and stuff. I have some workgroup computers that have client installed
manually by someone who has access to sccm server with domain account. But that is only used for install but what about later?

Hi,
the SCCM Site server will never access the client directly only when you use Client Push and in client push settings you can define local administrator accounts and passwords to try as well when you push out the client.
If you install the sccm client manually you don't have to worry about access to any shares on workgroup computers.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

OSD task sequence fails to install application on workgroup computers

Environment:
Windows Server 2008 R2 Standard, SP1
SCCM 2012 R2
Issue:
OSD TS fails to install applications from local DP on Windows 8.1 x86 workgroup computers. Same applications install fine from OSD/TS on domain computers. A standard push installs fine when deployed outside of OSD/TS to workgroup, or domain computer.
- “SMSMP=managementpoint.domain.com” is included in ‘Setup Windows and ConfigMgr’ installation poperties
- “Allow clients to connect anonymously” enable on DP system role, HTTP client communication
- Network Access Account is configured and authentication is confirmed
- Have confirmed no overlapping boundaries
- IIS anonomys and Windows authentication is enabled for SMS_DP_SMSPKG$, anon authentication creds set to "Specific user: IUSR"
After OSD deployment to workgroup computer completes -
AppEnforce.log is missing
smsts.log
App install failed.
Setting TSEnv variable '_TSAppInstallStatus'='Error'
Setting TSEnv variable 'SMSTSInstallApplicationJobID__ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/Application_486d99ca-817a-4600-889e-50f8e4f91592'=''
Completed installation job.
Step 3 out of 3 complete
Install application action failed: 'Microsoft_Office_Professional_2013_v15.0.4420.1017_CA-copy'. Error Code 0x80004005
CITaskMgr.log
State transition to (Failure), Error(0x87d00222) : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_f7f47522-3654-43b0-95ef-55198d957bdf.8..Install.ContentDownload)
Initiating task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15 (Microsoft_Office_Professional_2013_v15.0.4420.1017_CA_x86_P_PW) for target: , consumer: {634F5894-5AB1-4D48-83F7-603E94FE1F3F}
Initiating content download : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
State transition to (InProgress), Param(0) : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
State transition to (InProgress), Param(0) : CTaskConsumer(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15.{CC8A099F-8EC4-4484-9191-53FFC1775D18})
Successfully initiated contents download request {5237AC77-651A-4723-AF91-78A1C0497DBD} : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
Release task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15 for target: , consumer {634F5894-5AB1-4D48-83F7-603E94FE1F3F}
Release task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/Application_486d99ca-817a-4600-889e-50f8e4f91592.22 for target: , consumer {502180D3-CA3B-4657-AD32-D43F952A6576}
Release task ContentDownload for CI ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/RequiredApplication_486d99ca-817a-4600-889e-50f8e4f91592.22 for target: , consumer {1A485BC4-DD0C-4659-B034-8D7F9B436B3A}
State transition to (Failure), Error(0x87d00222) : CITask(ScopeId_93E0532F-C5CA-4078-AE13-2BF543602863/DeploymentType_5982c24d-07f4-4121-8aa4-4f65a8b7aeb6.15..Install.ContentDownload)
ContentTransferManager.log
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} (corresponding DTS job {901A1D57-D363-45FE-A4F4-8509F5556D53}) started download from 'http://HOUMGMT49.APACHECORP.COM/SMS_DP_SMSPKG$/Content_ed232f49-224b-48cc-9c01-0ff31bae851e.1' for full content download.
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA
CTM encountered error processing reply from DTS. Code 0x87d00215
Cancelled CTM job {1964A4E6-DC01-4A04-983D-AAFD5FB2CA5E}
Two workarounds below (Not acceptable solutions)
*I can add a pause script after Setup Windows and ConfigMgr sequence, wait 5-10 minutes and the applications will install. I assume this is because the CM client has time to fully provision.
* I can add the anon ‘IUSR’ account to the local administrators group on the DP and all applications install (without the pause script mentioned above). I can reproduce the issue repeatedly by removing and adding the anon account.
Any help with this would be greatly appreciated…
Also, I come from a CM 2007 background and somewhat new to CM 2012. Should WebDAV and/or URL Authorization be installed and configured on the DP? According to MS tech support “No”. However, I’ve seen several SCCM 2012 guides on the web that say it should
be installed.
Regards
David K. Harrison

Locationservices.log, CIDownloader.log, CIagent.log, DataTransferService.log also need to be checked. We need to find out what credential the Client trys to use when it downloads content from DP.
Juke Chou
TechNet Community Support

2630. java applications. Allow network access?

when entering some java application on nokia 2630 ,for example google maps, it asks:
"Allow network access? the application is not from a trusted supplier" for three times. On the fourth time: "try again later or try to install new version".
Some other applications are working allmost properly... but they use to ask every 5-10 seconds the same question: "Allow network access? The application is not..."
And some applications are working correctly. miniopera and jimm.
So, the problem is not in gprs settings.
What can i do with this problem?

You can either try to get hold of a trusted build of the application you want to run or you can change the Application access setting. When you have an application selected, click Option then Application Access and set the Network access Ask first time only.
Knowledge should be your Advisor when you need help.
1610»2110»8110»5110»3310»6210»7250i»6220»6230»6230i»6233
Love me or hate me, its still an obsession. Love me or hate me, that is the question. If you love me then Thank you! If you hate me then ...

BlackBerry Internet Service with Microsoft Outlook Web Access account

I need to switch my 8820 to a new work account. They use Outlook Exchange 2003, but do not support BES. I have access via both regular desktop Outlook and also Outlook Web Access (from a different server). I read the procedure to use BIS in KnowledgeBase KB03133. After entering my email address and password, I get a message that it was successfully set up. But, I get no e-mail messages delivered. When I check the settings, it looks like it is not using the correct server for Web Access. However, I can find no way to manually enter it - I don't get the error message described in Step 5 where I can pick "I will provide the settings." I try to set up via computer but I get a message that my BIS cannot be accessed via HTML and need to set up on my BB.
Any suggestions? Would it work with a newer phone running a newer OS? Do I need to check with AT&T if it supports Outlook Web Access? Thanks in advance.

Hi and Welcome to the Forums!
Lot's of possible variables...here a several other KBs to try:
KB03133How to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
KB18567BlackBerry Internet Service cannot connect to a Microsoft Outlook Web Access account using Microsoft Exchange 2007 or Microsoft Exchange 2010
KB15173Locate the mailbox name for a Microsoft Outlook Web Access 2007 email account
KB04804Error message appears when attempting to integrate a Microsoft Outlook Web Access 2010 account
KB02858Unable to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
The trick to getting to the manual settings screen is to provide your valid email address, but an incorrect password...then, it will allow you to manually enter the settings.
Good luck!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

How do I restrict wireless network access to specific devices/computers, using an Airport Extreme, when the WPA2 password is able to be found by other devices?

I have set up a wireless network in my office using a couple of Airport Extremes, and, for some reason, our Windows computers are able to view the password of the network. Well, given that we employ teenagers, you can imagine what happens when they all find out the password. We want to restrict network access to only those devices we deem necessary. How do I accomplish this?

SidMed wrote:
We need 18-20 devices to access, all wirelessly.
You can keep using your Apple routers as AP devices.. but get a router running a secure OS as the actual router that controls the network..
If you have 18-20 teens on the network.. then setting quota and restrictions on bandwidth is far more important than time..
Gargoyle on a cheap router can do it.. eg WNDR3800 or the newer W1024ND v2.
Simply turn off the wireless in these devices.. and use the ethernet connection to the airport as WAP.
Honestly you just will never get the security or control using apple domestic routers.

After trying to change permissions on my computer so others on my network can access files, my external Hard Drive has a lock on it and I can't access files. I've tried repairing permissions, logging in under another Administrator account, using Terminal

After trying to change permissions on my computer so others on my network can grab files, my external Hard Drive has a lock on it and I can't access files. I've tried repairing permissions, logging in under another Administrator account, using Terminal to fix the problem, downloaded BatChmod but nothing works… Any other suggestions? I have an Imac running OS10.6.8.

There is suddenly a lock icon on my external backup drive!
Custom Permissions

Restricting Access only for APPS account using SQLNET

Dear Friends,
Recently we have an incident that a functional consultant has cracked the Apps password. I don't know how.
Now what we are planning is to restrict the database access to only the dba team using sqlnet.ora file and its tcp.validnode_checking parameter.
However, the problem is that we want to continue the APPSRO(which is an Apps Read Only Account) access to them.
Is there any way possible to restrict access only for a particular database user account using sqlnet.ora
please help.
Thanks.

Recently we have an incident that a functional consultant has cracked the Apps password. I don't know how.
Now what we are planning is to restrict the database access to only the dba team using sqlnet.ora file and its tcp.validnode_checking parameter.
However, the problem is that we want to continue the APPSRO(which is an Apps Read Only Account) access to them.
Is there any way possible to restrict access only for a particular database user account using sqlnet.ora
Now what we are planning is to restrict the database access to only the dba team using sqlnet.ora file and its tcp.validnode_checking parameter.
However, the problem is that we want to continue the APPSRO(which is an Apps Read Only Account) access to them.
Is there any way possible to restrict access only for a particular database user account using sqlnet.oraNo (and even if it exists, I believe this does not fix the main issue with the apps password which could be cracked again).
The proper way would be changing the apps password and meet the security requirements in these docs.
Secure Configuration Guide for Oracle E-Business Suite 11i [ID 189367.1]
Secure Configuration Guide for Oracle E-Business Suite Release 12 [ID 403537.1]
FNDCPASS Utility New Feature: Enhance Security With Non-Reversible Hash Password [ID 457166.1
Thanks,
Hussein

Network Access Account, used by only Workgroup Computers or Domain Computers also?

Similar Messages

Maybe you are looking for