SCCM 2012 CLSID APPID DCOM DEFAULT PERMISSIONS

I am trying to install SCCM 2012 onto a set of Server 2012 R2 servers. I did get SQL 2012 to install without much trouble. But there are multiple problems and I still have to WMF 4 and ADK installed before I try to install SCCM itself. Because of our environment
this servers are hardened. The problems are: WMF won't instal because the signer of the message invalid or not found (0x80096002), MS patches won't install because the "revocation process could not continue - the certificate(s)could not be checked) (0x800B010E
and in event viewer 2148204814), and in HKEY CLASSES ROOT while the APPID hive has permissions that match a separate working system we have the APPIDs under it have all read only permissions except trustedinistaller. Consequently, the permission settings on
all the DCOM objects are dimmed out. While I can change the existing DCOM and APPID objects (hopefully all at once) that leaves the problem of new objects. What is setting these permissions to read and how do I change that once and for all? I can ony find
info on changing one APPID at a time.

"hardened" = "broken"
Sorry, but most so called hardening processes are completely invalid and end up just breaking everything.
I highly recommend whoever implemented these "lockdowns" watch this: http://channel9.msdn.com/Events/TechEd/NorthAmerica/2011/SIM304
Ultimately, your issues have noting to do with ConfigMgr. The WMF is a standard Windows component as are Windows updates and thus you should seek help in a Windows forum or contact CSS (because I don't think you'll actually get anywhere in the forums if
your systems are so broken that you can't even install updates).
Jason | http://blog.configmgrftw.com

Similar Messages

SCCM 2012 R2 and NTFS\Share permissions auditing and inventory

Does SCCM 2012 have the ability to run inventory and audit reports on client systems' NTFS and Share permissions?
Any help would be greatly appreciated, as always.
Thanks

Not built-in no. See this post for adding share permissions:
https://social.technet.microsoft.com/Forums/systemcenter/en-US/31be4d1c-28d3-4f67-a2f6-823ab2b13d1e/how-to-collect-share-permissions
For NTFS permissions, something similar could be done if you had a limited set of folders or files that you wanted to inventory.
You could also use compliance settings to track if/when specific permissions change.
Jason | http://blog.configmgrftw.com | @jasonsandys

SCCM 2012 sms_dp_smspkg$ installed under Default FTP site

I'm trying to setup a remote Distro Point on a Windows Server 2008 R2 with a FTP site already running. I installed a Default Web site but when I set the server to be a DP it installed the SMS_DP_SMSPKG$ & SMS_DP_SMSSIG$ under the default
ftp site. Is this a problem ? If so how can I move them to the Default Web Site ?
Thanks

Since no one has answer this post, I recommend opening a support case with CSS as they can work with you to solve this problem.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

SCCM 2012 DP Migration

Hi Team,
I have 2007 secondary site installed DP and all the package are available.
Q.
1.What are the folders are using at the time of sccm 2012 migration.
2.I seen SMSDPpro.log in DP share and found it importing package.. where it getting package from (don't have PCK file in the local server)?
3. After all the successful of import the very next day i saw in console it showing 65 success and 120 in progress.
When I count the SMSDPProv.log more 150 packages are imported successfully. Why my console giving wrong info.
Thanks

Hi ,
1.What are the folders are using at the time of sccm 2012 migration.
Sorry that I didn't get the point of this question. Do you mean which folder are used on sccm 2012 to copy the content of SCCM 2007 DP packages?
2.I seen SMSDPpro.log in DP share and found it importing package.. where it getting package from (don't have PCK file in the local server)?
The package content is SCCM 2007 flowchart is:
1. When you add a package to a standard Distribution Point, the distmgr component is notified with the packageID.PKN in inboxes\distmgr.box.
2. The distmgr component begins the processing of the package
3. Distmgr establishes a connection to the DP and checks for the SMSPKGdriveletter$ share.
4. It creates a subdirectory with the package ID in the SMSPKGC$ share.
5. Distmgr connects to the packageID folder it created and checks if the drive has the enough free space to copy the package contents:
6. Distmgr sets the security on the
\SMSPKGC$\<PkgID">\\<DP>\SMSPKGC$\<PkgID> folder and copies the package contents to that folder from the package source. It also copies the signature file (TAR file) to the SMSSIG$ share and sets the security on that folder:
7. Distmgr runs the SQL query to update the status in the pkgstatus table in SQL.
For more information, please see:
The end to end flow of distributing a ConfigMgr 2007 package to a standard DP and a Branch DP in a single site environment
http://blogs.technet.com/b/hhoy/archive/2012/05/31/an-adventure-in-the-sccmcontentlib-single-instance-store.aspx
In SCCM 2012 or later, by default, the content is single storage and browsing to a DP does not store all the files in a package id folder where you could find an install and execute it.
For more information, please refer to:
An adventure in the sccmcontentlib - single instance store
http://blogs.technet.com/b/hhoy/archive/2012/05/31/an-adventure-in-the-sccmcontentlib-single-instance-store.aspx
3. After all the successful of import the very next day i saw in console it showing 65 success and 120 in progress.
Refresh the status and close the SCCM console, reopen and see if this helps. If you are using SCCM 2012 Sp1, check this KB
http://support.microsoft.com/kb/2828900. Also check if this technet links helps:
https://social.technet.microsoft.com/Forums/en-US/71b90f35-69de-495c-8f8a-de85ad66b593/sccm-2012-sp1-configuration-manager-client-package-in-progress?forum=configmanagerdeployment
Thanks.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

SCCM 2012 complete maintenance

Hi
I am in need of SCCM 2012 complete maintenance task Manual as well as Scheduled maintenance task document. Moreover the
link for SQL 2008 maintenance task document. If anybody is having the link for these please let me know it would be very helpful for me.I will be very thankful for this.
Please let me know some link on below topics also.
How to check Distribution Manager issues , Clean Configuration Manager inboxes on sites , Intermittent Proxy Management Point connection issues to SQL , Make site settings consistent between Primary sites
Thanks in advance!!!!!!!!!!!!!!!!!
Regards
Gokulnath

Hi,
The following KB talks about Maintenance tasks default settings in SCCM 2012.
Maintenance tasks default settings in System Center 2012 and System Center 2012 R2 Configuration Manager
For SQL 2008 R2,
Maintenance Tasks
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 report on computers with local shares and share permissions

Very new to SCCM 2012, want to put together a report to show computers with local shares and the permissions on those shares (for security purposes, need to investigate any systems that have open shares_.
Managed to add and now collecting information that populates v_gs_share and I have a handle on the report itself, just wondering how to collect the share permissions - I've seen other qustions on the boards that are similar but reference earlier versions
of SCCM so wondering how to do it in 2012.
Thanks

So, where are you at? The script is running, and the clients have the data in their local WMI namespace, root\cimv2\sms_sharepermissions ?
So all that's left is to modify hardware inventory to pull that custom WMI Namespace in? If so, it's not too horrid. Take note of a workstation (or server) to which you have remote rights to; and which has run the script, so that on THAT specific
machine, root\cimv2\SMS_SharePermissions exists.
In your CM12 Console, Administration, Client Settings. Right-click "Default Client Settings", Properties. On the left, select "hardware inventory". then on the right, Set classes..., now the fun part.
Add...
Connect..., and put in ThatServerOrWorkstation (for computername), and wmi namespace is root\cimv2. Click the option "recursive", Connect. (the trick here is rights to the target).
From the results, it might be easiest to click on "classname" at the top for sorting, then go find SMS_SharePermissions. Select that, ok ok ok ok (however many times you need to agree); and... we're done here. Sit and wait for inventory to report
that data up. If you're paranoid, you can monitor dataldr.log; and force policy refreshes and hinv deltas on some boxes; but the key is patience. if you think you've waited long enough; you probably haven't. ;)
Standardize. Simplify. Automate.

SCCM 2012 R2 Reporting issue updating SQL Reporting permissions

I am in the process of setting up SCCM 2012 R2. I am having an issue with the SCCM reporting. If I set the permissions in the SCCM console, the permissions do not propagate to the SQL reporting... I get this... This is from SRSRP.log...
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_DIT $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.384+300><thread=5432 (0x1538)>
(!) Error retrieving folders - [A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.)]. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.438+300><thread=5432 (0x1538)>
No folder configuration information found. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.441+300><thread=5432 (0x1538)>
Does anyone know how to fix?
I tried removing and re-installing the reporting point, changing the permissions in SQL Server... and a dozen other things.

I am in the process of setting up SCCM 2012 R2. I am having an issue with the SCCM reporting. If I set the permissions in the SCCM console, the permissions do not propagate to the SQL reporting... I get this... This is from SRSRP.log...
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_DIT $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.384+300><thread=5432 (0x1538)>
(!) Error retrieving folders - [A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.)]. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.438+300><thread=5432 (0x1538)>
No folder configuration information found. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.441+300><thread=5432 (0x1538)>
Does anyone know how to fix?
I tried removing and re-installing the reporting point, changing the permissions in SQL Server... and a dozen other things.

SCCM 2012 SSRS modify default reporting Link

Hi,
We have a requirement in SCCM 2012 reporting to change the default reporting link (http://netbiosname/reports ) to (http://fqdn/reports ) , the reason is users from
a different domain are not able to access the link with NetBIOS name when the link is sent to them from a report subscription.
How do we modify the default reporting link to show with FQDN instead of NetBIOS name ?
Tried :
We have tried to add the FQDN on the SQL SSRS - restarted SQL reporting services - restarted IIS - restarted SMS service , but still the FQDN report link wont show up on the SCCM console.
Also tried to make changes in SSRS config file but now luck.

Hi,
>>We have tried to add the FQDN on the SQL SSRS - restarted SQL reporting services - restarted IIS - restarted SMS service , but still the FQDN report link wont show up on the SCCM console.
Please add the FQDN as the screenshot below and remove the existing one. Reinstall the Reporting Services Point after add the FQDN.
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

SCCM 2012 SP1 Report Permissions required

Hello Everyone.. Im having trouble running any reports off of the SCCM Console. So far I have full permissions in the SCCM console, and on SQL Server I am a sysadmin. Here is my error when I run it through report builder:
System.Web.Services.Protocols.SoapException: The permissions granted to user 'DTTLA\eguerrero' are insufficient for performing this operation. ---> Microsoft.ReportingServices.Diagnostics.Utilities.AccessDeniedException: The permissions granted to user 'DTTLA\eguerrero' are insufficient for performing this operation. at Microsoft.ReportingServices.Library.ReportingService2010Impl.CreateReportEditSession(String Report, String Parent, Byte[] Definition, String& EditSessionID, Warning[]& Warnings) at Microsoft.ReportingServices.WebServer.ReportingService2010.CreateReportEditSession(String Report, String Parent, Byte[] Definition, String& EditSessionID, Warning[]& Warnings)----------------------------The permissions granted to user 'DTTLA\eguerrero' are insufficient for performing this operation.
And here is the error when I run it through the Configuration Manager:
Microsoft.Reporting.WinForms.ReportServerExceptionAn error has occurred during report processing. (rsProcessingAborted)Stack Trace: at Microsoft.Reporting.WinForms.ServerReport.ServerUrlRequest(Boolean isAbortable, String url, Stream outputStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.ServerReport.InternalRender(Boolean isAbortable, String format, String deviceInfo, NameValueCollection urlAccessParameters, Stream reportStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.AsyncMainStreamRenderingOperation.RenderServerReport(ServerReport report) at Microsoft.Reporting.WinForms.AsyncRenderingOperation.PerformOperation() at Microsoft.Reporting.WinForms.ReportViewer.AsyncReportOperationWrapper.PerformOperation() at Microsoft.Reporting.WinForms.ProcessingThread.ProcessThreadMain(Object arg)-------------------------------Microsoft.Reporting.WinForms.ReportServerExceptionCannot impersonate user for data source 'AutoGen__5C6358F2_4BB6_4a1b_A16E_8D96795D8602_'. (rsErrorImpersonatingUser)Stack Trace: at Microsoft.Reporting.WinForms.ServerReport.ServerUrlRequest(Boolean isAbortable, String url, Stream outputStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.ServerReport.InternalRender(Boolean isAbortable, String format, String deviceInfo, NameValueCollection urlAccessParameters, Stream reportStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.AsyncMainStreamRenderingOperation.RenderServerReport(ServerReport report) at Microsoft.Reporting.WinForms.AsyncRenderingOperation.PerformOperation() at Microsoft.Reporting.WinForms.ReportViewer.AsyncReportOperationWrapper.PerformOperation() at Microsoft.Reporting.WinForms.ProcessingThread.ProcessThreadMain(Object arg)-------------------------------Microsoft.Reporting.WinForms.ReportServerExceptionLog on failed. Ensure the user name and password are correct. (rsLogonFailed)Stack Trace: at Microsoft.Reporting.WinForms.ServerReport.ServerUrlRequest(Boolean isAbortable, String url, Stream outputStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.ServerReport.InternalRender(Boolean isAbortable, String format, String deviceInfo, NameValueCollection urlAccessParameters, Stream reportStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.AsyncMainStreamRenderingOperation.RenderServerReport(ServerReport report) at Microsoft.Reporting.WinForms.AsyncRenderingOperation.PerformOperation() at Microsoft.Reporting.WinForms.ReportViewer.AsyncReportOperationWrapper.PerformOperation() at Microsoft.Reporting.WinForms.ProcessingThread.ProcessThreadMain(Object arg)-------------------------------Microsoft.Reporting.WinForms.ReportServerExceptionThe user name or password is incorrectStack Trace: at Microsoft.Reporting.WinForms.ServerReport.ServerUrlRequest(Boolean isAbortable, String url, Stream outputStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.ServerReport.InternalRender(Boolean isAbortable, String format, String deviceInfo, NameValueCollection urlAccessParameters, Stream reportStream, String& mimeType, String& fileNameExtension) at Microsoft.Reporting.WinForms.AsyncMainStreamRenderingOperation.RenderServerReport(ServerReport report) at Microsoft.Reporting.WinForms.AsyncRenderingOperation.PerformOperation() at Microsoft.Reporting.WinForms.ReportViewer.AsyncReportOperationWrapper.PerformOperation() at Microsoft.Reporting.WinForms.ProcessingThread.ProcessThreadMain(Object arg)-------------------------------
Does anyone have an idea where I'm forgetting to assign permissions?

Check the properties of your Reporting Point. See the user that is configured to connect to the data source. This user must have a SQL login (eg sysadmin)
See here
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/dc47c82b-41aa-4b6a-990f-0c0264aa33a2/error-message-when-trying-to-open-reports-on-the-sccm-2012-console-and-ie-browser-sql-server-2008
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Perms to specific reports folder in sccm 2012

Have set up access to certain reports based on security settings in sccm so accounts in specific AD group can access certain sccm reports via ssrs reporting web site. Utilized the very useful information in the links below. I have a request for
the group to access the network folder reports, but that means I would have to give RUN REPORT perms to the SITE permission in the security role, as that is the only group that includes the network folder. I don't want to give them access to the
rest of the stuff it includes, such as client push, client status, replication traffic, etc., as that would just cause confusion among the customer base. I don't want to give them anymore than they need. I tried giving the group rights to the individual
reports in the network folder, but the problem is that since there is no access to the folder itself without doing the above, they can't get to the reports. I could give them rights to the folder via SSRS but then SCCM would just overwrite that 15 minutes
later. Does anyone have any suggestions on this one? Thanks. : )
http://skamie.wordpress.com/2010/06/24/ssrs-and-uac/
http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/
http://social.technet.microsoft.com/Forums/en-US/configmanagergeneral/thread/8525cfa6-aaa4-4d34-a296-a9a8cb76e5a3/

I'm not concerned about giving them more rights, I'm concerned about giving them access to reports that they don't need access to, otherwise there would be widespread confusion and misunderstanding. This, in turn, would generate anxiety-based
calls to the support desks, that I would like to avoid. I'm not trying to hide anything from them, I just don't want to cause undue worry and confusion. Make sense?
So don't give them access to reports that you don't want them to have. Here is a blog that will tell you how to grant access to one report.
http://be.enhansoft.com/post/2013/11/07/How-to-Grant-Permission-to-a-Single-SCCM-2012-SSRS-Report.aspx
http://www.enhansoft.com/

Software center permissions error, SCCM 2012

I'm getting a strange error in the software center. The applications and packages deploy without any problems but users receive an error when trying to install the application or package through software center. They receive the error "Insufficient
Permissions for Software Installation" and "Your IT department has set restrictions for this software that prevent it from installing on your computer". I have attached the screenshot. We are running SCCM 2012 on Server 2008 R2 with SQL Server
2008 R2 on a separate server. If this is something that is configured on the server I don't remember ever doing it but I can't find that error anywhere on Google so I'm kind of at a loss for the moment. Again, any help is greatly appreciated. Thanks.
Über Random

Oddly encountering this error as well on an HP MT41 with EWF turned on. Under the local Administrator account.
Installs are set to "All Users".
SCCM 2012r2 CU3 Environment.
This is my SCNotify and SCClient Log exerpts
SCNotify
Executing WMI query: Select * From CCM_ClientAgentSettings (Microsoft.SoftwareCenter.Client.Data.WmiConnectionManager at ExecuteQuery)
SCClient 12/31/2014 11:58:05 AM 1 (0x0001)
SCClient
DialogBase base constructor called for Microsoft.SoftwareCenter.Client.Pages.BasicMessageDialog, isNotify = False (Microsoft.SoftwareCenter.Client.Pages.DialogBase at .ctor)
SCClient 12/31/2014 11:58:45 AM 1 (0x0001)
Executing WMI query: Select * From CCM_ClientAgentSettings (Microsoft.SoftwareCenter.Client.Data.WmiConnectionManager at ExecuteQuery)
SCClient 12/31/2014 11:58:45 AM 1 (0x0001)
BasicMessageDialog: displaying to user = Insufficient Permissions For Software Installation (Microsoft.SoftwareCenter.Client.Pages.BasicMessageDialog at .ctor)
SCClient 12/31/2014 11:58:45 AM 1 (0x0001)
BasicMessageDialog: user clicked ok (Microsoft.SoftwareCenter.Client.Pages.BasicMessageDialog at ButtonOK_Click)
SCClient 12/31/2014 12:00:03 PM 1 (0x0001)
So, from that, I took I should look in WMI, here is the contents of the properties of CCM_ClientAgentSettings.
ROOT\CCM\ClientSDK\CCM_ClientAgentSettings
=====================================
COMPUTER : MyTestUnit
CLASS : CCM_ClientAgentSettings
=====================================
BrandingTitle : MyCompanyNameHere, INC
DayReminderInterval : 7200
DisplayNewProgramNotification : True
EnableThirdPartyOrchestration : 0
HourReminderInterval : 900
InstallRestriction : 0
OSDBrandingSubtitle :
ReminderInterval : 28800
SUMBrandingSubtitle :
SuspendBitLocker : 0
SWDBarndingSubtitle :
SystemRestartTurnaroundTime : 600
Thoughts?
EDIT: Found this in the SCCM Documentation Library doc file (Feb 1, 2013).
Why do I see an error message about insufficient permissions from a Windows Embedded device when I try to install software from Software Center?
You can install applications only when the write filter on the Windows Embedded device is disabled. If you try to install an application on a Windows Embedded device that has write filters enabled, you see an error message that you have insufficient
permissions to install the application and the installation fails.

Sccm 2012 r2 console, devices, column layout and order is reset to default

Hi :)
I am running sccm 2012 r2 console on sccm server. I've added some columns into Assets and Management, Devices (beside default name, client, site code, client activity) ie. client version, endpoint protection enabled etc. I've left console open up and running
and after some when I get back, column layout is reset to default 4 columns :(
Can you fix please that system center consoles remember column layout and order ? (sc vmm 2012 r2 does not remember only when you add column maximum memory). :(

This has to be something to do with the consolesettings.dat file. Do you have folder redirection set up on the AppData\Roaming folder? I have managed to recreate your issue using the following method:
1. Add in some columns to the Devices view.
2. Go to the \\server\username\AppData\Roaming\Microsoft\ConfigMgr10 and deleted the consolesettings.dat file.
3. Relaunced the console and the columns have reset to default.
4. Set the columns again, closed down the console and the .dat file is recreated.
5. Re launch the SCCM console and the settings are retained.
I suggest you check either the C:\Users\%username%\AppData\Roaming\Microsoft\ConfigMgr10\consolesettings.dat. or \\server\username\AppData\Roaming\Microsoft\ConfigMgr10\consolesettings.dat and the time stamp of the file. Do some tests and recreate
the steps above.
Somewhere along the line your dat file is being removed with your bespoke settings.
Cheers
Paul | sccmentor.wordpress.com

SCCM 2012 Default self signed Cert expired...

SCCM 2012 Default self signed Cert expired - how do I renew it?

The default selfsigned cert that gets generated with the installation - can be found in administration - security - Certificates (This is Sccm 2012 RTM)
Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
I will bring this back to Kent point, which one of the Certs are you talking about. You can see form the screenshot that I have 6 certs, 3 DP and 3 Boot cert. You can also see that the 3 DP server have a 100 year life and the 3 Boot certs only have 1 year.
If you are talking about the boot certs then just create the boot image.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

SCCM 2012 client in capture but deploy has default step "Setup Windows and ConfigMgr"

Hi,
We have our SCCM 2012 client in the capture but the deploy has a single step "Setup Windows and ConfigMgr" in which there is no option to NOT install the sccm 2012 client.
So what happens then, the client is installed a second time?
Please advise.
J.
Jan Hoedt

Hello !
This is a mandatory step in order to configure Windows for a first use. In your case, the SCCM client will just be serialized, it's not a problem. The SCCM client has generally been prepared during the design capture.
Hope this helps.
Note: This posting is provided 'AS IS' with no warranties or guarantees, and confers no rights. Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable. This helps the community, keeps the forums tidy, and
recognises useful contributions.

SCCM 2012 client installation not happening

Hi,
I'm having issues while installing SCCM 2012 client on "Microsoftr Windows Serverr 2008 Standard SP-1"
I have tried manual install and uninstall also several time. And all the revelent services are also working fine
and I'm having below issue:
Some tabs are missing:
CCM Notification Agent is disabled.

Here are the attached log files.
This is CCMSetup.log
<![LOG[MSI: Action 10:22:51: SmsSetLUAAccessPermissions. >Gets permission for evelation on Vista and grants each COM object permission.]LOG]!><time="10:22:51.744-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:22:51: Ngen. Calling NGEN.exe]LOG]!><time="10:22:51.760-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:12: InstallServices. Installing new services]LOG]!><time="10:23:12.445-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: WriteEnvironmentStrings. Updating environment strings]LOG]!><time="10:23:13.116-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmSetServiceConfig. Sets WMI ServiceRootDir and configures CCMEXEC service.]LOG]!><time="10:23:13.116-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmRegisterWinTaskRollback. Rolls back the changes made by CcmRegisterWinTask.]LOG]!><time="10:23:13.381-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmRegisterWinTask. Registers tasks with Windows Task Scheduler.]LOG]!><time="10:23:13.397-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmRollbackEvalTask. Rollback the creattion of Configuration Manager Client evaluation tasks.]LOG]!><time="10:23:13.412-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmCreateEvalTask. Create Configuration Manager Client evaluation tasks.]LOG]!><time="10:23:13.428-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: SmsMigrateInventory. Migrating SMS Legacy Client inventory settings]LOG]!><time="10:23:13.631-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmEnableAppVIntegration. Enable Configuration Manager Client integration with App-V.]LOG]!><time="10:23:13.631-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmConfigDCOM. Configures registry key permissions for the DCOM Components passed from CcmConfigDCOMInit.]LOG]!><time="10:23:13.662-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: SmsShellNotify. Notifies the shell for the file-association icon changes.]LOG]!><time="10:23:13.693-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: SmsSetClientConfig. Applies the configuration placed by SmsSetClientConfigInit and configures client framework.]LOG]!><time="10:23:13.709-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:13: CcmInitializePolicy. Sets and initializes default policy.]LOG]!><time="10:23:13.724-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: CcmRegisterWFGina. Registers Write Filter Gina.]LOG]!><time="10:23:16.283-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: CcmRegisterWFGinaRollback. Rolls back the changes made by CcmRegisterWFGina.]LOG]!><time="10:23:16.298-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: CcmClearServiceSetupStamp. Clear the time stamp for blocking the ccmexec service from starting up during upgrade.]LOG]!><time="10:23:16.314-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: CcmRegisterProduct. If product is registered in MSI database, then product is registered with WMI.]LOG]!><time="10:23:16.329-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: CcmRegisterProductRollback. Calls CcmUnregisterProduct. Deletes the instance from the WMI in the Configuration Manager namespace using the ProductCode instance in the session.]LOG]!><time="10:23:16.345-120" date="07-01-2014"
component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: SmsInstallPrepDrvr. Installing Software Metering PREP Driver]LOG]!><time="10:23:16.345-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:16: StartServices. Starting services]LOG]!><time="10:23:16.439-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:17: CcmStartService. Starts the ccmexec service.]LOG]!><time="10:23:17.484-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:17: SmsCleanupDesktopMigrationInfo. Deletes backed up information on the disk.]LOG]!><time="10:23:17.499-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:17: SmsClientInstallSucceeded. Sends a wmi event to indicate client installation succeeded.]LOG]!><time="10:23:17.499-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:17: InstallFinalize. ]LOG]!><time="10:23:17.515-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:17: RollbackCleanup. Removing backup files]LOG]!><time="10:23:17.655-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[MSI: Action 10:23:17: RemoveExistingProducts. Removing applications]LOG]!><time="10:23:17.687-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="msiutil.cpp:314">
<![LOG[File C:\Windows\ccmsetup\{59A0EA77-D28C-4286-83A6-04BB57B9CDD6}\client.msi installation succeeded.]LOG]!><time="10:23:17.827-120" date="07-01-2014" component="ccmsetup" context="" type="1" thread="3556" file="msiutil.cpp:831">
<![LOG[A Fallback Status Point has not been specified. Message with STATEID='400' will not be sent.]LOG]!><time="10:23:17.827-120" date="07-01-2014" component="ccmsetup" context="" type="1" thread="3556" file="ccmsetup.cpp:9428">
<![LOG[Deleted file C:\Windows\ccmsetup\ccmsetup.xml]LOG]!><time="10:23:17.827-120" date="07-01-2014" component="ccmsetup" context="" type="1" thread="3556" file="ccmsetup.cpp:9156">
<![LOG[Task 'Configuration Manager Client Upgrade Task' does not exist]LOG]!><time="10:23:17.843-120" date="07-01-2014" component="ccmsetup" context="" type="0" thread="3556" file="wintask.cpp:571">
<![LOG[CcmSetup is exiting with return code 0]LOG]!><time="10:23:17.843-120" date="07-01-2014" component="ccmsetup" context="" type="1" thread="3556" file="ccmsetup.cpp:10540">
Here is Clientidmanagerstartup.log:
<![LOG['RDV' Identity store does not support backup.]LOG]!><time="10:26:18.985-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="3336" file="ccmidstore.cpp:372">
<![LOG[Raising event:
[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of SMS_RemoteClient_Reassigned
ClientID = "GUID:523B833D-AB79-4DBC-B026-F01F1549ED3F";
DateTime = "20140701082618.985000+000";
LastAssignedSite = "";
MachineName = "KIEVM-XENE01";
NewAssignedSite = "EME";
ProcessID = 3652;
SiteCode = "EME";
ThreadID = 3336;
]LOG]!><time="10:26:19.001-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="3336" file="event.cpp:706">
<![LOG[Read SMBIOS (encoded): 56004D0077006100720065002D00340032002000320062002000300065002000610035002000300031002000310033002000360030002000300034002D0061003000200031006400200062003900200032003800200061003500200063006200200066003100200034006300]LOG]!><time="10:26:19.266-120"
date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="smbiosident.cpp:118">
<![LOG[Evaluated SMBIOS (encoded): 56004D0077006100720065002D00340032002000320062002000300065002000610035002000300031002000310033002000360030002000300034002D0061003000200031006400200062003900200032003800200061003500200063006200200066003100200034006300]LOG]!><time="10:26:19.266-120"
date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="smbiosident.cpp:184">
<![LOG[No SMBIOS Changed]LOG]!><time="10:26:19.266-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="smbiosident.cpp:65">
<![LOG[SMBIOS unchanged]LOG]!><time="10:26:19.266-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="ccmid.cpp:671">
<![LOG[SID unchanged]LOG]!><time="10:26:19.266-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="ccmid.cpp:688">
<![LOG[HWID unchanged]LOG]!><time="10:26:19.266-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="ccmid.cpp:705">
<![LOG[GetSystemEnclosureChassisInfo: IsFixed=FALSE, IsLaptop=FALSE]LOG]!><time="10:26:19.281-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="ccmid.cpp:215">
<![LOG[Windows To Go requires a minimum operating system of Windows 8]LOG]!><time="10:26:19.297-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="util.cpp:2902">
<![LOG[Computed HardwareID=2:235672F0CA7CA27255D20470050155D4B91872C8
Win32_SystemEnclosure.SerialNumber=<empty>
Win32_SystemEnclosure.SMBIOSAssetTag=<empty>
Win32_BaseBoard.SerialNumber=None
Win32_BIOS.SerialNumber=VMware-42 2b 0e a5 01 13 60 04-a0 1d b9 28 a5 cb f1 4c
Win32_NetworkAdapterConfiguration.MACAddress=00:50:56:AB:6A:BB]LOG]!><time="10:26:19.297-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="ccmid.cpp:476">
<![LOG[Persisted hardware IDs in CCM_ClientIdentificationInformation=@:
HardwareID1=2:235672F0CA7CA27255D20470050155D4B91872C8
HardwareID2=B332A505010000FA]LOG]!><time="10:26:19.297-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="2104" file="ccmid.cpp:575">
<![LOG[RenewalTask: Executing renewal task.]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="regtask.cpp:2335">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="ccmcert.cpp:4073">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="ccmcert.cpp:4131">
<![LOG[Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
ClientID = "GUID:523B833D-AB79-4DBC-B026-F01F1549ED3F";
DateTime = "20140701082640.481000+000";
HRESULT = "0x87d00280";
ProcessID = 3652;
ThreadID = 768;
]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="event.cpp:706">
<![LOG[Unable to find PKI Certificate matching SCCM certificate selection criteria. 0x87d00280]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="2" thread="768" file="ccmgencert.cpp:3590">
<![LOG[RenewalTask: Certificate store/settings have changed, but target certificate has not.]LOG]!><time="10:26:40.481-120" date="07-01-2014" component="ClientIDManagerStartup" context="" type="1" thread="768" file="regtask.cpp:2365">
And other logs are looking fine....

SCCM 2012 CLSID APPID DCOM DEFAULT PERMISSIONS

Similar Messages

Maybe you are looking for