SCCM 2012 boundaries

hello all,
i have one sccm 2012 primary server and few distribution points across the several sites, So when i create boundaries using IP address range or Subnets non of the deployments will work, but it will be
fine when i add it using AD sites. now the problem is, some sites are trying to access the primary site when downloading content for the SW deployment and OS deployment,
Today i noticed, when i boot computers using boot media (CD or USB), Task sequence get failed, then i added Primary AD Site into remote distribution points and vice versa it stared to work,
what will be possible root cause for this? overlapping or smthing? plz advice!
cheers
lrok
Lrok

in SCCM 2012, you should have to be very careful for boundary, as well as for boundary group, every boundary should be member of any boundary group, AND in that boundary group, site system should be add a content location. so when you deploy OS or software
on PC then that PC should be download the content from the DP which was added n boundary group/.
Sharad Singh | My blogs: SharadTech | Twitter:
@SinghSharaad | | Please remember to click “Mark as Answer” on the post that helps you.This can be beneficial to other community members reading the thread.

Similar Messages

SCCM 2012 R2 Clients are not retrieving policy

Hi - I know this question has been asked many times before - but I have tried almost everything and a no closer to solving the problem.
Background: Recently a SCCM 2012 SP1 single stand-alone site was upgraded to SCCM 2012 R2. The site is a single stand-alone primary site with a single DP, single MP, using mixed mode
(HTTP). The R2 upgrade ran without any problem and all SCCM components are showing as healthy.
A few test SCCM 2012 SP1 clients were upgraded to the R2 client using client-push.
However the upgraded clients are not retrieving policy from the Management Point. In the Actions Tab of the SCCM client, only Machine Policy Retrieval and User Policy Retrieval are available. But kicking of those actions does not
result in any of the advertised applications, Task Sequences becoming available. Infact Custom Client Settings are not being set either (e.g. Organisation Name in software Center).
I have checked and rechecked the following:
The upgrade of the client completed successfully (checked ccmsetup.log) and the version number went from 5.00.7804.1000 (SP1) to 5.00.7958.1000 (R2).
The MP health in the SCCM console is showing healthy.
The MP access URL's load correctly when run from SCCm client computers
“http://<ServerName>/sms_mp/.sms_aut?mplist” is ok
“http://<ServerName>/sms_mp/.sms_aut?mpcert” is ok
The SCCM clients are assigned to the site correctly – verified via the SCCM client and
ClientLocation.Log
ClientIDManager.Log is not showing any errors
CCMExec.log and ExecMgr.log don't show any advertisements being executed (Execmgr.log is almost empty and only has "Software ditrbution site settings policy does not yet exist on the client). If the client is not yest
registered this is expected behaviour")
The SCCM clients are Approved and NOT Blocked in SCCM
I have attempted to upgrade the SCCM client and also completely removed and reinstalled - and both have the same result (no client policy dpwnloaded)
I have also deleted the above clients completely from SCCM, Run divoery again and pushed the client to the machines again ...with the same result (SCCM client installs, assigns to correct site and then no policy downloaded)
SCCM 2012 Boundaries are configured correctly and assigned to Boundary Groups correctly
The SCCM client’s do not have the firewall enabled
Changed boundary from AD Site to Subnet to IP Address Range: Same issue exists
Uninstalled MP role and reinstalled it: same Issue exists
Tried to connect to SCCm client using 3rd party SCCM Client center tool but cannot connect
??? Not sure what else to try ???

Hi all - sorry for the late response.
We managed to resolve the issue after logging a job with Microsoft Support.
The issue was that the SCCM 2012 R2 upgrade corrupted 2 tables in the SCCM Database - leading to corrupt SCCM client policies.
I am pasting the resolution email from Microsoft below:
(NOTE: This may not be the exact sypmtoms you are experiencing so do not implement this fix assuming it will fix your problem!)
ISSUE:
- All clients are unable to download policies from the server
CAUSE:
- Bad policies in the Database
RESOLUTION:
-Issue with PADbID - Run below query against SCCM DB to verify corrupt entries:
SELECT * FROM
ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
Confirmed Bad policies entries in the SCCM database
Run below query to delete the bad policy after which we resolved the issue:
Delete FROM ResPolicyMap
WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)"

Boundaries configuration in SCCM 2012. Step-by-Step doc, link

Hello MS team,
I have a client that currently has one boundary configured in their SCCM 2007 environment that uses the Default_First-Site-Name.
This client needs to reconfigure this in SCCM 2007 as there should not be any overlapping Boundaries in SCCM 2007 and 2012.
Once all of the required boundaries are configured in the company and there are no overlapping boundaries in SCCM 2012 environment, they can then enable client
push to take advantage of this automated deployment method.
Can you please provide me with the steps for configure boundaries in SCCM and AD?
AD only has the default_First-Site-Name, therefore no multiple sites
Please, indicate step by step all the work and tasks required to be executed in AD and SCCM 2012
Franki

Boundaries are not conidered to be overlapping if they are in two seperate hierarchies.
Automatic lcient push won't work if the 2007 client is already installed.
You don't have to set anything up in AD. Just use ip ranges.
John Marcum | Microsoft MVP - Enterprise Client Management
My blog: System Center Admin | Twitter:
@SCCM_Marcum | Linkedin:
John Marcum

SCCM 2012 clients are reflecting without configure boundaries

Hi Team,
I am using SCCM 2012 SP1. I have configured boundaries as 10.101.x.x series. While checking in all system collection there system are reflecting related 10.100.x.x series IP address. Please suggest how to do troubleshoot.
Regards
Harvansh Singh

Boundaries have nothing to do with discovery (if that's what you are asking).
Torsten Meringer | http://www.mssccmfaq.de

Sccm client v4 wont install and install client v5 - SCCM 2012 R2

Hi, I am coming to the end of a SCCM 2012 R2 client deployment. I have come across 2 machines (so far)that have the SCCM 2007 (v4) client installed, and although the task is set to uninstall from the server the v5 client will not installed. iI have been
using this an as template:
http://eskonr.com/2010/11/sccm-client-installation-troubleshooting-steps-check-list/
I have ran the install seperatelty from the server (boxed ticked - Uninstall existing Config Manager client) - No Install
The ccmsetup folder is created - c$\Windows\ccmsetup, but only has 3 files, no logs folder
Other machines on site has the v5 client
Checked ping from client to server and vice versa (no firewall enabled)
Boundaries/Schema/DNS - ok
Checked all local event logs.
i know you can run the local uninstall command, but as the network is vast i would like to fix to come from the server, rather than having to do this on the client.
Any tips would be great going forward.
SCCM 2012 R2 - Windows 7 Enterprise SP1

Hi,
I ensured the account used for the install was in the local admins group.
From the ccm.log on the server, i got these erros, been googling but nothing yet:
---> ERROR: Unable to start service "ccmsetup" on machine "LCD12121", error = 1075.   SMS_CLIENT_CONFIG_MANAGER   22/10/2014 12:01:43   1460 (0x05B4)
---> Failed to install CCM Client Bootstrap component on client (1075)   SMS_CLIENT_CONFIG_MANAGER   22/10/2014 12:01:43   1460 (0x05B4)
Execute query exec [sp_CP_SetLastErrorCode] 2097153910, 1075   SMS_CLIENT_CONFIG_MANAGER   22/10/2014 12:01:43   1460 (0x05B4)
Also, is there a way to run a report on which machines dont have the sccm client/install issues?
Thanks

SCCM 2012 R2 Client only showing 2 items under Actions

I've enable AD Forest Discovery on Primary Site also checked Automatically create AD site boundaries when they are discovered and Automatically create IP address range boundaries for IP subnets when they are discovered.
I didn't change this (default) Disable AD Forest Discovery on CAS.
I am still running SCCM 2007 R3 SP2 in Production environment. Do I need to remove all the boundaries first on SCCM 2007? Before I could install SCCM 2012 R2 client?
The reason that I manually install SCCM 2012 R2 client to my test computers just want to see if the SCCM 2012 R2 client will install without any issues. Right now, there's :(
On my Client Push Installation Properties, I haven't Enable automatic site-wide push installation. I just don't want SCCM 2012 R2 client is automatically pushing it out. Should I enable this? Is there any effect?
Two nights ago, I manually deploy SCCM 2012 R2 client (right click to deploy SCCM Client) to my test Win7x64 Enterprise and Win8.1x64 Enterprise. Until this morning Actions are not fully there (it should be total 11)
SCCM 2012 R2 client (version 5.00.7958.1000) installed but SCEP 2012 is not install (I think there's a problem here) since I checked the Actions button on both of Win7x64 Enterprise and Win8.1x64 Enterprise are only showing 2 Actions:
1. Machine Policy Retrieval & Evaluation Cycle
2. User Policy Retrieval & Evaluation Cycle
I've checked on both of Win7x64 Enterprise and Win8.1x64 Enterprise logs (using CMTrace):
1. CcmExec.log -> no errors
2. LocationServices.log -> Current AD site of machine is Default-First-Site-Name
3. ClientLocation.log -> It knows my new MP (correct one)
4. ClientIDManagerStartup.log -> with errors below
ClientIDManagerStartup.log has lots of RED errors (same one):
<![LOG[RegTask: Failed to send registration request message. Error: 0x8000000a]LOG]!><time="11:26:13.695+420" date="07-03-2014" component="ClientIDManagerStartup" context="" type="3" thread="1716"
file="regtask.cpp:1297">
I am hoping someone will be able to point me to the right direcly, please. Thanks, Reza
Reza Prawirasatya

Idan,
Thanks for the info.
I have check this registry below:
Check in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Mobile Client
It's pointing to my new site code of SCCM 2012 R2 (it's not SCCM 2007 site code).
What I did wrong I deploy SCCM 2012 Client Custom Settings to a collection that I created and also Antimalware Policies to that collection as well where that collection has 0 (none members).
So I deleted and just simply pointed both SCCM 2012 Client Custom Settings and Antimalware Policies to All Systems and all my test computers (workstations & servers) have SCCM 2012 R2 client along with SCEP 2012.
I have more questions below:
What's the best way for me to approach this SCCM 2012 R2 Client push to a test computers (workstations and servers).
I have SCCM 2007 R3 SP2 is still running in Production, currently Boundaries set as IP subnet (not using AD Site, it used but I changed it 2 years ago).
Now, SCCM 2012 R2 Primary Site set Enable AD Forest Discovery with Automatically create AD & Automatically create IP address range boundaries for IP subnets.
Of course, by turning this option above, it will pick up lots of different IP subnets. Even the one our sister company (lots of different domain).
1. In SCCM 2012 R2 Boundary Groups, I set Default-First-Site-Name (AD Site), under Site Systems tab, I have also my Primary Site SCCM 2012 R2 here.
Here's the questions:
1. Do I need to add IP subnet in SCCM 2012 R2 Boundary Groups? Do I need to add let's say 10.xxx.20.xxx (IP subnet here).
2. Also, do I need to delete IP subnet in SCCM 2007 Boundaries that correspond to that IP subnet? Let's say I have 10.xxx.20.xxx (IP subnet here) and remove this one since I have added on number 1?
Reza Prawirasatya

SCCM 2012 R2 Configuration Manager Client Package - stuck "In Progress"

Hi Team; I’m having 2 issues with SCCM 2012 R2:
Issue 1: I'm having a strange issue with the default XXX00002 package - "Configuration Manager Client Package",
it will not deploy to the Secondary Site DP. The console is saying "In Progress" - below is the output from the
distmgr.log file.
~Package BDC00002 does not have a preferred sender.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.443+240><thread=6032 (0x1790)>
~CDistributionSrcSQL::UpdateAvailableVersion PackageID=BDC00002, Version=1, Status=2301
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.444+240><thread=6032 (0x1790)>
~StoredPkgVersion (1) of package BDC00002. StoredPkgVersion in database is 1.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.462+240><thread=6032 (0x1790)>
~SourceVersion (1) of package BDC00002. SourceVersion in database is 1.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.462+240><thread=6032 (0x1790)>
~Package BDC00003 does not have a preferred sender.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.443+240><thread=6092 (0x17CC)>
~CDistributionSrcSQL::UpdateAvailableVersion PackageID=BDC00003, Version=1, Status=2301
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.464+240><thread=6092 (0x17CC)>
STATMSG: ID=2301 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=BBK-SCCM-PRI.bbk2310.com SITE=PRI PID=2768 TID=6032 GMTDATE=Mon Mar 17 20:00:23.476 2014
ISTR0="Configuration Manager Client Package" ISTR1="BDC00002" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=400 AVAL0="BDC00002"
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.477+240><thread=6032 (0x1790)>
StateTable::CState::Handle - (2301:1 2014-03-17 20:00:23.476+00:00) >> (0:0 2014-02-28 16:33:45.383+00:00)
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.484+240><thread=6032 (0x1790)>
CStateMsgReporter::DeliverMessages - Queued message: TT=1401 TIDT=0 TID='8ACCAE01-5079-4FCD-A988-C1CD3004B698' SID=2301 MUF=0 PCNT=2, P1='PRI' P2='2014-03-17 20:00:23.476+00:00' P3='' P4=''
P5='' $$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.495+240><thread=6032 (0x1790)>
~StoredPkgVersion (1) of package BDC00003. StoredPkgVersion in database is 1.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.496+240><thread=6092 (0x17CC)>
~SourceVersion (1) of package BDC00003. SourceVersion in database is 1.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.497+240><thread=6092 (0x17CC)>
STATMSG: ID=2301 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=BBK-SCCM-PRI.bbk2310.com SITE=PRI PID=2768 TID=6092 GMTDATE=Mon Mar 17 20:00:23.510 2014
ISTR0="Configuration Manager Client Upgrade Package" ISTR1="BDC00003" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=400
AVAL0="BDC00003" $$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.510+240><thread=6092 (0x17CC)>
StateTable::CState::Handle - (2301:1 2014-03-17 20:00:23.510+00:00) >> (0:0 2014-02-28 16:33:45.383+00:00)
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.515+240><thread=6092 (0x17CC)>
CStateMsgReporter::DeliverMessages - Queued message: TT=1401 TIDT=0 TID='8ACCAE01-5079-4FCD-A988-C1CD3004B698' SID=2301 MUF=0 PCNT=2, P1='PRI' P2='2014-03-17 20:00:23.510+00:00' P3='' P4=''
P5='' $$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.526+240><thread=6092 (0x17CC)>
CStateMsgReporter::DeliverMessages - Created state message file: D:\Program Files\Microsoft Configuration Manager\inboxes\auth\statesys.box\incoming\1sfb1dbj.SMX
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.571+240><thread=6032 (0x1790)>
Successfully send state change notification 8ACCAE01-5079-4FCD-A988-C1CD3004B698
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.572+240><thread=6032 (0x1790)>
~Exiting package processing thread.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.574+240><thread=6032 (0x1790)>
CStateMsgReporter::DeliverMessages - Created state message file: D:\Program Files\Microsoft Configuration Manager\inboxes\auth\statesys.box\incoming\abaibh8y.SMX
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.637+240><thread=6092 (0x17CC)>
Successfully send state change notification 8ACCAE01-5079-4FCD-A988-C1CD3004B698
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.683+240><thread=6092 (0x17CC)>
~Exiting package processing thread.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:23.685+240><thread=6092 (0x17CC)>
Sleep 30 minutes...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:26.886+240><thread=2936 (0xB78)>
~Used 0 out of 3 allowed processing threads.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:27.948+240><thread=4900 (0x1324)>
~Sleep 3600 seconds...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:27.950+240><thread=4900 (0x1324)>
Sleep 30 minutes...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:31.934+240><thread=2936 (0xB78)>
~Used 0 out of 3 allowed processing threads.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:33.021+240><thread=4900 (0x1324)>
~Sleep 3600 seconds...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:33.023+240><thread=4900 (0x1324)>
~Used 0 out of 3 allowed processing threads.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:38.108+240><thread=4900 (0x1324)>
~Sleep 3600 seconds...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:00:38.111+240><thread=4900 (0x1324)>
Sleeping for 60 minutes before content cleanup task starts.~
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:06:28.094+240><thread=4968 (0x1368)>
Sleep 30 minutes...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 16:30:52.271+240><thread=2936 (0xB78)>
Sleep 30 minutes...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 17:01:10.002+240><thread=2936 (0xB78)>
~Used 0 out of 3 allowed processing threads.
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 17:01:10.977+240><thread=4900 (0x1324)>
~Sleep 3600 seconds...
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 17:01:10.979+240><thread=4900 (0x1324)>
Sleeping for 60 minutes before content cleanup task starts.~
$$<SMS_DISTRIBUTION_MANAGER><03-17-2014 17:06:55.337+240><thread=4968 (0x1368)>
Issue 2: I'm trying to deploy a couple of Packages/Applications using SCCM 2012 R2 running on Win2K8 R2 with no luck, knowing that I could install the packages
on a test VM “in the DataCenter site”, but when trying to deploy the packages to production PC “in the Office Site”,
the status is packages deployment compliance stuck at 0%
Infrastructure:
3 SCCM servers: CAS, PRI & SEC. Both CAS and PRI are in the DataCenter site, and SEC is in the Office site. The office site has several IP subnets.
Boundaries are configured through Forest Discovery “IP Ranges and AD Sites” since that the AD site should contain all the IP subnets that the AD site contains, Boundaries groups are also configured and a site reference
server is configured for each group respectively.
A OU based Collection has been configured that contains 13 PC "the collection contains the PCs that the packages should be installed.
Packages/Applications are configured correctly since that I could successfully deploy the packages to the test VM which is on the same subnet as the CAS and the PRI servers "the DataCenter subnet". The issue
is that I can't deploy the packages to production PCs in the Office subnet!
Firewall rules are configured and applied via GP, and I even turned Windows Firewall off, and still nothing! I tried to manually initiate Computer Policy download via the SCCM GUI and via a script, still no luck!
I tried configuring IP Subnet Boundaries, still no luck!!
Here are the last 2 lines in the LocationServices.log of a client PC at the Office Site:
<![LOG[MPLIST requests are throttled for 00:00:44]LOG]!><time="14:47:00.766+240" date="03-17-2014" component="LocationServices" context="" type="2" thread="5776"
file="lssecurity.cpp:4528"> <![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="14:47:00.777+240" date="03-17-2014" component="LocationServices" context="" type="1"
thread="4884" file="lsad.cpp:770">
And here are the last 4 lines in the ClientLocation.log
<![LOG[Rotating assigned management point, new management point [1] is: BBK-SCCM-PRI.bbk2310.com (7958) with capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState"
Value="0"/></Capabilities>]LOG]!><time="14:49:04.880+240" date="03-17-2014" component="ClientLocation" context="" type="1" thread="3600" file="lsad.cpp:6311">
<![LOG[Assigned MP changed from <BBK-SCCM-PRI.bbk2310.com> to <BBK-SCCM-PRI.bbk2310.com>.]LOG]!><time="14:49:04.891+240" date="03-17-2014" component="ClientLocation" context="" type="1"
thread="3600" file="lsad.cpp:1532"> <![LOG[Rotating proxy management point, new management point [1] is: BBK-SCCM-SEC.bbk2310.com (7958) with capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState"
Value="0"/></Capabilities>]LOG]!><time="14:49:05.345+240" date="03-17-2014" component="ClientLocation" context="" type="1" thread="3600" file="lsad.cpp:6374">
<![LOG[Rotating local management point, new management point [1] is: BBK-SCCM-SEC.bbk2310.com (7958) with capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>]LOG]!><time="14:49:05.786+240"
date="03-17-2014" component="ClientLocation" context="" type="1" thread="3600" file="lsad.cpp:6436">
It looks like clients in the Office Site can’t connect to the DP/MP of the Secondary Site server which is also a DP.
While on the PC that the application was installed on I see the folowing in the LocationService.log:
<![LOG[Distribution Point='http://BBK-SCCM-PRI.bbk2310.com/SMS_DP_SMSPKG$/Content_69547d2a-339f-4ac4-9523-238c79ff8a52.1', Locality='LOCAL', DPType='SERVER', Version='7958', Capabilities='<Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities>', Signature='http://BBK-SCCM-PRI.bbk2310.com/SMS_DP_SMSSIG$/Content_69547d2a-339f-4ac4-9523-238c79ff8a52.1.tar', ForestTrust='TRUE',]LOG]!><time="14:42:59.506+240"
date="03-17-2014" component="LocationServices" context="" type="1" thread="224" file="lsutils.cpp:415"> <![LOG[Calling back with locations for location request {144620BC-4BF0-4878-9554-F67D305ECCF8}]LOG]!><time="14:42:59.522+240"
date="03-17-2014" component="LocationServices" context="" type="1" thread="224" file="replylocationsendpoint.cpp:220">
Is there something wrong with the Distribution point on the Secondary Site server?
Please help…
Thanks..

Update:
I fixed the issue with the default XXX00002 package - "Configuration Manager Client Package", it will not deploy to the Secondary Site DP. I did that through "Update Distribution Points" option, and after a while the status was 100%.
However; the second issue is still unsolved...
Please help..

Help needed -- Considerations to be taken while migrating 2 different SCCM 2007 hierarchies into a single SCCM 2012 Hierarchy.

Hi, I need your help on consolidating two different SCCM 2007 infrastructures into a single SCCM 2012.
We have two different SCCM 2007 Hierarchies, Lets say 123 and ABC
About 123 SCCM 2007 -- On 123 Hierarchy, we have already started migrating clients from SCCM 2007 to SCCM 2012.
About ABC SCCM 2007 -- On ABC Hierarchy, This is still running on SCCM 2007 (This hierarchy only be started migrating once we
are completed migration on 123)
Out of which, we have few co located offices across the globe for both 123 and ABC. Now we are decided to replace the hardware on all these locations by removing the existing two servers (one for 123 and other for ABC,with two different Forest and domains),
and consolidate them into a single server.how can we plan/design to ensure that we covering both hierarchies SCCM clients for the operations.
===================Below are some possibilities we are discussing on================================
1.Is there any way on "System management" in AD to enable access either in 123's domain or ABC's domain.
2.Since we are planning to replace the hardware with Server 2012 R2 with Hyper-V, Create two instances and migrate 123 hierarchy to SCCM 2012 and other instance will serve ABC until we start the migration on this.
========================================================================================
correct me, If i am in wrong direction. Please suggest me the best of doing it. Thanks in advance.
srkr

1) In CM 2012 you can publish data to System Management in other forest but you have to configure the permissions manually and create the forest object in the ConfigMgr console.
2) CM07 and CM2012 instances can co-exist as long as you don't create boundary groups in CM12 for site assignment (that will cause overlapping boundaries if you still have boundaries in Cm07)
Kent Agerlund | My blogs: blog.coretech.dk and
SCUG.DK | Twitter: @Agerlund | Linkedin:
Kent Agerlund

Client Push Not Working SCCM 2012

I am new to SCCM and have a test rig SCCM 2012 for testing, problem is the client push fails every time and I am at a loss to explain why. I have tried removing and reading the DP, FSP and MP roles (Both these are on the SCCM core server) I have run IIS
reset, removed all AD configured Boundaries and Groups in favor of IP range but I keep getting the same errors. Any advice here would be greatly appreciated... Below is this mornings logs highlighting the failure.
<![LOG[==========[ ccmsetup started in process 5764 ]==========]LOG]!><time="11:31:48.304-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="ccmsetup.cpp:9437">
<![LOG[Running on platform X64]LOG]!><time="11:31:48.305-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="util.cpp:1837">
<![LOG[Updated security on object C:\Windows\ccmsetup\cache\.]LOG]!><time="11:31:48.305-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="7628" file="ccmsetup.cpp:9281">
<![LOG[Launch from folder C:\Windows\ccmsetup\]LOG]!><time="11:31:48.306-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="ccmsetup.cpp:721">
<![LOG[CcmSetup version: 5.0.7958.1000]LOG]!><time="11:31:48.306-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="7628" file="ccmsetup.cpp:727">
<![LOG[In ServiceMain]LOG]!><time="11:31:48.308-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:3365">
<![LOG[Running on 'Microsoft Windows Server 2012 Standard' (6.2.9200). Service Pack (0.0). SuiteMask = 272. Product Type = 18]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="util.cpp:1919">
<![LOG[Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="ccmsetup.cpp:3590">
<![LOG[Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context=""
type="1" thread="6436" file="ccmsetup.cpp:3775">
<![LOG[Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="11:31:48.366-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:3776">
<![LOG[SslState value: 224]LOG]!><time="11:31:48.368-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:4425">
<![LOG[CCMHTTPPORT: 80]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8617">
<![LOG[CCMHTTPSPORT: 443]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8632">
<![LOG[CCMHTTPSSTATE: 224]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8650">
<![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8668">
<![LOG[FSP: VKYV-HV01]LOG]!><time="11:31:48.369-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8720">
<![LOG[CCMFIRSTCERT: 1]LOG]!><time="11:31:48.370-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:8778">
<![LOG[Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcf]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4539">
<![LOG[Retry time: 10 minute(s)]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4540">
<![LOG[MSI log file: C:\Windows\ccmsetup\Logs\client.msi.log]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4541">
<![LOG[MSI properties: INSTALL="ALL" SMSSITECODE="VSI" FSP="VKYV-HV01" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="224" CCMFIRSTCERT="1"]LOG]!><time="11:31:48.371-120"
date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4542">
<![LOG[Source List:]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4550">
<![LOG[ \\VKYV-HV01.VKYV.LAN\SMSClient]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4557">
<![LOG[ \\VKYV-HV01.VKYV.LAN\SMSClient]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4566">
<![LOG[MPs:]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:4569">
<![LOG[ VKYV-HV01.VKYV.LAN]LOG]!><time="11:31:48.371-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:4584">
<![LOG[No version of the client is currently detected.]LOG]!><time="11:31:48.374-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2748">
<![LOG[Updated security on object C:\Windows\ccmsetup\.]LOG]!><time="11:31:48.750-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:9281">
<![LOG[Sending Fallback Status Point message to 'VKYV-HV01', STATEID='100'.]LOG]!><time="11:31:48.750-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:9756">
<![LOG[Failed to get client version for sending messages to FSP. Error 0x8004100e]LOG]!><time="11:31:48.752-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436" file="ccmsetup.cpp:9838">
<![LOG[Params to send FSP message '5.0.7958.1000 Deployment ']LOG]!><time="11:31:48.752-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:9887">
<![LOG[State message with TopicType 800 and TopicId {037AE2A1-3C8B-482A-A180-04392D0312BA} has been sent to the FSP]LOG]!><time="11:31:49.020-120" date="01-12-2014" component="FSPStateMessage" context="" type="1"
thread="6436" file="fsputillib.cpp:752">
<![LOG[Running as user "SYSTEM"]LOG]!><time="11:31:49.058-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:1995">
<![LOG[Detected 44815 MB free disk space on system drive.]LOG]!><time="11:31:49.059-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="util.cpp:628">
<![LOG[Checking Write Filter Status.]LOG]!><time="11:31:49.059-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2024">
<![LOG[This is not a supported write filter device. We are not in a write filter maintenance mode.]LOG]!><time="11:31:49.059-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436"
file="ccmsetup.cpp:2051">
<![LOG[Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=VSI))']LOG]!><time="11:31:49.179-120" date="01-12-2014" component="ccmsetup" context="" type="0"
thread="6436" file="lsad.cpp:656">
<![LOG[OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>224</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers></CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert>308202EF308201D7A0030201020210518E5B64E54890884666F9411DA2CCB3300D06092A864886F70D01010B05003016311430120603550403130B53697465205365727665723020170D3133313032393130343732365A180F32313133313030363130343732365A3016311430120603550403130B536974652053657276657230820122300D06092A864886F70D01010105000382010F003082010A0282010100B999635F3FFE2F0E7DB66B36407C0ED4FB7DC23A8CD42078325E08E7E553EC2AD1D35A5758268CA497A8023B9F056089BA068ADD84ABDDF74E00B1C402308F287387A8FFA3DBCBFDAC81F8A7F32C959B7CCDCBF5FC0D87434A2907C074675CAA4EA6963D2956EAD43957A831B746E4E5D00C66AAC1F2FE5F71D26D54909EEA0883D780EF46111B124C9C77E3F9D767D36972B9420FEFE291A2A377D958A27C1B24F72E3A870498CF44D8C854214C38F1A50C5CBB3924215F037B0256ACD78B5E32FDFD9BF9760329F523777C16234B560C808F201605774B77B54833D0EA918C44106FF72409876A6D1D4FE75EC9F3A349578577B96BAC62E39D102ACBB401230203010001A3373035301D0603551D11041630148212564B59562D485630312E564B59562E4C414E30140603551D25040D300B06092B060104018237650B300D06092A864886F70D01010B05000382010100B6B5CDA1A6AA6F712365113F0A81829B596081DB9AF07D5F10DEB0103F158460E9C17B3E1A201A81B9890741F7E2BF5B564058FED25FC724DD4AC948BC9462B1B6A7991AFD159C673B01CE019ABE0A0E0DDD9881AAC751427751C22A43754295DF3F4514EE1BDAD5EF06EE1010E294113B4BB00EB2DF555EE790224E40905E5183E77FF0D87D5EBD98A819DAAE265BA4CD81BA444C226B8B04EF4E80E62ECBF5F3DEDFD2F91822919DBDE529DB043FFAF424A84A0F85A8D0A45F4451F9F5DA48DCADE6603BF106128A36C20F2C52AD69A562BA7834497792D819EAD45DF18BFC6AF1AC60111AC34CF0BF48D9B037064BF41E90E910F36AEAB50C1697C18E800D</SiteSigningCert></SecurityConfiguration><RootSiteCode>VSI</RootSiteCode><CCM>
<CommandLine>SMSSITECODE=VSI FSP=VKYV-HV01</CommandLine> </CCM><FSP> <FSPServer>VKYV-HV01.VKYV.LAN</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0"
/></Capabilities><Domain Value="VKYV.LAN" /><Forest Value="VKYV.LAN" /></ClientOperationalSettings>']LOG]!><time="11:31:49.228-120" date="01-12-2014" component="ccmsetup" context=""
type="0" thread="6436" file="lsadcache.cpp:236">
<![LOG[Unable to open Registry key Software\Microsoft\CCM. Return Code [80070002]. Client HTTPS state is Unknown.]LOG]!><time="11:31:49.229-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="ccmutillib.cpp:373">
<![LOG[The MP name retrieved is 'VKYV-HV01.VKYV.LAN' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>']LOG]!><time="11:31:49.229-120"
date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="lsadcache.cpp:334">
<![LOG[MP 'VKYV-HV01.VKYV.LAN' is compatible]LOG]!><time="11:31:49.229-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="lsadcache.cpp:339">
<![LOG[Retrieved 1 MP records from AD for site 'VSI']LOG]!><time="11:31:49.229-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="lsadcache.cpp:287">
<![LOG[Retrived site version '5.00.7958.1000' from AD for site 'VSI']LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="siteinfo.cpp:575">
<![LOG[SiteCode: VSI]LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2076">
<![LOG[SiteVersion: 5.00.7958.1000]LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:2077">
<![LOG[Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again.]LOG]!><time="11:31:49.231-120" date="01-12-2014" component="ccmsetup" context="" type="1"
thread="6436" file="ccmsetup.cpp:2111">
<![LOG[Only one MP VKYV-HV01.VKYV.LAN is specified. Use it.]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:10080">
<![LOG[Searching for DP locations from MP(s)...]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:11018">
<![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="LocationServices" context="" type="1" thread="6436" file="lsad.cpp:770">
<![LOG[Local Machine is joined to an AD domain]LOG]!><time="11:31:49.232-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="lsad.cpp:714">
<![LOG[Current AD forest name is VKYV.LAN, domain name is VKYV.LAN]LOG]!><time="11:31:49.235-120" date="01-12-2014" component="LocationServices" context="" type="1" thread="6436" file="lsad.cpp:842">
<![LOG[DhcpGetOriginalSubnetMask entry point is supported.]LOG]!><time="11:31:49.237-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="ccmiputil.cpp:117">
<![LOG[Begin checking Alternate Network Configuration]LOG]!><time="11:31:49.237-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="ccmiputil.cpp:1095">
<![LOG[Finished checking Alternate Network Configuration]LOG]!><time="11:31:49.239-120" date="01-12-2014" component="LocationServices" context="" type="0" thread="6436" file="ccmiputil.cpp:1172">
<![LOG[Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="VSI"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0"
UseInternetDP="0">
<ADSite Name="Default-First-Site-Name"/>
<Forest Name="VKYV.LAN"/>
<Domain Name="VKYV.LAN"/>
<IPAddresses>
<IPAddress SubnetAddress="10.6.2.0" Address="10.6.2.2"/>
</IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
']LOG]!><time="11:31:49.256-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="siteinfo.cpp:96">
<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{CC48E819-7755-4650-83AC-8BC823C06C8C}</ID><SourceHost>VKYV-HV01</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:VKYV-HV01:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>VKYV-HV01.VKYV.LAN</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-01-12T09:31:49Z</SentTime><Body
Type="ByteRange" Offset="0" Length="1096"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="11:31:49.256-120" date="01-12-2014"
component="ccmsetup" context="" type="0" thread="6436" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'HTTP://VKYV-HV01.VKYV.LAN/ccm_system/request']LOG]!><time="11:31:49.257-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="httphelper.cpp:807">
<![LOG[Failed to receive ccm message response. Status code = 403]LOG]!><time="11:31:49.434-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436" file="httphelper.cpp:1694">
<![LOG[GetDPLocations failed with error 0x80004005]LOG]!><time="11:31:49.435-120" date="01-12-2014" component="ccmsetup" context="" type="3" thread="6436" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'VKYV-HV01.VKYV.LAN'. Error 0x80004005]LOG]!><time="11:31:49.435-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436"
file="ccmsetup.cpp:11261">
<![LOG[Sending Fallback Status Point message to 'VKYV-HV01', STATEID='101'.]LOG]!><time="11:31:49.435-120" date="01-12-2014" component="ccmsetup" context="" type="1" thread="6436" file="ccmsetup.cpp:9756">
<![LOG[Failed to get client version for sending messages to FSP. Error 0x8004100e]LOG]!><time="11:31:49.437-120" date="01-12-2014" component="ccmsetup" context="" type="2" thread="6436" file="ccmsetup.cpp:9838">
<![LOG[Params to send FSP message '5.0.7958.1000 Deployment ']LOG]!><time="11:31:49.437-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:9887">
<![LOG[State message with TopicType 800 and TopicId {1D445639-95B1-4EC5-A65F-FC7A721F8061} has been sent to the FSP]LOG]!><time="11:31:49.455-120" date="01-12-2014" component="FSPStateMessage" context="" type="1"
thread="6436" file="fsputillib.cpp:752">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="11:31:49.455-120" date="01-12-2014" component="ccmsetup" context="" type="0" thread="6436" file="ccmsetup.cpp:8835">

Does you MP/DP use HTTP or HTTPS? I recommend to start with HTTP and when you have successfully installed a few clients, you can switch to HTTPS if desired. HTTPS based communication requires more steps e.g. client certificates.
Have you extended AD schema and do you see objects in \System\System Management container in AD?
Also, you might have DNS name resolution problem or the firewall is blocking the traffic from the client to MP.
The client is having troubles to successfully talk with MP:
Failed to get DP locations as the expected version from MP 'VKYV-HV01.VKYV.LAN'. Error 0x80004005
Panu

Can I use SCCM 2007 to deploy SCCM 2012 Agent

I was reading the scenarios for deploying the SCCM 2012 agent here
http://technet.microsoft.com/en-us/library/gg682132.aspx
I have been planning to deploy the 2012 agent using an SCCM 2007 deployment package. I am not migrating any data/packages/collections/anything from SCCM 2007.
I am looking for a sane way to deploy 2000ish clients a day for 2 weeks and be done.
I figure they are all SCCM 2007 clients so lets deploy 2012 agent using SCCM 2007.
I read the following in the link above and it sounds like the way I want to go – use SCCM 2007 software distribution…
Upgrade installation by using application management
Upgrades clients to a newer version by using Configuration Manager application management. You can also use Configuration Manager 2007 software
distribution to upgrade clients to System Center 2012 Configuration Manager.
Then later in the same document there is this…
How to Upgrade Configuration Manager Clients by Using a Package and Program
You can use Configuration Manager to create and deploy a package and program that upgrades the client software for selected computers in your hierarchy. A package definition file
is supplied with Configuration Manager that populates the package properties with typically used values. You can customize the behavior of the client installation by specifying additional command line properties.
You cannot upgrade Configuration Manager 2007 clients to System Center 2012 Configuration Manager by using this method.
In this scenario, use automatic client upgrade, which automatically creates and deploys a package that contains the latest version of the client.
What???!?? There is no Automatic client upgrade feature in 2007 – so how does that even make sense? In one section, it says I can deploy the 2012 Agent using SCCM 2007 software distribution, and then later in the same document, it
says I can't. I am probably misunderstanding somthing.
Is it possible to make a package/program in SCCM 2007 that will make targeted clients upgrade to Agent 2012 and join the new SCCM 2012 Site?

I tested this (deploying 2012 agent using existing 2007 SCCM infrastructure) with a few test systems at my desk and it seems to work pretty smoothly. I made a package to deploy SCCM 2012 SP1 and added it to my SCCM 2007 Site. Then I deployed
the 2012 agent from 2007 and it worked great. If it works this well in production, I will be able to migrate all of my clients in less than a weeks time.
I have not published the 2012 site information in AD - and I don't plan to. We would have some overlapping site boundaries - and in 2012 it seems its unnecessary in a single site hierarchy. I AM planning to use boundaries to assign
DPs, but thankfully site and DP boundaries have been separated. It works great to just specify the site in everything and not worry about auto discovery. My clients don't move among sites since I only have one large site.
Sorry that I somehow posted this same question twice, and thanks for cleaning that up.
In my installation, I just called ccmsetup.exe with the following command line...
/mp:myMP.mydomain.com CCMLOGMAXHISTORY=5 CCMLOGMAXSIZE=1000000 SMSCACHEFLAGS=PERCENTDISKSPACE;NTFSONLY SMSCACHESIZE=10 SMSMP=myMP.mydomain.com SMSSITECODE=CCM
I am not sure that I need to specify the MP twice, but it is working to do so. I'm also not sure whether the log and cache flags will be honored since there are existing settings from SCCM2007 agent. I think that the 2012 install will not change
these settings upon installation, but it does not appear to hurt the process to include them just in case it does work.

SCCM 2007 Migration to SCCM 2012

Hello,
I read http://social.technet.microsoft.com/Forums/en-US/58ba35e5-d84e-4741-8089-624f5269a2ca/sccm-2012-design-consideration-advice?forum=configmanagergeneral&prof=required with the following notes:
Secondary vs. DP is a subjective call based on two factors: client count and available bandwidth. More clients and/or less bandwidths means secondary site, less clients and/or more bandwidth means DP. Both use a server OS so there's really no cost difference, just some added complexity for a secondary site. Without knowing the bandwidth, no way for me to be able to say one way or the other.
As for IBCM, correct, it's no a primary site server, it's simply a site system that typically hosts an MP, DP, and SUP. The App Catalog Website Point is also applicable.
Are you planning on managing legacy mobile devices or Mac OSX? If not, the Enrollment Proxy Point is not needed -- it's not applicable to IBCM anyway to my knowledge.
Also, the FSP must be on a separate site system so that clients can communicate with it via HTTP.
I have for now two sites:
- 25,000 Desktops on one site
- 1,500 Servers on the second site
in SCCM 2007 I had three sites: One Parent doing the reporting and two child sites handling the inventory, distribution, etc... (No SUP do far)
I have on each child sites 1 DP.
What should be changed for SCCM 2012?
What is "More Clients" or "Less Clients" ?
"More Bandwidth" or "Less Bandwidth"?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Hello Dom,
If you have Two Primary servers you may need to plan for a CAS (Central administration site), in SCCM 2012 when you have more than one primary server you need a CAS to connect them. But remember the CAS does not
process any client data, DPs nor MPs (hardware nor software inventory), and bear in mind that a primary stand-alone can support up to 100,000 clients, and in SCCM 2012 the big idea is to simplify the hierarchy. So if you have a primary site you can manage
a lot of clients, and you can separate them in your case in boundaries, boundaries in 2012 do two things: Site assignment and content lookup, but they only work with boundary groups, in which you set the limits in the boundary, and latter associate it with
a boundary group.
You can then just have a primary server and remote DPs, and decide how the clients will look for content in the DPs with the boundaries and boundary groups. The bandwidth needs to be really important about sending
packages between sites, or if the boundaries are not configured properly the clients can end up looking for content where it should not. Also don’t forget about fallback packages and content, because DPs and packages can be set as fallback, so if clients
cannot find in a local DP they will search those packages.
Below a few references that may help you with your migration.
Any more questions, please let me know.
References
==========
Planning for Configuration Manager Sites and Hierarchy
http://technet.microsoft.com/en-us/library/gg682075.aspx
Planning for Sites and Hierarchies in Configuration Manager
http://technet.microsoft.com/en-us/library/gg712681.aspx
Migrating Hierarchies in System Center 2012 Configuration Manager
http://technet.microsoft.com/en-us/library/gg682006.aspx
VIDEOS
========
Configuration Manager 2012: Plan, Deploy, and Migrate from Configuration Manager 2007
http://technet.microsoft.com/en-us/video/configuration-manager-2012-plan-deploy-and-migrate-from-configuration-manager-2007.aspx
Microsoft System Center Configuration Manager 2012: Plan, Deploy, and Migrate from Configuration Manager 2007 to 2012
http://channel9.msdn.com/Events/TechEd/Europe/2012/MGT313
Cheers,
Renato S. Pacheco

SCCM 2012 - Network requirements for Client communication to primary in a Cross Forest Environment

Hello, I have been trying to get some definitive answers on what network traffic is required between a client and a primary site versus a secondary in a cross forest scenario.
Here is the scenario:
Company A has an existing SCCM 2012 primary Site. Company B (Separate Forest) has now been brought in. One subnet on each side can route to each other and using that one subnet a two way forest
trust has been setup. But the remote offices have IP address overlaps between companies. At some point in the future all assets on company B will be re-IP and brought over to Company A domain. But in the interim it would be nice to get SCCM cross forest clients
working. Upgrading to a CAS model with two Primaries would not be preferred here as this is a temporary solution.
My questions are as follows.
If a secondary site is deployed into Company B Forest/Network. I have seen people online elude to that clients will still need to communicate to the Primary located at Company A, even though they
are assigned to a secondary on Company B’s network. Is this true? Is there any workarounds for this? Is a NAT back to the primary acceptable, or is reverse lookup required?
Will the Primary need to communicate directly to the clients in Company B? If this is in fact a requirement, then this would be a show stopper. But if its only needed for things like client pushes,
then we could work around it.
Thanks

"But the remote offices have IP address overlaps between companies"
Technically, this is unsupported because clients, depending upon your boundaries, will not be able to find a local DP since they use IP addresses for this. The only way to work around this is to use AD Site boundaries.
"though they are assigned to a secondary"
Clients are *never* assigned to a secondary site -- that's not what secondary sites are for. Yes, clients require communication with an MP in the primary site where they are assigned. There is no way to change this or work-around this except to put
an MP from the primary site closer to those clients and use the new MP affinity option in R2 CU3.
Reverse lookups are only used to verify names by applications that wish to have this type of functionality (which are very few in number) and have nothing to do with true network traffic. NATing is an issue for the reason I gave above -- DP location.
Remote control, client push, and WoL won't work either because there is no way for the traffic to reach the destination behind the NAT.
All client *agent* communication in ConfigMgr is client initiated in ConfigMgr (remote control, client push, and WoL -- as just mentioned -- are sort of exceptions to this but they don't really involve the client *agent*.)
Jason | http://blog.configmgrftw.com | @jasonsandys

SCCM 2012 Secondary site Client Communication for SUP

Hi,
We have an SCCM 2012 Setup and here is the design CAS-->Primary-->Secondary site servers.
SUP is configured for Secondary site too. Boundaries are defined with IP Address Range and is proper.
Some clients are comminicating to Secondary site for updates. Downloading successfully and installing the software.
But some of the clients are communicating to primary site for updates and retain with the status "Downloading update"
I have checked the locationservices.log and it is fluctuating between Primary and secondary MP.
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:35:59 AM 768 (0x0300)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
1 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
I have also checed "DataTransferService.log" and found more errors.
Error retrieving manifest (0x800704cf). Will attempt retry 7 in 1920 seconds. DataTransferService 4/5/2013 11:51:59 AM 5576 (0x15C8)
DTSJob {141CB5AE-8EF2-464D-8D8C-68B868EE7F7B} in state 'DownloadingManifest'. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Failed to send request to /SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4 at host xxxxxxxx.xxxxxxx.com, error 0x2efe DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
[CCMHTTP] ERROR: URL=https://xxxxxxxx.xxxxxxx.com:443/SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4, Port=443, Options=192, Code=12030, Text=ERROR_WINHTTP_CONNECTION_ERROR DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Raising event:
instance of CCM_CcmHttp_Status
ClientID = "GUID:0DA907D5-1709-4B10-B627-61E289FD7149";
DateTime = "20130405062159.643000+000";
HostName = "xxxxxxxx.xxxxxxx.com";
HRESULT = "0x80072efe";
ProcessID = 4260;
StatusCode = 600;
ThreadID = 4200;
DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Successfully sent location services HTTPS failure message. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Error sending DAV request. HTTP code 600, status '' DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
GetDirectoryList_HTTP mapping original error 0x80072efe to 0x800704cf. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
GetDirectoryList_HTTP('https://xxxxxxxx.xxxxxxx.com:443/SMS_DP_SMSPKG$/1fd86ee1-ece0-41ae-a2b8-5a2b305746d4') failed with code 0x800704cf. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
Error retrieving manifest (0x800704cf). Will attempt retry 7 in 1920 seconds. DataTransferService 4/5/2013 11:51:59 AM 4200 (0x1068)
my query is how some of the clients are communicating primary site server for updates even though the boundary details are properly configured and Secondary site is configured with sup. Also need to know (as per the log "DataTransferService.log")how
come the clients are communicating SSL port for updates. Plz help in resolving the issue.

Hi Kent,
Thanks for the reply.
Primary and secondary sites are connected over WAN and we have around 2000 clients which are reporting to Secondary site.
Considering the WAN bandwidth utiliztaion and number of clients on secondary site we have configured the SUP role.
Not all the clients are with the above error message around 40%-50% of the clients are with above stated error message.
Plz let me know what is the error message indicates and do we need to reffer any other logs for indepth analysis.
Locationservices.log is with fluctuating connectivity
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:35:59 AM 768 (0x0300)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
1 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 4200 (0x1068)
Executing Task LSSiteRoleCycleTask LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
2 proxy MP errors in the last 10 minutes, threshold is 5. LocationServices 4/5/2013 11:51:59 AM 5648 (0x1610)
how come the clients are communicating SSL port for updates. Plz help in resolving the issue.

SCCM 2012 - Install WSUS Off Box SQL

Hi all,
installed SCCM 2012 R2 CAS on a 2012 server. The SQL is off box on a server cluster. I've installed WSUS through the 'Add Roles and Features'. I configured it to have local storage for the content and a remote DB instance
(called SQL1 on our cluster). All this worked well and the install completed as expected. I checked the SQL cluster and the "SUSDB" database was created ok.
As a final step, i went to Tools in Server Manager and launched Windows Server Update Services. This brought up the 'Complete WSUS Installation' dialogue box. I entered the exact same DB info as i had done when completing
the initial install of WSUS:
Yet when i hit 'run' the following message returns:
The relevant bit of logging is shown here:
2015-01-14 16:58:42 Starting service W3SVC
2015-01-14 16:58:42 Configuring IIS...
2015-01-14 16:58:42 Start: ConfigureWebsite
2015-01-14 16:58:42 System.Runtime.InteropServices.COMException (0x80070422): The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
So i guess i have two question;
1] is this Post-installation failure something i need to fix? (I presume it is)
2] If i do need to fix this to get sccm running properly, does anyone have any suggestions as to where i should start?
Thanks

(for three forests which have no trust relationships).
That's not a valid technical reason to have multiple primary sites at all. ConfigMgr does not care about, use, or rely on domain or forest boundaries or client membership in any way for client management. Using multiple primary sites and a CAS will
significantly increase complexity and latency, will add additional points of failure, and will increase overall operational costs.
Concur with Jason here. CAS not needed. You can add in untrusted forests to the Configmgr Console so log as you have an account with permissions in the destination forest, extend the schema, create the system management container and open up any firewall
ports that are need for communication from site server to dc.
Neil Peterson has a great set of blogs on how to achieve this
http://blogs.technet.com/b/neilp/archive/2012/08/20/cross-forest-support-in-system-center-2012-configuration-manager-part-1.aspx
and ports are listed in this TechNet article under site server -- > Domain Controller. Ensure your RPC ports match the OS of the DC.
http://technet.microsoft.com/en-gb/library/hh427328.aspx
Final agreement with Jason - push to get that SQL local.
Cheers
Paul | sccmentor.wordpress.com

Remote WSUS integration with SCCM 2012

Hi,
We are currently having WSUS already in place for Patching , but not used at all its just installed.
can remote WSUS be integrated with SCCM 2012 server which is on different server ? what is the best practice ? is it to have WSUS on same server as Primary server?
or I decommission it and install a new WSUS on same server as SCCM server.
what steps have to be taken care if remote WSUS is integrated ? any documents or steps to be taken care .
Thanks in Advance

When you install SUPs, they automatically configure the underlying WSUS instance to sync from an upstream server based upon your ConfigMgr hierarchy.
A couple of notes here though:
- You generally shouldn't use an existing instance of WSUS for ConfigMgr. Once integrated into ConfigMgr, WSUS should no longer manage approvals, update binary downloads, or update binary distribution as these are all handled by ConfigMgr separate from WSUS.
Using an existing WSUS instance where this was the case can be problematic at best and will cause unexpected behavior and results.
- Clients do not choose SUPs based upon boundaries or location so using a remote SUP is typically not beneficial and in many cases will cause additional network load. The exception to this is if the SUP is within a secondary site.
Jason | http://blog.configmgrftw.com | @jasonsandys

SCCM 2012 boundaries

Similar Messages

Maybe you are looking for