Remote WSUS integration with SCCM 2012

Hi,
We are currently having WSUS already in place for Patching , but not used at all its just installed.
can remote WSUS be integrated with SCCM 2012 server which is on different server ? what is the best practice ? is it to have WSUS on same server as Primary server?
or I decommission it and install a new WSUS on same server as SCCM server.
what steps have to be taken care if remote WSUS is integrated ? any documents or steps to be taken care .
Thanks in Advance

When you install SUPs, they automatically configure the underlying WSUS instance to sync from an upstream server based upon your ConfigMgr hierarchy.
A couple of notes here though:
- You generally shouldn't use an existing instance of WSUS for ConfigMgr. Once integrated into ConfigMgr, WSUS should no longer manage approvals, update binary downloads, or update binary distribution as these are all handled by ConfigMgr separate from WSUS.
Using an existing WSUS instance where this was the case can be problematic at best and will cause unexpected behavior and results.
- Clients do not choose SUPs based upon boundaries or location so using a remote SUP is typically not beneficial and in many cases will cause additional network load. The exception to this is if the SUP is within a secondary site.
Jason | http://blog.configmgrftw.com | @jasonsandys

Similar Messages

Airwatch MDM integration with sccm 2012

I want to integrate Airwatch MDM with SCCM 2012 SP1. I am not able to find out any documentation for the same. Can anybody help me with the said.
Thanks and Regards Deepak

There is an integration between AirWatch and ConfigMgr 2012. I've never used it so I can't comment on it.
https://tool.microsoftsca.com/Partner/?id=737
Watch the video here
http://airwatch.wistia.com/medias/7463a8aae8
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Remote control options with SCCM 2012 PKI

Does anyone have the remote control feature working with SCCM 2012 R2 running in HTTPS mode? My last message on the console upon trying to start a remote connection is "Initializing a security handshake...". Firewall has been temporarily
disabled on the client. Client certificate is PKI and connection type is 'Always Internet'.
Thanks

PKI, certs, and HTTPS client communication have nothing to do with Remote Control; Remote Control is peer to peer over a custom port (2702 I think but could be wrong). Because it is peer to peer though, you cannot use Remote Control to clients on the Internet
or where direct traffic on this port cannot pass.
Jason | http://blog.configmgrftw.com

MDT 2013 Integration with SCCM 2012 R2

Hi all,
Can we export the Drivers from MDT & import in into SCCM after the integration of MDT with SCCM.
We were having MDT 2012 update 1 in our environment & not we have integrated MDT 2013 with SCCM so can we export the drivers from MDT 2012 Deployment share & import it in SCCM 2012 R2.
Thanks,
Pranay.

Not really importing and exporting. Just re-use the content of the drivers and import them in ConfigMgr.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Integration with SCCM 2012?

Does anyone have any experience in integrating SCCM 2012 with VSM? Any documents or learnings from an asset management standpoint so that the CMDB can be populated?
Thanks in advance.

Hi Chris,
Only the VMware documentation I'm afraid, which isn't at all comprehensive but is enough to get going I think.
I don't know how familiar you are with integration and the federated cmdb so forgive me if you have all this already, but check out the downloads section (https://my.vmware.com/group/vmware/details?downloadGroup=SM_919_DOC&productId=171&rPId=5685) and look for:
VMware Service Manager connector for Microsoft SCCM Technical Notes (VSM_90_Connector_for_SMS_SCCM_TN_v1.0.3.pdf)
Connector Installation Guide (vsm-91-connector-guide.pdf)
Integration Platform Configuration Guide (vsm-91-integration-platform-config-guide.pdf)
Check those out and if you have any questions, do shout and I'll do my best to help if I can!

Is there Java API available for third-party integrations with SCCM 2012? I went through the "Developer's Survival Guide", and it seems that SCCM 2012 SDKs only support C# and PowerShell

Hi All,<o:p></o:p>
My team and I are developing a software using java that works closely with IT management software such as SCCM. Our software will be highly dependent on data stored in SCCM. Basically
our software will talk to SCCM to get information about a system managed by SCCM. To be able to do that, our software needs to use a java API that talks to SCCM. Is there a java API for SCCM 2012 that we can use? If there is not, what is the work around to
this issue (integrate a java project with SCCM SDKs)? Any help is appreciated! Thanks!<o:p></o:p>

Hi,
As you mentioned, it seems that there is no available Java API for SCCM .
Just curious, what's information you want to get from SCCM.
Based on my experience, you could query the SCCM site database to get almost all the information.
Otherwise, your question seems to be related to SCCM 2012. You may also choose to post there to get more effictive help.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Remedy CMDB Integration with SCCM 2012

We are facing an issue with duplicate entries of Hostname after remedy is integrated with SCCM2012.We have created custom view in SQL database which mapped to remedy database.Below is the query used for the integration.Can I get any help on this?
SELECT DISTINCT
                      dbo.v_GS_COMPUTER_SYSTEM.Name0, CASE WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 IN ('3', '4', '6', '7', '15')
                      THEN 'Desktop' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 IN ('8', '9', '10', '21') THEN 'Laptop' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('1')
                      THEN 'VDI' WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 IN ('2', '17', '23') THEN 'Server' END AS Chassis, dbo.v_GS_PC_BIOS.SerialNumber0,
                      dbo.v_GS_COMPUTER_SYSTEM.Manufacturer0, dbo.v_GS_COMPUTER_SYSTEM.Model0, dbo.v_GS_OPERATING_SYSTEM.Caption0,
                      dbo.v_GS_OPERATING_SYSTEM.CSDVersion0, dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.TopConsoleUser0,
                      dbo.v_R_System.User_Name0 AS [Last Logged], dbo.v_GS_PC_BIOS.ReleaseDate0, dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.IPAddress0,
                      dbo.v_R_System.AD_Site_Name0, dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.DefaultIPGateway0, dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0,
                      dbo.Processor_DATA.Name00, dbo.Processor_DATA.Manufacturer00 AS Expr2, dbo.Processor_DATA.ProcessorType00, dbo.Processor_DATA.NumberOfCores00,
                      dbo.CH_ClientSummary.LastHW, dbo.CH_ClientSummary.LastSW, dbo.v_R_System.Last_Logon_Timestamp0, dbo.v_GS_COMPUTER_SYSTEM.Domain0
FROM         dbo.v_GS_PC_BIOS INNER JOIN
                      dbo.v_GS_COMPUTER_SYSTEM ON dbo.v_GS_PC_BIOS.ResourceID = dbo.v_GS_COMPUTER_SYSTEM.ResourceID INNER JOIN
                      dbo.v_GS_NETWORK_ADAPTER_CONFIGUR ON dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.ResourceID INNER JOIN
                      dbo.v_GS_OPERATING_SYSTEM ON dbo.v_GS_OPERATING_SYSTEM.ResourceID = dbo.v_GS_COMPUTER_SYSTEM.ResourceID INNER JOIN
                      dbo.v_R_System ON dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_R_System.ResourceID LEFT OUTER JOIN
                      dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP ON
                      dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.ResourceID INNER JOIN
                      dbo.v_GS_SYSTEM_ENCLOSURE ON dbo.v_GS_COMPUTER_SYSTEM.ResourceID = dbo.v_GS_SYSTEM_ENCLOSURE.ResourceID INNER JOIN
                      dbo.v_GS_X86_PC_MEMORY on (dbo.v_gs_x86_pc_memory.ResourceID = .v_GS_COMPUTER_SYSTEM.ResourceID) inner JOIN
                      dbo.Processor_DATA ON dbo.Processor_DATA.MachineID = dbo.v_R_System.ResourceID INNER JOIN
                      dbo.CH_ClientSummary ON dbo.CH_ClientSummary.MachineID = dbo.v_R_System.ResourceID
WHERE     (dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.IPEnabled0 = 1) AND (NOT (dbo.v_GS_NETWORK_ADAPTER_CONFIGUR.DefaultIPGateway0 IS NULL)) AND (dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0 >=512)
Thanks,
Shijil

Thank you Nash for your help.
I tried with dbo.v_R_System_Valid as suggested, still the same result.Is there any way to filter duplicate computer name in this query?
Below is the query.
SELECT
DISTINCT
dbo.v_R_System_Valid.Netbios_Name0,
CASE WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('3',
'4',
'6', '7',
'15')
THEN 'Desktop'
WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('8',
'9',
'10', '21')
THEN 'Laptop'
WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('1')
THEN 'VDI'
WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0
IN ('2',
'17',
'23') THEN
'Server' END
AS Chassis, dbo.v_GS_PC_BIOS.SerialNumber0,
dbo.v_GS_OPERATING_SYSTEM.Caption0,
dbo.v_GS_OPERATING_SYSTEM.CSDVersion0, dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.TopConsoleUser0,
dbo.v_R_System.User_Name0
AS [Last Logged], dbo.v_GS_PC_BIOS.ReleaseDate0, dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.IPAddress0,
dbo.v_R_System.AD_Site_Name0, dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway0,
dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0,
dbo.Processor_DATA.Name00, dbo.Processor_DATA.Manufacturer00
AS Expr2, dbo.Processor_DATA.ProcessorType00, dbo.Processor_DATA.NumberOfCores00,
dbo.CH_ClientSummary.LastHW, dbo.CH_ClientSummary.LastSW,
dbo.v_R_System.Last_Logon_Timestamp0
from
dbo.v_GS_PC_BIOS
inner JOIN
dbo.v_R_System_Valid
ON dbo.v_GS_PC_BIOS.ResourceID
= dbo.v_R_System_Valid.ResourceID
INNER JOIN
dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION
ON dbo.v_R_System_Valid.ResourceID
= dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.ResourceID
INNER JOIN
dbo.v_GS_OPERATING_SYSTEM
ON dbo.v_GS_OPERATING_SYSTEM.ResourceID
= dbo.v_R_System_Valid.ResourceID
INNER JOIN
dbo.v_R_System ON dbo.v_R_System_Valid.ResourceID
= dbo.v_R_System.ResourceID
LEFT outer
JOIN
dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP
ON
dbo.v_R_System_Valid.ResourceID
= dbo.v_GS_SYSTEM_CONSOLE_USAGE_MAXGROUP.ResourceID
INNER JOIN
dbo.v_GS_SYSTEM_ENCLOSURE
ON dbo.v_R_System_Valid.ResourceID
= dbo.v_GS_SYSTEM_ENCLOSURE.ResourceID
INNER JOIN
dbo.v_GS_X86_PC_MEMORY
on (dbo.v_gs_x86_pc_memory.ResourceID
= .v_R_System_Valid.ResourceID)
inner JOIN
dbo.Processor_DATA
ON dbo.Processor_DATA.MachineID
= dbo.v_R_System.ResourceID
inner JOIN
dbo.CH_ClientSummary
ON dbo.CH_ClientSummary.MachineID
= dbo.v_R_System.ResourceID
WHERE
(dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.IPEnabled0
= 1)
AND (NOT
(dbo.v_GS_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway0
IS NULL))
AND (dbo.v_GS_X86_PC_MEMORY.TotalPhysicalMemory0
>=512)
Thanks,
Shijil

MBAM 2.5 integrated with SCCM 2012 SP1 compliance issue

Hi,
I have installed MBAM 2.5 in a SCCM integrated topology. GPO for encryption on the OS drive only have been deployed and encryption completed using the MBAM client. When running the compliance report and evaluating using the SCCM client the compliance comes
back as non-compliant. I have tried several tweaks to the GPO but had no luck getting it to report as compliant. Using the dashboard report to try and pin point why it is non-compliant shows as non-compliant but using the reasons in the top right corner all
have 0 instances.
Is there a log file on the local system that can tell me what aspect is causing the status?

In the Event Viewer, there is MBAM node, you will find all MBAM client events there.
Also, review your GPO and see what encryption types are allowed and which are required. Maybe one reason would be, that your GPO requires something, which your client hasn´t done yet, like PIN code.
I´ve seen issues with not being compliant to policy before, and there was some explanations of this, if you google around. I´m also intrested to get knowing this, because I couldn´t solve this compliance issue.
For customer reporting, I just did query in SCCM where I listed ecrypted status and drive letters, that was a "customized report method" to tell customer, are all their Computers encrypted or not.

Intel vPro AMT integration with SCCM 2012R2 - Issues with SCCM finding the "ConfigMgr AMT Web Server Certificate"

Good evening all,
I'm attempting to get Intel SCS integrated with SCCM 2012 R2 and I have both sides working, doing what they do best, however, I have issues when I try to mate the two. I started with a single server for the site and then tackled the Intel side with success,
then I added another site server to run the Out of Band service point and Enrollment point. Up until this point I've had no issues with certificate templates, or issuance of those certs.
I have re-read the TechNet documents a few times regarding the PKI setup, some Intel documentation and three step by step articles and non of them seem to differ so I can't understand why I'm unable to choose my "ConfigMgr AMT Web Server Certificate"
when configuring the Out of Band Management Component Properties page. The "AMT web server certificate template:" dialog shows my CA FQDN and CA name, but the certificate template list is always blank. I've tried this from both the remote
and local ConfigMgr consoles. The site servers have rights on the CA to manage and issue certs, is there something I'm missing that isn't in the documentation or buried somewhere that I missed? Is there a Application policy that should be on the
cert that isn't mentioned anywhere?
Thanks in advance!
Tesfaye

Hi Joyce,
Thanks for responding. I pretty much have this error repeating in the log file and not much else:
[28, PID:13388][05/21/2014 15:17:15] :System.DirectoryServices.DirectoryServicesCOMException\r\nThere is no such object on the server.
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindAll()
   at Microsoft.ConfigurationManagement.AdminConsole.Common.ADUtils.EnumEnterpriseCACertificateTemplates(String domainEntryName, String certAuthorityFqdn, Boolean isServerAuthen)\r\n
I will look into this, but another hint would be greatly appreciated!
Thanks,
Tesfaye

WSUS on Server 2012 Standard R2 with SCCM 2012 Standard R2 Proper Setup

What is the proper setup (best practice) on setting up WSUS using Server 2012 Standard R2 to work properly with SCCM 2012 R2 Standard using Server 2012 Standard R2 on separate box?
1. Is it using WID or database during the setup of WSUS using Server 2012 Standard R2?
2. Once it setup properly on WSUS using Server 2012 Standard R2 either WID or database (using SQL 2012 Standard SP1), how do I connect with SCCM 2012 R2 Standard using Server 2012 Standard R2 on separate box?
3. On SCCM 2012 R2 Standard using Server 2012 Standard R2 just need to add WSUS Role, right? Is it using WID or database?
Thanks,
Reza

1. Generally, using the SQL instance you use for ConfigMgr is preferred.
2. The Software Update Point connects ConfigMgr to a WSUS instance.
3. See 2.
Jason | http://blog.configmgrftw.com
It's just as Jason said. The SUP role in SCCM basically "sits on top" of the WSUS role, whether it is local or remote is up to you. You basically install WSUS on a server like you normally would WITHOUT configuring it. I have used both WID and SQL. It's
always nicer to put it on your SQL server since that is (should be) backed up regularly and maintained.
Once you have WSUS installed you just point SCCMs SUP role at the installation and it takes over the rest.
Dustin Estes - MCP | www.dustinestes.com

Will SCOM 2012 R2 co-exist with SCCM 2012 SP1

Hi. Sorry if the answer is obvious, but I need to ask...
Will SCOM 2012 R2 coexist with SCCM 2012 SP1?
We currently have SCOM 2007 R2 installed and we'd like to upgrade.
We installed SCCM 2012 close to 2 years ago and upgraded to SP1 last summer.
We had SCOM 2007 R2 integrated with SCVMM 2008 R2, but have upgraded to SCVMM 2012 SP1 recently - so there is nothing setup between SCOM and SCVMM.
There is currently nothing setup between SCOM and SCCM.
We're a single forest, single domain shop. Ideally, we'd like or System Center products to "work together", thus the question about the 2012 SP1 and R2 mix.
Thanks for any input. I appreciate your time and expertize. Joe.

Hi,
I concur with Alexey, a side note SCCM and SCOM do not use the same SQL Server.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Deploying CC Enterprise Applications With SCCM 2012

Hi all,
We are using CC Packager to package up individual applications (Photoshop, InDesign etc) and are having trouble deploying the applications once packaged. To deploy, we are using SCCM 2012 and are deploying to Windows 7 x64 clients. It appears that the install begins on the client, then hangs, never to finish.
We are running the MSI with the REBOOT=ReallySuppress and MSIRESTARTMANAGERCONTROL=Disable commands, but with no luck.
This has us really stumped. The applications seem to package fine, yet just won't install. If we manually run the installer, we can see it begin installing, then the progress bar goes backwards and the installation ends without displaying any sort of message.
Also, as an FYI, we have followed this guide closely in our attempts: http://helpx.adobe.com/creative-cloud/packager/deploying-packages-sccm.html
Has anyone experienced a similar problem? Any ideas?
Thank you in advance.
Ryan

Windows 7 x64 Clients
Deploying with SCCM 2012
I have called Adobe before and was told that the application package needs to be on a local drive on the computer. The package cannot be installed if the package is sitting on the network. My installation for a adobe creative cloud package fails to install when I try to install the application from the software center. At some moment the installation searches to ensure it is on a local disk. Not sure how this happends. If you place the installation package on a drive on your computer the package will install, although it will take time depending on how many applications you have packaged.
Another problem that you might have is having users log out of the applications without admin previlages.
I have yet to find a solution for these two problems, I could really use some help from someone who has sucessfully deployed a creative cloud package to a user.
Thank you

Remote control and remote desktop client in sccm 2012 ?

What is the difference between remote control and remote desktop client in sccm 2012 ?

Remote Control is a built-in feature for SCCM 2012 and uses the RPC protocol. When you use this, the user can still be logged on while helping.
Remote Desktop is a buit-in feature for Windows and uses the RDP protcol. When you use it, the user will be logged off.
Why you would use one over the other depends on your requirements.
Blog: www.danielclasson.com/blog |
LinkedIn:
Daniel Classon | Twitter: @danielclasson

Deploy UDI Windows 10 with SCCM 2012 R2 and MDT 2013 Update 1

Hi,
Trying use "User-Driven Installation" with
SCCM 2012
R2 CU4 and MDT
2013 Update 1 for deploy Windows
10.
Created MDT Task Sequences with
template "Client Task sequence"
and Deployment Method "User-Driven Installation".
When I try to deploy I have error like:
Failed to run the last action: Error in the task sequence. Execution of task sequence failed.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows)
ZTI deployment failed, Return Code = 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Unable to create WebService class InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Command line returned 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
Part smsts.log
!--------------------------------------------------------------------------------------------! TSManager 22.04.2015 11:36:57 1160 (0x0488)
Expand a string: WinPEandFullOS TSManager 22.04.2015 11:36:57 1160 (0x0488)
Executing command line: smsswd.exe /run: cscript "%deployroot%\scripts\ztierrormsg.wsf" TSManager 22.04.2015 11:36:57 1160 (0x0488)
[ smsswd.exe ] InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
PackageID = '' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
BaseVar = '', ContinueOnError='' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
ProgramName = 'cscript "C:\_SMSTaskSequence\WDPackage\scripts\ztierrormsg.wsf"' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
SwdAction = '0001' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Set command line: Run command line InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Working dir 'not set' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Executing command line: Run command line InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Microsoft (R) Windows Script Host Version 5.12 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Copyright (C) Microsoft Corporation. All rights reserved. InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Microsoft Deployment Toolkit version: 6.3.8216.1000 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
The task sequencer log is located at X:\WINDOWS\TEMP\SMSTSLog\SMSTS.LOG. For task sequence failures, please consult this log. InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
ZTI deployment failed, Return Code = 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Unable to create WebService class InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Command line returned 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
!--------------------------------------------------------------------------------------------! TSManager 22.04.2015 11:36:57 1160 (0x0488)
Failed to run the action: Error in the task sequence.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
MP server http://sccm.domain.com. Ports 80,443. CRL=false. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting authenticator TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set authenticator in transport TSManager 22.04.2015 11:36:57 1160 (0x0488)
Sending StatusMessage TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting message signatures. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting the authenticator. TSManager 22.04.2015 11:36:57 1160 (0x0488)
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.com:80 CCM_POST /ccm_system/request TSManager 22.04.2015 11:36:57 1160 (0x0488)
Request was successful. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set a global environment variable _SMSTSLastActionRetCode=5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 22.04.2015 11:36:57 1160 (0x0488)
Clear local default environment TSManager 22.04.2015 11:36:57 1160 (0x0488)
Let the parent group (Gather Logs and StateStore on Failure) decides whether to continue execution TSManager 22.04.2015 11:36:57 1160 (0x0488)
The execution of the group (Gather Logs and StateStore on Failure) has failed and the execution has been aborted. An action failed.
Operation aborted (Error: 80004004; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
Failed to run the last action: Error in the task sequence. Execution of task sequence failed.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
MP server http://sccm.domain.com. Ports 80,443. CRL=false. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting authenticator TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set authenticator in transport TSManager 22.04.2015 11:36:57 1160 (0x0488)
Sending StatusMessage TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting message signatures. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting the authenticator. TSManager 22.04.2015 11:36:57 1160 (0x0488)
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.com:80 CCM_POST /ccm_system/request TSManager 22.04.2015 11:36:57 1160 (0x0488)
Request was successful. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Executing command line: X:\WINDOWS\system32\cmd.exe /k TSBootShell 22.04.2015 11:37:31 696 (0x02B8)
The command completed successfully. TSBootShell 22.04.2015 11:37:31 696 (0x02B8)
Successfully launched command shell. TSBootShell 22.04.2015 11:37:31 696 (0x02B8)

MDT Updates for Windows 10 Technical Preview Build 10041
Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Пометить как ответ".
http://zalozny.com.ua

AMT 3.2.10 Clients with SCCM 2012 on Windows 2012

Hey
I have a couple of HP dc7800 computers with Intel's AMT/vPro that I'd like to provision with SCCM 2012. The installed firmware version is 3.2.10 which is a supported version according to the documentation [1]. Provisioning of newer clients (5.2.x upwards)
is successful, so I can rule out all the usual suspects like the provisioning certificate from GoDaddy, our internal CA, DHCP options, etc. Provisioning with SCCM 2007 of both 3.2.x and 5.x AMT devices is also still successful.
The amtopmgr.log repeatedly shows the following entries:
Provision target is indicated with SMS resource id. (MachineId = 16777325 WS45.mydomain.ch)
Found valid basic machine property for machine id = 16777325.
Warning: Currently we don't support mutual auth. Change to TLS server auth mode.
The provision mode for device WS45.mydomain.ch is 1.
The IP addresses of the host WS45.mydomain.ch are x.x.x.x.
Root hash of provisioning certificate is 2796BAE63F1801E277261BA0D77770028F20EEE4.
Attempting to establish connection with target device using SOAP.
Create provisionHelper with (Hash: 74B7792EDBD64EBB01E2E3A0B27FAFA04C2D3BCB)
Set credential on provisionHelper...
Try to use provisioning account to connect target machine WS45.mydomain.ch...
Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server.
**** Error 0x37f2b370 returned by ApplyControlToken
Fail to connect and get core version of machine WS45.mydomain.ch using provisioning account #0.
Try to use default factory account to connect target machine WS45.mydomain.ch...
Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server.
**** Error 0x37f2b370 returned by ApplyControlToken
Fail to connect and get core version of machine WS45.mydomain.ch using default factory account.
Try to use provisioned account (random generated password) to connect target machine WS45.mydomain.ch...
Error 0x80090304 returned by InitializeSecurityContext during follow up TLS handshaking with server.
**** Error 0x37f2b370 returned by ApplyControlToken
Fail to connect and get core version of machine WS45.mydomain.ch using provisioned account (random generated password).
Error: Device internal error. This may be caused by: 1. blabla...
Error: Can NOT establish connection with target device. (MachineId = 16777325)
After some investigation with Wireshark, I've found out that SCCM tries connect with TLSv1 to the AMT device. The response from the device is immediately an SSL alert (internal error). Using OpenSSL, I could connect to the device if I explicitly told it
to use SSLv3. This leads me to believe that the 3.2.x firmware cannot handle TLSv1 correctly and SCCM never tries to connect with SSLv3 after a failure.
So the question is: How can I get SCCM 2012 to provision these devices?
Regards,
Ingo
[1]
http://technet.microsoft.com/en-us/library/c1e93ef9-761f-4f60-8372-df9bf5009be0#BKMK_SupConfigOOB

Since no one has answer this post, I recommend opening a support case with CSS as they can work with you to solve this problem.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Remote WSUS integration with SCCM 2012

Similar Messages

Maybe you are looking for