SCCM 2012 client push occurs from site server or from distribution point?

I would like to set up client push in SCCM 2012 and I have a remote site with about 80 workstations that I would like to deploy the clients to using client push, but this remote site is VERY slow, as in less than 3Mbps slow. There is a remote DP located
at this site and I wanted to know if the remote workstations will be hammering my Site Server across the WAN (or MP I guess since the MP role is i installed on the Site Server) to request the client installation, or do the clients just request the client from
the Site Server or MP and then the client downloads to the remote DP and then the workstations install the SCCM 2012 client from the local DP at the remote site?
I just do NOT want the WAN link to become overwhelmed with workstation requests to install the client and have the Site Server have to respond to each and every workstation and download the SCCM 2012 client to each system over this slow WAN link. 
How does the client push process actually work?
Thank you

The initial files will come from the primary site server. The rest (the biggest part) will come of the distribution point. See for a good read (even though it's more about secondary sites), this post of Jason:
http://blog.configmgrftw.com/secondary-sites-and-boundary-groups/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Similar Messages

  • Is there a way to avoid having a content library on a site server when the Distribution Point role is not installed on that server (disk cost issue)?

    Hello,
    I don't think it is possible, but my goal is to start a discussion about content libraries and maybe suggest something for a future release or version of Configuration Manager.
    Actually, based on Configuration Manager Technet documentation, Configuration Manager creates a content library on each site server and on each distribution point.
    Often, when designing the architecture, people will offload the distribution point role from the site server to an external server (and add the role to other servers too for redundancy). They could also do the same for the Management Point role, but this
    is not related to content library. The idea is to save the site server from having to deal with clients for software distribution (applications, software updates, OS, etc.), this is especially true for organizations having a large number of clients and/or
    primary site servers involved in a hierarchy. Doing so will allow more resources on the site server to deal with the database and also replication in the case of a hierarchy.
    When doing that, you still have to maintain a content library on the site server and the thing is this library will usually become huge, especially for organizations having more than 1000 applications (add also OS images to this). Will the content library
    on the site server become as huge as the one for a distribution point having a copy of all content? I guess the answer is yes.
    I know that Pull distribution points will help offloading the task from the site server to distribute content to distribution points, but, correct me if I'm wrong, you still have to maintain a content library on the site server when using them, and they
    will not make the content library smaller on the site server. Also, I don't like the fact that you lose the rate limits feature with Pull DPs, but this is another story.
    Storage cost is high and in this scenario, it hurts to have to pay this cost for a content library not used by the clients, but only to distribute content to DPs.
    Correct me if I'm wrong, but the key component here is Distribution Manager on the site server; this is the one which has to maintain a content library to do its job.
    It would be nice if we could have a way to elect a specific distribution point (not on the site server) as the Distribution Manager for a site, that main DP would hold a copy of all content by default, but would be used to distribute content to other DPs
    and avoid the content library on the site server. Said differently, the Distribution Manager component would become a site system role that could be transferred outside the site server.
    Tnx for comments, answers or suggestions.
    Patrick

    There is no way to avoid that the contentlib will be placed on the site server.
    I don‘t agree that storage cost is high. It might be true for fast storage, but that‘s not needed for it.
    Torsten Meringer | http://www.mssccmfaq.de

  • Cross-forest SCCM 2012 client push

    Hi all,
    Hoping that you might be able to send me in the right direction either by pointing me at some existing documentation or sharing your insights.
    First, we’ve got an SCCM 2012 installation running fairly well in a domain (let’s call it A), doing things like Forefront and Software Updates.  Second, I’ve got another domain (B).  There is a two-way trust between these domains.
    We’re able to run a discovery on domain B, and show clients in SCCM, but we are not able to push the client to machines in Domain B.
    We’ve added and have succeeded in publishing domain A’s SCCM management points into domain B’s AD.
    So far… so good, but… now there are two scenarios:
    1)  When the SCCM site is configured to use PKI client certificate authentication, domain B clients cannot access resources on the domain A management point.
    We’ve tried trusting Domain B’s certificate authority by importing in the CA root certificate into the Domain A management point server (local machine) certificate store for Trusted Certificate Authorities, but that doesn’t seem to work.
    The following error is seen in the ccmsetup log:
    Failed to get DP loations as the expected version from MP “HTTPS://servername.domain.local’. Error 0x80072f8f (I’ve the machine name)
    2)  When SCCM is *not* configured to use client certs, it looks like the clients try to hit the MP using a UNC path that does not exist on the MP.  The error shows:
    Source \\servername.domain.local\SMSClient is inaccessible (67)
    The client *can* connect to the server using the UNC, however, the correct path to this server would be,
    \\servername.domain.local\SMS_Site1\Client …
    In the absence—or inability to find—documentation on this subject, we are pretty much guessing here on how to do this stuff.
    The preference would be to get scenario 1 working so that domain B clients can access the MP, using client certs; however, if that’s not possible, we’d like to get scenario B working.
    Thanks in advance for your help.
    Thanks,
    Kim

    Hi there,
    A short note on this:
    In fiddling around more, I came up with a workaround.  In short, I turned of the certificate authentication requirement, which (as stated above) changes the client behavior to use a UNC install path that did not exist.  So I created a share with
    the client files in it and granted everyone read access to it on the share and NTFS levels.
    I am near sure that this is not the best way to do things, but I did get client push to work.
    The problem now is that these clients are not showing up as having clients in the SCCM Management console.
    Any further direction or advice on the proper way to get push install working in the environment described would be most appreciated.
    Best,
    Kim

  • SCCM 2012 Client Push Not Working

    Hello,
    The issue I'm having seems to be with getting the client installed on our Windows 7 64bit PC environment. 
    Once the client push request is sent, the client PC shows the "ccmsetup.exe *32" process running when I open task manager and look at the processes running, however after it finishes nothing is installed. 
    From the SCCM server I can access the
    \\CLIENTPC\ADMIN$ share, so I’m sure permissions are fine. 
    I'm very new to getting this configured and I'm not sure why it would go this far but never actually install. 
    Any help in the right direction would be greatly appreciated. 
    Here is a copy of the ccmsetup.log from the client if it might help:
    <IPAddress SubnetAddress="172.XXX.XXX.0" Address="172.XXX.XXX.6"/>
        </IPAddresses>
      </ClientLocationInfo>
    </ContentLocationRequest>
    ']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="0" thread="4584" file="siteinfo.cpp:96">
    <![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{D3D8AA78-3B63-4E8E-92FD-43064FD1B1B3}</ID><SourceHost>CLIENTPC</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:CLIENTPC:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SCCMServer01.mydomain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-09-27T02:21:45Z</SentTime><Body
    Type="ByteRange" Offset="0" Length="1082"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="22:21:45.792+240" date="09-26-2014"
    component="ccmsetup" context="" type="0" thread="4584" file="siteinfo.cpp:177">
    <![LOG[CCM_POST 'HTTPS://SCCMServer01.mydomain.com/ccm_system/request']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="httphelper.cpp:807">
    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3833">
    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3992">
    <![LOG[Begin to select client certificate]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4073">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context=""
    type="0" thread="4584" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="ccmsetup.cpp:6025">
    <![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SCCMServer01.mydomain.com/ccm_system/request']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3"
    thread="4584" file="httphelper.cpp:947">
    <![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="siteinfo.cpp:532">
    <![LOG[Failed to get DP locations as the expected version from MP 'HTTPS://SCCMServer01.mydomain.com'. Error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context=""
    type="2" thread="4584" file="ccmsetup.cpp:10926">
    <![LOG[Failed to find DP locations from MP 'HTTPS://SCCMServer01.mydomain.com' with error 0x87d00280, status code 200. Check next MP.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context=""
    type="2" thread="4584" file="ccmsetup.cpp:10782">
    <![LOG[Only one MP HTTPS://SCCMServer01.mydomain.com is specified. Use it.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmsetup.cpp:9745">
    <![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="ccmsetup.cpp:10811">
    <![LOG[GET 'HTTPS://SCCMServer01.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="httphelper.cpp:807">
    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3833">
    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:3992">
    <![LOG[Begin to select client certificate]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4073">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context=""
    type="0" thread="4584" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="4584" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="ccmsetup.cpp:6025">
    <![LOG[GetHttpRequestObjects failed for verb: 'GET', url: 'HTTPS://SCCMServer01.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3"
    thread="4584" file="httphelper.cpp:947">
    <![LOG[DownloadFileByWinHTTP failed with error 0x87d00280]LOG]!><time="22:21:45.792+240" date="09-26-2014" component="ccmsetup" context="" type="3" thread="4584" file="httphelper.cpp:1081">
    <![LOG[CcmSetup failed with error code 0x87d00280]LOG]!><time="22:21:45.808+240" date="09-26-2014" component="ccmsetup" context="" type="1" thread="2552" file="ccmsetup.cpp:10544">

    This system is something I inherited from another system admin who set this up so I was unsure of how this was deployed.  I did go in and see that it had been set to deploy using ONLY HTTPS.  I have changed it to use either HTTPS or HTTP now. 
    Unfortunately I'm still getting the same result of ccmsetup.exe running on the client machine but it is not installing.  I see in the log that I'm still getting the 0x87d00280 error, but that should matter since it is now set to use HTTPS or HTTP correct?
    <IPAddress SubnetAddress="172.XXX.XXX.0" Address="172.XXX.XXX.6"/>
        </IPAddresses>
      </ClientLocationInfo>
    </ContentLocationRequest>
    ']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="0" thread="5032" file="siteinfo.cpp:96">
    <![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{AB0BE041-48D1-4BA3-8B1C-167DB7899CF3}</ID><SourceHost>CLIENTPC</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:CLIENTPC:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SCCMServer.mydomain.com</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-09-27T13:57:13Z</SentTime><Body
    Type="ByteRange" Offset="0" Length="1082"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="09:57:13.404+240" date="09-27-2014"
    component="ccmsetup" context="" type="0" thread="5032" file="siteinfo.cpp:177">
    <![LOG[CCM_POST 'HTTPS://SCCMServer.mydomain.com/ccm_system/request']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="httphelper.cpp:807">
    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3833">
    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3992">
    <![LOG[Begin to select client certificate]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4073">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context=""
    type="0" thread="5032" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="ccmsetup.cpp:6025">
    <![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SCCMServer.mydomain.com/ccm_system/request']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3"
    thread="5032" file="httphelper.cpp:947">
    <![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="siteinfo.cpp:532">
    <![LOG[Failed to get DP locations as the expected version from MP 'HTTPS://SCCMServer.mydomain.com'. Error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="2"
    thread="5032" file="ccmsetup.cpp:10926">
    <![LOG[Failed to find DP locations from MP 'HTTPS://SCCMServer.mydomain.com' with error 0x87d00280, status code 200. Check next MP.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context=""
    type="2" thread="5032" file="ccmsetup.cpp:10782">
    <![LOG[Only one MP HTTPS://SCCMServer.mydomain.com is specified. Use it.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1"
    thread="5032" file="ccmsetup.cpp:9745">
    <![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="ccmsetup.cpp:10811">
    <![LOG[GET 'HTTPS://SCCMServer.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="httphelper.cpp:807">
    <![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3833">
    <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:3992">
    <![LOG[Begin to select client certificate]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4073">
    <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context=""
    type="0" thread="5032" file="ccmcert.cpp:4109">
    <![LOG[There are no certificates in the 'MY' store.]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="5032" file="ccmcert.cpp:4131">
    <![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="09:57:13.404+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="ccmsetup.cpp:6025">
    <![LOG[GetHttpRequestObjects failed for verb: 'GET', url: 'HTTPS://SCCMServer.mydomain.com/CCM_Client/ccmsetup.cab']LOG]!><time="09:57:13.420+240" date="09-27-2014" component="ccmsetup" context="" type="3"
    thread="5032" file="httphelper.cpp:947">
    <![LOG[DownloadFileByWinHTTP failed with error 0x87d00280]LOG]!><time="09:57:13.420+240" date="09-27-2014" component="ccmsetup" context="" type="3" thread="5032" file="httphelper.cpp:1081">
    <![LOG[CcmSetup failed with error code 0x87d00280]LOG]!><time="09:57:13.420+240" date="09-27-2014" component="ccmsetup" context="" type="1" thread="960" file="ccmsetup.cpp:10544">

  • Sccm 2012 client push installation error 120 & 1350

    what i can do to resolve this problem a  lot of client push installation skipped and get error 120 & 1305

    Hi Alaa,
    The problem is when you initiated your client push for these clients you forgot to force it.
    The machines you are trying to deploy to already have a CCM client or a failed/corrupt installation.
    You must re-initiate the client push install for the failing machines, and remember to tick off the
    'Always Install the client software' option. This repairs failed/corrupt installations also.
    The error code 120 tells you this way:
    120 - Mobile client on the target machine has the same version, and 'forced' flag is not turned on. Not processing this CCR ,target machine already have cm client and no force install selected(always install).
    1305 - is just that the client push cannot detect which version that is already installed.
    All the best, Jesper Hassing - MCTS SCCM 2012 - MCSA 2012 Server - MCP

  • SCCM 2012 client push to SCCM 2007 clients

    Hi,
    I'd like to upgrade SCCM 2007 clients to SCCM 2012. Their computers appear in SCCM 2012.
    I could select them and then select "install client" but there are about 400 to upgrade, some or online some not.
    Will the process of upgrade run when the offline clients get online?
    J.
    Jan Hoedt

    If your clients are member of an Active Directory, you could also use a startup script to update the client.
    Jason has a very popular script you can use:
    http://blog.configmgrftw.com/configmgr-client-startup-script/
    Ronni Pedersen | Microsoft MVP - ConfigMgr | Blogs:
    www.ronnipedersen.com/ and www.SCUG.dk/ | Twitter
    @ronnipedersen

  • SCCM 2012 Client Push Install

    Hi,
    I tried installing the SCCM client from the console on a workstation. The summary shows last installation error 5(Access Denied). But I am the domain admin and I used the same account to install clients on to hundreds of  machines in the environment.
    I can login to the machine as well and when I connect to the admin$ share on the machine remotely, I do not see the ccmsetup folder(or any other SCCM folder) being created. I verified BITS service is running, firewall is turned off, the domain admins group
    is part of the local admin group.
    Is there anything else to confirm? Am I missing anything? The workstation runs on Windows 7 Enterprise(64-bit) SP1. 
    Thank you.

    Hi,
    I tried installing the SCCM client from the console on a workstation. The summary shows last installation error 5(Access Denied). But I am the domain admin and I used the same account to install clients on to hundreds of  machines in the environment. I
    can login to the machine as well and when I connect to the admin$ share on the machine remotely, I do not see the ccmsetup folder(or any other SCCM folder) being created. I verified BITS service is running, firewall is turned off, the domain admins group is
    part of the local admin group.
    Is there anything else to confirm? Am I missing anything? The workstation runs on Windows 7 Enterprise(64-bit) SP1. 
    Thank you.
    NM

  • Automatic Client Push not working - Site System Servers

    Having an issue getting automatic site-wise client push to work when only
    having "Configuration Manager site system servers" selected.  This was turned on after discovery was enabled and fully executed.
    SCCM 2012 R2 CU1, Single Primary Site Server, 2 Management Points (one on primary and second is standalone), with 5 DP's (currently), SQL is standalone.
    The site systems are within the IP range boundaries and show as assigned (i.e. site code showing in console of object).  The boundaries are in a boundary group with site assignment selected, and a DP added.  When I view the object properties I
    see its returning the correct IP that does fall withing the IP range boundary.
    Nothing in the ccm.log indicating its ever trying to install the client and the ccr and ccrretry folders are empty.  I can do a manual client push without issue to a site server object or a discovered desktop/laptop object.
    Is there something I may be missing here?  And does anyone know the interval in which SCCM should be creating ccr records for discovered objects that don't have a client?

    Thanks or the quick replies everyone.  To answer Idan's questions, no errors in log or component status and SQL is not clustered.
    John, I hope this isn't the case.  If it were wouldn't that effectively mean you would not be able to enabled discovery until you are ready to turn on auto client push?  And if you did that you would have no way to control the client roll out.
     Maybe I am missing something in that equation.  I'll test that theory regardless but if that ends up being the case that is alarming!  :-)
    Jason, thanks for the tip on the potential bug.  Was really more so hoping to validate automatic client push rather than actually needing it for my site system servers.  So if it is the issue you reference above hopefully its just contained to
    the site system servers.  Would be nice to be able to select automatic client push to just a collection of devices prior to turning it on for site wide deployment.  
    I guess I could always just turn off discovery temporarily and delete all but some test clients, enable client push for workstations, then once validated, turn it back off and re-enable discovery.  (wouldn't turn push back on until most clients are
    deployed on the roll out schedule)

  • Error installing SCCM 2012 client on server

    Hi Guys,
    I am trying to install the SCCM 2012 client on a machine in my domain. The account specified in client settings is indeed a local admin on this server, but I get the error below:
    Any assistance much appreciated!

    Hi GSS1,
    You can check on the C:\Windows\ccmsetup\logs , files: ccmsetup.log and client.msi.log for errors of clues about the real failure. 
    On the other hand I would recommend you the manual installation from the UNC path, like:
    \\SCCMServerName\SMS_sitecode\Client\ccmsetup.exe
    and using the parameters listed here to define the settings: https://technet.microsoft.com/en-us/library/bb693546.aspx?f=255&MSPPError=-2147217396
    Optionally you can copy the files from the \\...\Client\ folder to local and try a local installation. 
    Any of this steps will give you more clues about the failure if they fail or success.
    Please share any update for more suggestions!

  • SCCM 2012 R2: does the sccm server itself need a sccm 2012 client?

    Hi,
    The question is simple. Reason, I update my SCCM 2012 R2 forefront clients via automatic update rule. The server itself has also the forefront/SCEP client but no sccm client.
    So I wonder if in general it 's a good idea to install the sccm 2012 client to the SCCM server itself.
    J.
    Jan Hoedt

    Hi,
    There is no document about installing the SCCM 2012 client to the SCCM server itself.
    It's depends on whether you want to monitor the SCCM server.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Deploying SCCM 2012 Client over DirectAccess

    I have not been able to successfully deploy the SCCM 2012 client to any DirectAccess clients when they are not connected to the internal network.  I have migrated my collections from SCCM 2007 and all machines connected internally had no issues.  I
    have added the new SCCM server to the Infrastructure Servers configuration on the UAG and applied the Group Policy.  In the CCM logs, I am seeing "the device %computername% does not exist on the network" although I can ping them.  The client push
    account is a local admin on the machines so I am at a loss as to why they can't connect.  Could it be boundary related?
    Rich

    Here is a snippet from the ccm logs:
    ---> The device computername.xxx.local does not exist on the network. Giving up~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.927+300><thread=4568 (0x11D8)>
    ---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0)~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.927+300><thread=4568 (0x11D8)>
    ---> Attempting to connect to administrative share '\\computername\admin$' using account 'xxx\sccm_push'~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.927+300><thread=4568 (0x11D8)>
    ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account xxx\sccm_push (00000035)  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.942+300><thread=4568 (0x11D8)>
    ---> The device "computername" does not exist on the network. Giving up~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.942+300><thread=4568 (0x11D8)>
    ---> ERROR: Unable to access target machine for request: "2097152018", machine name: "computername",  access denied or invalid network path.  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.942+300><thread=4568 (0x11D8)>
    Execute query exec [sp_CP_SetLastErrorCode] 2097152018, 53~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.958+300><thread=4568 (0x11D8)>
    Stored request "2097152018", machine name "computername", in queue "Retry".  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.958+300><thread=4568 (0x11D8)>
    Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152018, 2~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.958+300><thread=4568 (0x11D8)>
    Execute query exec [sp_CP_SetLatest] 2097152018, N'08/14/2012 10:47:23', 198~  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.973+300><thread=4568 (0x11D8)>
    <======End request: "2097152018", machine name: "computername".  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:23.973+300><thread=4568 (0x11D8)>
    ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account xxx\sccm_push (00000035)  $$<SMS_CLIENT_CONFIG_MANAGER><08-14-2012 05:47:25.989+300><thread=4688 (0x1250)>

  • SCCM 2012 client installation

    Hi all,
    I am trying to deploy SCCM 2012 client to my office computers using client push installation wizard, however when I random check the log file on client computers, the wizard did not start at all. Anyone know why this happen?
    Anyway I can trigger the installation wizard for the clients?
    Regards,
    Chungb

    Hi Chungb,
    Please install the FSP Role and mention the same.
    Also are you able to access the SCCM Server share from the client machines ? Can you confirm that as well
    Gautam.75801

  • SCCM 2012 Client Install Failing ONLY on 8.1 Machines - Advice?

    Good morning,
    I've got a rather interesting situation.  We have a SCCM 2012 site configured for https, the site server is acting as the MP and DP, and we are installing the client via the SCCM 2012 Client GPO.  Our cert is an InCommon cert.  We have 4000+
    Windows 7 machines that are able to install the client.  We tested on a Window 8 machine and the client install works as well.  Whenever a Windows 8.1 machine tries to install it fails.  We have checked the boundaries (we can't specify IP ranges
    since we don't manage the whole network).  I can manually browse to the source files on the MP/DP.  The switches we use when installing via the GPO are /usepkicert /mp:[redacted] CCMHTTPSSTATE=63 SMSSITECODE=[redacted] SMSCACHESIZE=12288.  However,
    it always fails with:
    <![LOG[GetDPLocations failed with error 0x80004005]LOG]!><time="09:33:26.329+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944" file="siteinfo.cpp:532">
    <![LOG[Failed to get DP locations as the expected version from MP 'https://[redacted]'. Error 0x80004005]LOG]!><time="09:33:26.329+300" date="03-13-2015" component="ccmsetup" context="" type="2"
    thread="12944" file="ccmsetup.cpp:11261">
    <![LOG[Failed to find DP locations from MP 'https://[redacted]' with error 0x80004005, status code 403. Check next MP.]LOG]!><time="09:33:26.329+300" date="03-13-2015" component="ccmsetup" context="" type="2"
    thread="12944" file="ccmsetup.cpp:11117">
    <![LOG[Only one MP https://[redacted] is specified. Use it.]LOG]!><time="09:33:26.330+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="12944" file="ccmsetup.cpp:10080">
    <![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="09:33:26.330+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944" file="ccmsetup.cpp:11146">
    <![LOG[MapNLMCostDataToCCMCost() returning Cost 0x1]LOG]!><time="09:33:26.332+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="12944" file="ccmutillib.cpp:5479">
    <![LOG[GET 'https://[redacted]/CCM_Client/ccmsetup.cab']LOG]!><time="09:33:26.333+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="12944" file="httphelper.cpp:807">
    <![LOG[Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 403)]LOG]!><time="09:33:26.366+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944"
    file="httphelper.cpp:1013">
    <![LOG[DownloadFileByWinHTTP failed with error 0x80004005]LOG]!><time="09:33:26.366+300" date="03-13-2015" component="ccmsetup" context="" type="3" thread="12944" file="httphelper.cpp:1081">
    <![LOG[A Fallback Status Point has not been specified.  Message with STATEID='308' will not be sent.]LOG]!><time="09:33:26.367+300" date="03-13-2015" component="ccmsetup" context="" type="1"
    thread="12944" file="ccmsetup.cpp:9763">
    <![LOG['Configuration Manager Client Retry Task' is scheduled to run at 03/13/2015 02:33:26 PM (local) 03/13/2015 07:33:26 PM (UTC) time with arguments ' "/usepkicert" "/mp:[redacted]" "CCMHTTPSSTATE=63" "SMSSITECODE=AHC"
    "SMSCACHESIZE=12288" /RetryWinTask:1'.]LOG]!><time="09:33:26.369+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="10100" file="wintask.cpp:315">
    <![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="09:33:26.409+300" date="03-13-2015" component="ccmsetup" context="" type="1" thread="10100" file="ccmsetup.cpp:10879">
    Anyone have any idea why this is happening only on 8.1 machines?  I can't think of where else to check.  Thanks for any help.

    Okay, so I installed via the following:  ccmsetup.exe /usepkicert /source:C:\Client CCMHTTPSSTATE=63 SMSSITECODE=AHC SMSCACHESIZE=12288 and the client installed.  But you're right, the CCMMessaging.log is full of https errors.  I know it's
    something with the cert and I've even requested new ones from the CA.  However, why what is it about 8.1 that is causing the issues?  Like I said, we have 4000 machines using the same client authentication cert and they work.  I've cut and paste
    some of the log entries.  One thing to note is the \\[redacted]\sms_ahc\client\ccmsetup.exe in the beginning was using the internet FQDN.  Everything else is using the intranet location.  Does that provide any insight as to what is going
    on?
    \\[redacted]\sms_ahc\client\ccmsetup.exe /usepkicert /source:C:\Client CCMHTTPSSTATE=63 SMSSITECODE=AHC SMSCACHESIZE=12288
    <![LOG[Successfully sent security settings refresh message.]LOG]!><time="12:43:12.834+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:369">
    <![LOG[Successfully sent location services HTTPS failure message.]LOG]!><time="12:43:12.837+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:396">
    <![LOG[Post to https://[redacted]/ccm_system_windowsauth/request failed with 0x87d00231.]LOG]!><time="12:43:12.837+300" date="03-16-2015" component="CcmMessaging" context="" type="2" thread="5452"
    file="messagequeueproc_outgoing.cpp:442">
    <![LOG[[CCMHTTP] ERROR: URL=https://[redacted]/ccm_system_windowsauth/request, Port=443, Options=63, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE]LOG]!><time="12:45:12.880+300" date="03-16-2015" component="CcmMessaging"
    context="" type="1" thread="5452" file="ccmhttperror.cpp:297">
    <![LOG[Raising event:
    instance of CCM_CcmHttp_Status
    DateTime = "20150316174512.883000+000";
    HostName = "[redacted]";
    HRESULT = "0x87d0027e";
    ProcessID = 8572;
    StatusCode = 403;
    ThreadID = 5452;
    ]LOG]!><time="12:45:12.883+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="event.cpp:715">
    <![LOG[Successfully sent security settings refresh message.]LOG]!><time="12:45:12.889+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:369">
    <![LOG[Successfully sent location services HTTPS failure message.]LOG]!><time="12:45:12.892+300" date="03-16-2015" component="CcmMessaging" context="" type="1" thread="5452" file="ccmhttperror.cpp:396">
    <![LOG[Post to https://[redacted]/ccm_system_windowsauth/request failed with 0x87d00231.]LOG]!><time="12:45:12.892+300" date="03-16-2015" component="CcmMessaging" context="" type="2" thread="5452"
    file="messagequeueproc_outgoing.cpp:442">

  • SCCM 2007 to SCCM 2012 client migration via Powershell

    Hi
    I'm looking for a controlled way to migrate a SCCM 2007 server client to SCCM 2012. A push of SCCM Console is no option.
    I 'll do all the testing but hoped to gain some time by having these questions answered:
    *can an install of SCCM 2012 client be remotely triggered in one go (no uninstall of 2007 needed)?
    *if uninstall is needed (of sccm 2007 client), does it need a reboot?
    What command to use (preferrably powershell):
    \\ourserver\Client\ccmsetup.exe" -argumentlist "SMSSITECODE=sitecode","SMSMP=oursccmserver","SMSCACHESIZE=8000","FSP=oursccmserver","CCMLOGMAXSIZE=104857600"
    OR (guess that's the command SCCM is using)
    Install-CMClient-DeviceName$ComputerName-IncludeDomainController$False-SiteCodePRD-ForceReinstall$True-AlwaysInstallClient$True-Verbose
    J.
    Jan Hoedt

     do I need to import the machine in SCCM 2012 also or launching the SCCM 2012 install from a SCCM 2007
    will do this?
    How will you do that? This does not work at all when using client push obviously. You can only use packages/programs to update clients to CM12 in that case and that's something you did not want to do.
    Torsten Meringer | http://www.mssccmfaq.de

  • SCCM Console Won't Connect to Site Server WMI Connection Issues

    Ok, I've been scratching my head with this one for a while. We're running SCCM 2007 R3 in native mode, site server is Win 2008 Std R2, Config Mgr database sits on a seperate SQL box. When I launch the console (user account I use when logged into server
    which is a member of SMS Admins group) on my Win 7 machine I receive the error..
    The ConfigMgr console could not connect to the Config Mgr site database. Verify that this computer has network connectivity to the SMS Provider computer and that your user account has Remote Activation permissions on both the Config Mgr site server and SMS
    Provider computers
    I've read numerous articles around DCOM permissions, I can confirm have all been set on the site server and SMS Admins group has the Remote Activation permission checked. Also I can open WMI, select properties to view the WMI namespace structure, permissions
    on the SMS folder and subfolders are set as per microsoft articles.
    So then I launched wbemtest from my Win 7 machine, when I try and connect to
    \\[SiteServer]\root\sms\Site_SiteCode. I receive WMI error below. I can however connect successfully to WMI on any other server
    Number: 0x80070005
    Facility: Win32
    Description: Access is denied
    When logged into SCCM Site server and open wbemtest I can't remotely connect using WMI to any server in our domain, each time receiving the error below.
    Error
    Number: 0x800706ba
    Facility: Win32
    Description: The RPC server is unavailable
    Whilst logged onto the site server I can use wbemtest to connect to itself using the SMS Provider namespace(\\[SiteServer]\root\sms\Site_SiteCode) which would suggest the WMI isn't corrupt.
    It appears that I can't connect remotely to or from this machine using WMI, that something is blocking or not allowing the connection maybe? Please note the Windows Firewall is disabled, we don't use any third party firewall software on our servers and
    WMI service is started.
    Any ideas or suggestions on this one would be most welcome.
    Cheers

    Hi Eswar, thanks for the reply. This is the extract from the adminUI.log when I try and launch the console
    [6][20/01/2012 10:24:21] :Insufficient privilege to connect, error: 'Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))'\r\nSystem.UnauthorizedAccessException\r\nAccess is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))\r\n  
    at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
       at System.Management.ManagementScope.InitializeGuts(Object o)
       at System.Management.ManagementScope.Initialize()
       at System.Management.ManagementObjectSearcher.Initialize()
       at System.Management.ManagementObjectSearcher.Get()
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.Connect(String configMgrServerPath)
       at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)\r\n
    [6][20/01/2012 10:24:21] :Microsoft.ConfigurationManagement.ManagementProvider.SmsConnectionException\r\nThe ConfigMgr Administrator console could not connect to the ConfigMgr site database. Verify your user has read permissions to the ConfigMgr site and then
    try to connect again.
    \r\n   at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)
       at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.BuildTreeWorker()\r\nAccess is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    \r\nSystem.UnauthorizedAccessException\r\nAccess is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))\r\n   at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
       at System.Management.ManagementScope.InitializeGuts(Object o)
       at System.Management.ManagementScope.Initialize()
       at System.Management.ManagementObjectSearcher.Initialize()
       at System.Management.ManagementObjectSearcher.Get()
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.Connect(String configMgrServerPath)
       at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)\r\n
    [8][20/01/2012 10:25:37] :Insufficient privilege to connect, error: 'Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))'\r\nSystem.UnauthorizedAccessException\r\nAccess is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))\r\n  
    at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
       at System.Management.ManagementScope.InitializeGuts(Object o)
       at System.Management.ManagementScope.Initialize()
       at System.Management.ManagementObjectSearcher.Initialize()
       at System.Management.ManagementObjectSearcher.Get()
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.Connect(String configMgrServerPath)
       at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)\r\n
    [8][20/01/2012 10:25:37] :Microsoft.ConfigurationManagement.ManagementProvider.SmsConnectionException\r\nThe ConfigMgr Administrator console could not connect to the ConfigMgr site database. Verify your user has read permissions to the ConfigMgr site and then
    try to connect again.
    \r\n   at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)
       at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.BuildTreeWorker()\r\nAccess is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
    \r\nSystem.UnauthorizedAccessException\r\nAccess is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))\r\n   at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
       at System.Management.ManagementScope.InitializeGuts(Object o)
       at System.Management.ManagementScope.Initialize()
       at System.Management.ManagementObjectSearcher.Initialize()
       at System.Management.ManagementObjectSearcher.Get()
       at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlConnectionManager.Connect(String configMgrServerPath)
       at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)\r\n
    [3][20/01/2012 10:25:48] :Failure while loading required 'WQL' query engine, console cannot connect

Maybe you are looking for

  • HT1926 I updated itunes and now it doesnt recognize my CD drive

    I updated Itunes and now it doesnt recognize my CD drive

  • Retrieving passwords or deleting digital signatures

    Haven't used the function in a very long time and I can't remember the password for my digital signature, is there a way to retreive the p/w or just delete it all together to create a new one?

  • Iphone 4 screen keeps rotating when closing apps

    It only started a few days ago but it's starting to get on my nerves.  My iPhone 4 screen keeps rotating when I go to close an app, and it rotates back when I go back to the home screen. I don't know why it's doing it, but was wondering if anyone did

  • Creating a Tool Bar

    I am trying to create a new tool bar.  The "create at tool bar" screen that comes up is so large, I can't click on the "Save" button because its off the bottom of the screen.  It won't move and there aren't any controls to change the size.  I even tr

  • Why are my purchased tunes not available on authorised computers?

    I have 4 authorised computers, and downloaded a purchased CD from iTunes when I was in Victoria (4000 kms away). Now home in Queensland, I can't access this music, or even see it in my list of purchased music. My 'purchased' list wrongly shows it as