Pre-provision TRK for SCCM 2012 R2 client

Hello,
Clients have some troubles with establishing trusted relationship with management point, I found this article http://technet.microsoft.com/en-us/library/bb680504.aspx but this for SCCM 2007, where can I find for SCCM 2012 R2?

Do you have AD extended and is the site information properly published to AD in the System Management container?
What happens when you manually "push" a client?
What exactly is the entire command-line you are using to install the client?
The message above is not about the trusted root key, it clearly shows that MP being communicated with is not in the MPLIST returned. I can't say I've ever seen that before, but it is indicative of some other configuration type error.
Jason | http://blog.configmgrftw.com
Hello,
thank you for your message,
yes, AD was extended and System Management container has site info,
I have the same problems with push and manual installation,
I tried this command (specify key and site server cert and without it): C:\Client\ccmsetup.exe /mp:SCCM /logon SMSSITECODE:CM1 SMSPublicRootKey=<key> SMSSIGNCERT=<path to cert>
where <key> from a file and cert which was exported from site server.
Where MPList is stored? We spent much time to solve this problem, even reinstalled SCCM on new servers with new site code but problem is not solved.
After installation client tries to register on management point but there are errors in the different logs at same time:
Failed to verify signature of message received from MP using name 'SCCM.contoso.com.'
Failed to verify message. Sending MP [SCCM] not in cached MPLIST.
RegTask: Failed to send registration request message. Error: 0x87d00309

Similar Messages

  • Required access for SCCM 2012 R2 Client End

    Hi all,
    What is minimum level of access required for SCCM 2012 client machines management ( Deploy , Discovery , agent install …etc) , we have an account called clientdeploy , is that account is mandatory
    to have local administrators  privilege on all client machine to manage everything , is that Microsoft recommended one ?
    Sengo

    No, Not required this account to be local admin in all client.
    If you want access required for sccm 2012, for deploying app., O.s and managing client, this account must be member of sms group such as configmgr remote control users for remote tool
    For more details, you can refer below link
    http://technet.microsoft.com/en-us/library/hh427337.aspx
    Also I recommended to ask your question in
    SCCM Forum
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical | Twitter:
    Mai Ali

  • SCCM 2012 R2 client version 1101 and 1104 queries

    There are several samples of collection query code for SCCM 2012 R2 client version 5.00.7958.1000, which is the base R2 client version. Patches can change this to 5.00.7958.1101 and 5.00.7958.1104. But there is a problem. These two patches
    display as 1101 and 1104 when you go to Control Panel\Configuration Manager\General tab but when you go to Programs and Features and look in there the DisplayVersion is 5.00.7958.1000--so all query code samples are unable to different between the base versions
    and version 1101 and 1004. I have been unable to find out how to write a query that finds version s 1101 and 1104. Does anyone know how to do this? Thanks.

    Use ClientVersion from SMS_R_System within a console query or ClientVersion0 from V_R_system in a SQL query.
    Even this can be deceptive though because the agent only reflects the highest version number of one of its subcomponets. This post, specific to 2007, describes the complexity: http://blog.configmgrftw.com/configmgr-client-hotfix-versioning/.
    Specific to your question though, why do you care if either of these hotfixes are distributed to your clients? 2905002 is only necessary during WinPE (and if you are actually not using download on demand content during OSD) and 2910552 is only applicable
    if you are rolling out Win 8.1 using a single TS to your XP systems using a refresh methodology.
    Jason | http://blog.configmgrftw.com

  • Using a custom certificate store for SCCM 2012 clients and primary site server

    I have read what seems to be all the pki related documentation out there for SCCM 2012. I have a PKI infrastructure up and running issueing certificates with an offline root through group policy autoenrollment. The problem that i'm faced with is we are migrating
    from SCCM 2007 that was in native mode and we chose not to use the CA that we used for the old SCCM environment. When the clients attempt to communicate with the M.P. it runs through all of the different certificates and adds a tremendous amount of overhead
    to the M.P. We will have ten's of thousands of clients by migration end. Could someone please point me to a document that goes over how to leverage a custom certificate store that I could then tell the new 2012 environment to use? I know that it's in there,
    I've seen it in the console. The setup is one primary site server with SQL on box and the pki I just mentioned as well as the old 2007 environment that is still live.
    I read that you can try and use SAN as a method of identifying the new certs but I haven't found a good document covering exactly how that works. Any info you could provide I would be very grateful for. Thanks.

    Jason, thank you for your reply. I'm getting the impression that you have never been in the situation where you had to deal with 2 different PKI environments. Let me state that I understand what your saying about trust. We have to configure the trusted root
    CA via GPO. That simply isn't enough, and I have a valid example to backup this claim. When the new clients got the advertisement and began the ccmsetup process I used the /pki switch among others. What the client end up doing was selecting a certificate that
    had the longest validity period which was issued by our old CA. It checked the authentication chain, found it to be valid and selected it for communication. At that point the installation failed, period, no caveats as you say. The reason the install failed
    because the new PKI infrastructure is integrated into the new environment, and the old is not. So when you said " that
    are trusted and they can use *any* cert that is trusted because at the end of the day, there is no
    difference between two valid certs that have the same purpose as long as they are trusted. "
    that is not correct. Both certs are trusted, and use the same certificate template, but only one certificate would allow the install to complete successfully.
    Once I started using the CCMCERTISSUERS
    switch the client install went swimmingly. The only reason I'm still debating this point is because someone might read this thread see your comments and assume "well I've got my new PKI configured as a trusted root CA, I should be all set" and their
    deployment will fail, just as my pilot did.
    About Intune I'm looking forward to doing a POC in the lab i built with my Note 3. I'm hoping it goes well as I really want to have our MDM migrated into ConfigMgr... I think the
    biggest obstacle outside of selling it to management will be the actual device migration from the current MDM solution. From what I understand of the enrollment process manual install and config is the only path forward.
    Thanks Jason for your post and discussion.

  • Pre-requisites for SCCM 2012 R2

    Hi Experts,
    I want to know is it mandatory to install and configure WDS, WSUS and MDT before deploying SCCM 2012 R2
     Are the Above roles prerequisites....????
    What would be the possible pre-requisites for SCCM 2012 R2..???

    For the pre-requisites, you can refer to the article that Torsten already shared.
    As Torsten already mentioned, the installation of WDS, WSUS and MDT is optional. However, if you are planning to do OS Deployment (OSD) then consider installing WDS and MDT (Of course, you can install MDT if you would like to take advantage of its use).
    As for WSUS, you can consider installing it if you would like to ensure a central management of Software Updates. So, depending on your requirements, you can decide what to do.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Error installing SCCM 2012 SP1 client

    Hi All,
    I am getting the following error, detailed in the client.msi.log, when trying to install the SCCM 2012 SP1 client on a couple of windows 2008 R2 servers.
    Error 1904. Module C:\Windows\CCM\StatusAgentProxy.dll failed to register.  HRESULT -2147010895
    The ccmsetup.log details the same message without Error 1904 indicated.
    I am installing the client using the SUP method, which has worked without any problems on all 180 other windows servers I have done.  ccmsetup starts and downloads all pre reqs required for the client rollout, but it then hits this error and does not
    finish the installation.
    Any help would be much appreciated?
    Regards PowerShell90

    Hi,
    I've seen this issue a couple of times and usually it's related to incorrect Versions of C++ Library installed on the system you try to install the Client. Try and remove any existing installations, reboot and install this version;
    http://www.microsoft.com/en-us/download/details.aspx?id=26368
    Let me know how it goes.

  • SCCM 2012 R2 Client only showing 2 items under Actions

    I've enable AD Forest Discovery on Primary Site also checked Automatically create AD site boundaries when they are discovered and Automatically create IP address range boundaries for IP subnets when they are discovered.
    I didn't change this (default) Disable AD Forest Discovery on CAS.
    I am still running SCCM 2007 R3 SP2 in Production environment. Do I need to remove all the boundaries first on SCCM 2007? Before I could install SCCM 2012 R2 client?
    The reason that I manually install SCCM 2012 R2 client to my test computers just want to see if the SCCM 2012 R2 client will install without any issues. Right now, there's :(
    On my Client Push Installation Properties, I haven't Enable automatic site-wide push installation. I just don't want SCCM 2012 R2 client is automatically pushing it out. Should I enable this? Is there any effect?
    Two nights ago, I manually deploy SCCM 2012 R2 client (right click to deploy SCCM Client) to my test Win7x64 Enterprise and Win8.1x64 Enterprise. Until this morning Actions are not fully there (it should be total 11)
    SCCM 2012 R2 client (version 5.00.7958.1000) installed but SCEP 2012 is not install (I think there's a problem here) since I checked the Actions button on both of Win7x64 Enterprise and Win8.1x64 Enterprise are only showing 2 Actions:
    1. Machine Policy Retrieval & Evaluation Cycle
    2. User Policy Retrieval & Evaluation Cycle
    I've checked on both of Win7x64 Enterprise and Win8.1x64 Enterprise logs (using CMTrace):
    1. CcmExec.log -> no errors
    2. LocationServices.log -> Current AD site of machine is Default-First-Site-Name
    3. ClientLocation.log -> It knows my new MP (correct one)
    4. ClientIDManagerStartup.log -> with errors below
    ClientIDManagerStartup.log has lots of RED errors (same one):
    <![LOG[RegTask: Failed to send registration request message. Error: 0x8000000a]LOG]!><time="11:26:13.695+420" date="07-03-2014" component="ClientIDManagerStartup" context="" type="3" thread="1716"
    file="regtask.cpp:1297">
    I am hoping someone will be able to point me to the right direcly, please. Thanks, Reza
    Reza Prawirasatya

    Idan,
    Thanks for the info.
    I have check this registry below:
    Check in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Mobile Client
    It's pointing to my new site code of SCCM 2012 R2 (it's not SCCM 2007 site code).
    What I did wrong I deploy SCCM 2012 Client Custom Settings to a collection that I created and also Antimalware Policies to that collection as well where that collection has 0 (none members).
    So I deleted and just simply pointed both SCCM 2012 Client Custom Settings and Antimalware Policies to All Systems and all my test computers (workstations & servers) have SCCM 2012 R2 client along with SCEP 2012.
    I have more questions below:
    What's the best way for me to approach this SCCM 2012 R2 Client push to a test computers (workstations and servers).
    I have SCCM 2007 R3 SP2 is still running in Production, currently Boundaries set as IP subnet (not using AD Site, it used but I changed it 2 years ago).
    Now, SCCM 2012 R2 Primary Site set Enable AD Forest Discovery with Automatically create AD & Automatically create IP address range boundaries for IP subnets.
    Of course, by turning this option above, it will pick up lots of different IP subnets. Even the one our sister company (lots of different domain).
    1. In SCCM 2012 R2 Boundary Groups, I set Default-First-Site-Name (AD Site), under Site Systems tab, I have also my Primary Site SCCM 2012 R2 here.
    Here's the questions:
    1. Do I need to add IP subnet in SCCM 2012 R2 Boundary Groups? Do I need to add let's say 10.xxx.20.xxx (IP subnet here).
    2. Also, do I need to delete IP subnet in SCCM 2007 Boundaries that correspond to that IP subnet? Let's say I have 10.xxx.20.xxx (IP subnet here) and remove this one since I have added on number 1?
    Reza Prawirasatya

  • New SCCM 2012 client machines still getting SCCM 2012 SP1 client not the new SCCM 2012 SP1 CU3 client

    Hi,
    I've successfully (as far as I can tell) deployed SCCM 2012 SP1 CU3 and all my existing clients are showing a client version of 5.00.7804.1400.  But when I setup a new client system recently I noticed that the client version was showing 5.00.7804.1000,
    and not 5.00.7804.1400. 
    For new client systems, do I need to redeploy the packages that were created for SCCM 2012 SP1 CU3 so that the new systems get the new SCCM 2012 SP1 CU3 client? 
    Thanks,
    Nick

    Hi,
    Here's some good information to look over:
    http://sccmfaq.wordpress.com/2013/09/24/sccm-2012-include-cu-in-osd/
    I haven't followed these instructions myself, since I haven't really had any good reason to include CUs during the initial installation process. I use this method instead and I've never run into any problems:
    http://www.ronnipedersen.com/2013/06/installing-sccm-2012-sp1-cu2-quick-start-guide/
    Don't retire TechNet! -
    (Don't give up yet - 12,575+ strong and growing)

  • SCCM 2012 R2 Clients are not retrieving policy

    Hi - I know this question has been asked many times before - but I have tried almost everything and a no closer to solving the problem.
    Background: Recently a SCCM 2012 SP1 single stand-alone site was upgraded to SCCM 2012 R2. The site is a single stand-alone primary site with a single DP, single MP, using mixed mode
    (HTTP). The R2 upgrade ran without any problem and all SCCM components are showing as healthy.
    A few test SCCM 2012 SP1 clients were upgraded to the R2 client using client-push.
    However the upgraded clients are not retrieving policy from the Management Point. In the Actions Tab of the SCCM client, only Machine Policy Retrieval and User Policy Retrieval are available. But kicking of those actions does not
    result in any of the advertised applications, Task Sequences becoming available. Infact Custom Client Settings are not being set either (e.g. Organisation Name in software Center).
    I have checked and rechecked the following:
    The upgrade of the client completed successfully (checked ccmsetup.log) and the version number went from 5.00.7804.1000 (SP1) to 5.00.7958.1000 (R2).
    The MP health in the SCCM console is showing healthy.
    The MP access URL's load correctly when run from SCCm client computers
    “http://<ServerName>/sms_mp/.sms_aut?mplist” is ok
    “http://<ServerName>/sms_mp/.sms_aut?mpcert” is ok
    The SCCM clients are assigned to the site correctly – verified via the SCCM client and
    ClientLocation.Log
    ClientIDManager.Log is not showing any errors
    CCMExec.log and ExecMgr.log don't show any advertisements being executed (Execmgr.log is almost empty and only has "Software ditrbution site settings policy does not yet exist on the client). If the client is not yest
    registered this is expected behaviour")
    The SCCM clients are Approved and NOT Blocked in SCCM
    I have attempted to upgrade the SCCM client and also completely removed and reinstalled - and both have the same result (no client policy dpwnloaded)
    I have also deleted the above clients completely from SCCM, Run divoery again and pushed the client to the machines again ...with the same result (SCCM client installs, assigns to correct site and then no policy downloaded)
    SCCM 2012 Boundaries are configured correctly and assigned to Boundary Groups correctly
    The SCCM client’s do not have the firewall enabled
    Changed boundary from AD Site to Subnet to IP Address Range: Same issue exists
    Uninstalled MP role and reinstalled it: same Issue exists
    Tried to connect to SCCm client using 3rd party SCCM Client center tool but cannot connect
    ??? Not sure what else to try ???

    Hi all - sorry for the late response.
    We managed to resolve the issue after logging a job with Microsoft Support.
    The issue was that the SCCM 2012 R2 upgrade corrupted 2 tables in the SCCM Database - leading to corrupt SCCM client policies.
    I am pasting the resolution email from Microsoft below:
    (NOTE: This may not be the exact sypmtoms you are experiencing so do not implement this fix assuming it will fix your problem!)
    ISSUE: 
    - All clients are unable to download policies from the server
    CAUSE:
    - Bad policies in the Database
    RESOLUTION: 
    -Issue with PADbID - Run below query against SCCM DB to verify corrupt entries:
    SELECT * FROM
    ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
    Confirmed Bad policies entries in the SCCM database
    Run below query to delete the bad policy after which we resolved the issue:
    Delete FROM ResPolicyMap
    WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)"

  • How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?

    How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?
    I have Direct Access implemented in my environment. I have Windows 8.1 machine connecting through direct access.
    I want to manage the windows 8.1 through SCCM. How do I setup IPV6 boundary. Can someone guide me through?
    Below are the Windows 8.1 client IP Configuration
    C:\Windows\system32>ipconfig
    Windows IP Configuration
    Wireless LAN adapter Local Area Connection* 3:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    Wireless LAN adapter Wi-Fi:
       Connection-specific DNS Suffix  . : home
       Link-local IPv6 Address . . . . . : fe80::7466:11a5:39ed:ffb0%4
       IPv4 Address. . . . . . . . . . . : 192.168.1.5
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 192.168.1.1
    Tunnel adapter isatap.home:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . : home
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:1494:1339:93d6:439c
       Link-local IPv6 Address . . . . . : fe80::1494:1339:93d6:439c%9
       Default Gateway . . . . . . . . . :
    Tunnel adapter iphttpsinterface:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:e1a7:9cc8:c3c7:d819
       Temporary IPv6 Address. . . . . . : fd64:fc00:d17b:1000:206c:f857:ddbe:2f2b
       Link-local IPv6 Address . . . . . : fe80::e1a7:9cc8:c3c7:d819%10
       Default Gateway . . . . . . . . . :
    Below are the IPConfiguration details for Direct Access server
    C:\Windows\system32>PsExec.exe \\MURA01 ipconfig
    PsExec v1.98 - Execute processes remotely
    Copyright (C) 2001-2010 Mark Russinovich
    Sysinternals - www.sysinternals.com
    Windows IP Configuration
    Ethernet adapter Ethernet:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:3333::1
       Link-local IPv6 Address . . . . . : fe80::b1ad:1c29:b4a:9125%15
       IPv4 Address. . . . . . . . . . . : 10.192.1.25
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.192.1.1
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    Tunnel adapter isatap.{3D6A5E86-D85A-46C8-B69B-FFCF6D5D849C}:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1:0:5efe:10.192.1.25
       Link-local IPv6 Address . . . . . : fe80::5efe:10.192.1.25%18
       Default Gateway . . . . . . . . . :
    Tunnel adapter 6TO4 Adapter:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    Tunnel adapter IPHTTPSInterface:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::1
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::2
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:2552:e9f8:87d3:ed8e
       Link-local IPv6 Address . . . . . : fe80::2552:e9f8:87d3:ed8e%20
       Default Gateway . . . . . . . . . :
    ipconfig exited on MURA01 with error code 0.
    Below are the IPCONFIG Details for SCCM Server:
    C:\Windows\system32>PsExec.exe \\sccm01 ipconfig
    PsExec v1.98 - Execute processes remotely
    Copyright (C) 2001-2010 Mark Russinovich
    Sysinternals - www.sysinternals.com
    Windows IP Configuration
    Ethernet adapter Ethernet:
       Connection-specific DNS Suffix  . :
       Link-local IPv6 Address . . . . . : fe80::9f0:86f9:441d:bc07%12
       IPv4 Address. . . . . . . . . . . : 10.192.1.30
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.192.1.1
    Tunnel adapter isatap.{0749E47D-AE0A-4D47-9D37-BDDC848E56F6}:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    ipconfig exited on sccm01 with error code 0.
    What will be the IPV6 values to configure boundary?

    Depending on how the clients connect use the IPv6 prefix of their 6to4, Teredo, and/ or IP-HTTPS tunnel. Just keep in mind that it could become a long list...
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • SCCM 2012: enable powershell execution policy for SCCM 2012 console

    Hi,
    I always get stuck settings up the remote sccm 2012 powershell (cd psdrive sitecode:). Maybe not a real sccm 2012 question but Powershell but wonder what steps you take to make it work (it works on our production environment, setting up in a lab always gives
    me headaches, will defintely write the solution down this time :-)).
    Please advise what the steps are in configuring remote powershell for SCCM 2012.
    1.my personal account "Myuser" has admin-rights in sccm 2012
    2.I can open Powershell logged on to the sccm 2012 server then opening sccm 2012 console, connect via powershell
    3.however, when I connect remote to the sccm server, I get the error:
    . : File C:\Users\Myuser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 cannot be loaded. The file C:\Use
    rs\MyUser\Documents\WindowsPowerShell\Microsoft.PowerShell_profile.ps1 is not digitally signed. You cannot run this scr
    ipt on the current system. For more information about running scripts and setting execution policy, see about_Execution
    _Policies at http://go.microsoft.com/fwlink/?LinkID=135170.
    4.So I connect to the sccm-server and ask for the execution policy to unrestricted, I get this:
    set-executionpolicy unrestricted
    [Y] Yes  [N] No  [S] Suspend  [?] Help (default is "Y"): y
    Set-ExecutionPolicy : Windows PowerShell updated your execution policy successf
    ully, but the setting is overridden by a policy defined at a more specific scope
    There is no policy which sets any powershell configs.
    Please advise.
    J.
    Jan Hoedt

    Those client settings are only for the actions performed by the ConfigMgr client. Normal PowerShell actions are restricted to the configured execution policy on the machine.
    Have a look at this post:
    http://blogs.msdn.com/b/pasen/archive/2011/12/07/set-executionpolicy-windows-powershell-updated-your-execution-policy-successfully-but-the-setting-is-overridden-by-a-policy-defined-at-a-more-specific-scope.aspx
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Problem Installing SCCM 2012 R2 client on Windows Thin PC 7 (Windows Embedded)

    Hi, I'm trying to install SCCM 2012 R2 client on Windows thin pc 7
    I check the ccmsetup.log and it returned this:
    Failed to get list of protected volume: List pointer is NULL (3)
    ccmsetup 07/08/2014 08:06:26''
    2040 (0x07F8)
    DetectEWF failed with 0x80070003. ccmsetup
    07/08/2014 08:06:26'' 2040 (0x07F8)
    DetectWindowsEmbeddedWF failed with 0x80070003.
    ccmsetup 07/08/2014 08:06:26''
    2040 (0x07F8)
    A Fallback Status Point has not been specified.  Message with STATEID='304' will not be sent.
    ccmsetup 07/08/2014 08:06:26''
    2040 (0x07F8)
    Cannot install over embedded OS with WF enabled on the system drive.
    ccmsetup 07/08/2014 08:06:26''
    2040 (0x07F8)
    CcmSetup failed with error code 0x80004005 ccmsetup
    07/08/2014 08:06:26'' 1960 (0x07A8)
    Can somebody help me?
    Thanks
    Renzo
    PD: Sorry for my bad English

    Cannot install over embedded OS with WF enabled on the system drive.
    You have to disable write filters on that device first.
    Torsten Meringer | http://www.mssccmfaq.de

  • Installing and Managing SCCM 2012 R2 client in workgroup

    Hi,
    I'm trying to install sccm 2012 r2 client on a workgroup workstation, but i can't manage to put the client working.
    Already tried this solutions
    http://blogs.technet.com/b/anilm/archive/2012/05/06/managing-workgroup-clients-in-configuration-manager-2012.aspx
    http://eskonr.com/2013/08/sccm-configmgr-2012-manage-workgroup-computers-for-deploymentremote-tools-etc/
    if i use this commands to install the client the client don't install.
    ccmsetup.exe /source:C:\client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=cm12lab.com
    if i use this one same happens
    Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX FSP=sccmserver DNSSUFFIX=dnssuffix
    If i use this one the client gets installed and the site code assigned but nothing more. It shows at the sccm console, but don't receive informations from sccm i think
    Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX SMSSLP=sccmserver DNSSUFFIX=dnssuffix
    on the client, clicking in Site tab and configure settings, the site code is there, clicking in Find Site returns error saying that cant find the site. on the locationservices log i'm getting
    Policy prevents failover to WINS for lookup
    Unable to retrieve AD Site membership
    No Location reply received from xxxxxx.domain.xxx
    No location reply received from xxxxxx
    thks in advance

    It should work just by:
    Copy the client files (the whole directory) to the workgroup computer (c:\tmp\Client)
    Run ccmsetup.exe /source:c:\tmp\Client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=CM12LAB.COM
    Examine %windir%\ccmsetup\logs\ccmsetup.log for more information if the client doesn't install at all, possible causes might be corrupted WMI, lack of BITS (if running Windows 2003 server).. in these cases you could run WMIDiag (http://www.microsoft.com/en-us/download/details.aspx?id=7684)
    to get more info on the errors and how to fix them.
    Couple of checks:
    DNS is working correctly both ways? Workgroup machine can find ConfigMgr server and ConfigMgr server can find workgroup machine by name? You can test this by running
    nslookup <target.fqdn> on both
    Workgroup computer is in the boundary / boundary group that has a site server assigned

  • Hardware Sizing for SCCM 2012 R2

    Hello,
            I need your help to do Hardware Sizing for SCCM 2012 R2 environment (SCCM and SQL on same server) with 1000 clients. I have identified the Vm for this installation,
            Kindly share the RAM, HDD (Partitions for OS, Data, Log etc..) and No.of CPU
    Additionally kindly confirm SQL server 2012 SP1 requires any CU for SCCM 2012 R2 environment.

    Just an example...
    At least 16GB RAM, 2 or more CPUs.
    Basically your HDD configuration depends do you have fast disk or slow disk. HDD has to be fast, Johan has very good examples here:
    http://www.deploymentresearch.com/Research/tabid/62/EntryId/115/Sizing-your-ConfigMgr-2012-R2-Primary-Site-Server.aspx
    SQL Server 2012 SP1 doesn't require any CU for ConfigMgr 2012 R2.

  • List of recommended hotfixes/updates for SCCM 2012 R2 agents?

    Hopefully I ask this correctly.
    Is there a list of recommended hotfixes or updates for SCCM 2012 R2 agents?  Things like .Net or WMI updates.
    I am seeing the occasional agents lose connectivity, and I want to make sure I have a complete or recommended list of non-SCCM hotfixes before I move forward.
    Thanks!
    Andy

    To my knowledge there aren't really any kind of recommended hotfixes to apply before a client installation, except for the prerequisites (that the client installs by itself). But as a best practice, always make sure that a client is up to date when it comes
    to patches.
    Regards,
    Nickolaj Andersen | www.scconfigmgr.com | @Nickolaja

Maybe you are looking for

  • The contacts and calendar data on my iPod touch will not sync with my Mac

    I have a 2nd generation ipod touch, and an iMac running iTunes 8.2.1. I have been away from my mac for a few months and have entered a lot of contact and calendar info into my ipod touch. Now, when I try to sync the contacts and calendar data on my i

  • Illustrator CS5 Startup Crash Win7 32bit

    Illustrator CS5 crashes every time I Iaunch the applicaton after about 3 seconds of being open. The program worked at first before I installed my pen driver, I can not update my graphics tablet / pen as there are no driver updates available. I have t

  • IMac G4 crashes on start up

    I have an iMac G4 that is running 10.5.8 and recently it has started to crash on start up. When I turn it on I get the Apple logo with the spinning cog for about 30 seconds than the Get the "Press and hold power button to restart" screen. I don't hav

  • Email program not running. Messaging Exception coming,

    I am making an program which will send the mail to a gmail account. On my laptop following are installed: - Apache Tomcat - Eclipse But the servlet is not able to send the mail to gmail account. I am directly sending the mail to the gmail account. I

  • Error 403 appstore

    Hello: How to solve the error 403 of appstore? Thanks, Philipp