SCCM 2012 CU1: client patching needed?

Hi,
We installed SCCM 2012 R2 patch on the sccm server some time ago.
Now I wonder:
-do we need to take specific actions to update existing clients? -probably yes -deploying the package sccm 2012 client that the upgrade installed?-
-new deployed clients take the CU1 update automatically in their deploy, correct (I noticed that somewhere in a log if I remember correct)
-what would be the impact if we do not take actions (as for now no issues).
J.
Jan Hoedt

Yes, you need to deploy CU1 to the clients -- it is in no way automatic (unfortunately).
Here's the official guidance for deploying updates: http://technet.microsoft.com/en-us/library/jj553405.aspx
There aren't any specific negative ramifications of not doing so, but anything added by CU1 -- like fixes -- won't affect the client if the client doesn't have the CU installed also.
Jason | http://blog.configmgrftw.com | @jasonsandys

Similar Messages

SCCM 2012 R2 Client only showing 2 items under Actions

I've enable AD Forest Discovery on Primary Site also checked Automatically create AD site boundaries when they are discovered and Automatically create IP address range boundaries for IP subnets when they are discovered.
I didn't change this (default) Disable AD Forest Discovery on CAS.
I am still running SCCM 2007 R3 SP2 in Production environment. Do I need to remove all the boundaries first on SCCM 2007? Before I could install SCCM 2012 R2 client?
The reason that I manually install SCCM 2012 R2 client to my test computers just want to see if the SCCM 2012 R2 client will install without any issues. Right now, there's :(
On my Client Push Installation Properties, I haven't Enable automatic site-wide push installation. I just don't want SCCM 2012 R2 client is automatically pushing it out. Should I enable this? Is there any effect?
Two nights ago, I manually deploy SCCM 2012 R2 client (right click to deploy SCCM Client) to my test Win7x64 Enterprise and Win8.1x64 Enterprise. Until this morning Actions are not fully there (it should be total 11)
SCCM 2012 R2 client (version 5.00.7958.1000) installed but SCEP 2012 is not install (I think there's a problem here) since I checked the Actions button on both of Win7x64 Enterprise and Win8.1x64 Enterprise are only showing 2 Actions:
1. Machine Policy Retrieval & Evaluation Cycle
2. User Policy Retrieval & Evaluation Cycle
I've checked on both of Win7x64 Enterprise and Win8.1x64 Enterprise logs (using CMTrace):
1. CcmExec.log -> no errors
2. LocationServices.log -> Current AD site of machine is Default-First-Site-Name
3. ClientLocation.log -> It knows my new MP (correct one)
4. ClientIDManagerStartup.log -> with errors below
ClientIDManagerStartup.log has lots of RED errors (same one):
<![LOG[RegTask: Failed to send registration request message. Error: 0x8000000a]LOG]!><time="11:26:13.695+420" date="07-03-2014" component="ClientIDManagerStartup" context="" type="3" thread="1716"
file="regtask.cpp:1297">
I am hoping someone will be able to point me to the right direcly, please. Thanks, Reza
Reza Prawirasatya

Idan,
Thanks for the info.
I have check this registry below:
Check in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Mobile Client
It's pointing to my new site code of SCCM 2012 R2 (it's not SCCM 2007 site code).
What I did wrong I deploy SCCM 2012 Client Custom Settings to a collection that I created and also Antimalware Policies to that collection as well where that collection has 0 (none members).
So I deleted and just simply pointed both SCCM 2012 Client Custom Settings and Antimalware Policies to All Systems and all my test computers (workstations & servers) have SCCM 2012 R2 client along with SCEP 2012.
I have more questions below:
What's the best way for me to approach this SCCM 2012 R2 Client push to a test computers (workstations and servers).
I have SCCM 2007 R3 SP2 is still running in Production, currently Boundaries set as IP subnet (not using AD Site, it used but I changed it 2 years ago).
Now, SCCM 2012 R2 Primary Site set Enable AD Forest Discovery with Automatically create AD & Automatically create IP address range boundaries for IP subnets.
Of course, by turning this option above, it will pick up lots of different IP subnets. Even the one our sister company (lots of different domain).
1. In SCCM 2012 R2 Boundary Groups, I set Default-First-Site-Name (AD Site), under Site Systems tab, I have also my Primary Site SCCM 2012 R2 here.
Here's the questions:
1. Do I need to add IP subnet in SCCM 2012 R2 Boundary Groups? Do I need to add let's say 10.xxx.20.xxx (IP subnet here).
2. Also, do I need to delete IP subnet in SCCM 2007 Boundaries that correspond to that IP subnet? Let's say I have 10.xxx.20.xxx (IP subnet here) and remove this one since I have added on number 1?
Reza Prawirasatya

SCCM 2012 R2 client version 1101 and 1104 queries

There are several samples of collection query code for SCCM 2012 R2 client version 5.00.7958.1000, which is the base R2 client version. Patches can change this to 5.00.7958.1101 and 5.00.7958.1104. But there is a problem. These two patches
display as 1101 and 1104 when you go to Control Panel\Configuration Manager\General tab but when you go to Programs and Features and look in there the DisplayVersion is 5.00.7958.1000--so all query code samples are unable to different between the base versions
and version 1101 and 1004. I have been unable to find out how to write a query that finds version s 1101 and 1104. Does anyone know how to do this? Thanks.

Use ClientVersion from SMS_R_System within a console query or ClientVersion0 from V_R_system in a SQL query.
Even this can be deceptive though because the agent only reflects the highest version number of one of its subcomponets. This post, specific to 2007, describes the complexity: http://blog.configmgrftw.com/configmgr-client-hotfix-versioning/.
Specific to your question though, why do you care if either of these hotfixes are distributed to your clients? 2905002 is only necessary during WinPE (and if you are actually not using download on demand content during OSD) and 2910552 is only applicable
if you are rolling out Win 8.1 using a single TS to your XP systems using a refresh methodology.
Jason | http://blog.configmgrftw.com

SCCM 2012 R2 Clients are not retrieving policy

Hi - I know this question has been asked many times before - but I have tried almost everything and a no closer to solving the problem.
Background: Recently a SCCM 2012 SP1 single stand-alone site was upgraded to SCCM 2012 R2. The site is a single stand-alone primary site with a single DP, single MP, using mixed mode
(HTTP). The R2 upgrade ran without any problem and all SCCM components are showing as healthy.
A few test SCCM 2012 SP1 clients were upgraded to the R2 client using client-push.
However the upgraded clients are not retrieving policy from the Management Point. In the Actions Tab of the SCCM client, only Machine Policy Retrieval and User Policy Retrieval are available. But kicking of those actions does not
result in any of the advertised applications, Task Sequences becoming available. Infact Custom Client Settings are not being set either (e.g. Organisation Name in software Center).
I have checked and rechecked the following:
The upgrade of the client completed successfully (checked ccmsetup.log) and the version number went from 5.00.7804.1000 (SP1) to 5.00.7958.1000 (R2).
The MP health in the SCCM console is showing healthy.
The MP access URL's load correctly when run from SCCm client computers
“http://<ServerName>/sms_mp/.sms_aut?mplist” is ok
“http://<ServerName>/sms_mp/.sms_aut?mpcert” is ok
The SCCM clients are assigned to the site correctly – verified via the SCCM client and
ClientLocation.Log
ClientIDManager.Log is not showing any errors
CCMExec.log and ExecMgr.log don't show any advertisements being executed (Execmgr.log is almost empty and only has "Software ditrbution site settings policy does not yet exist on the client). If the client is not yest
registered this is expected behaviour")
The SCCM clients are Approved and NOT Blocked in SCCM
I have attempted to upgrade the SCCM client and also completely removed and reinstalled - and both have the same result (no client policy dpwnloaded)
I have also deleted the above clients completely from SCCM, Run divoery again and pushed the client to the machines again ...with the same result (SCCM client installs, assigns to correct site and then no policy downloaded)
SCCM 2012 Boundaries are configured correctly and assigned to Boundary Groups correctly
The SCCM client’s do not have the firewall enabled
Changed boundary from AD Site to Subnet to IP Address Range: Same issue exists
Uninstalled MP role and reinstalled it: same Issue exists
Tried to connect to SCCm client using 3rd party SCCM Client center tool but cannot connect
??? Not sure what else to try ???

Hi all - sorry for the late response.
We managed to resolve the issue after logging a job with Microsoft Support.
The issue was that the SCCM 2012 R2 upgrade corrupted 2 tables in the SCCM Database - leading to corrupt SCCM client policies.
I am pasting the resolution email from Microsoft below:
(NOTE: This may not be the exact sypmtoms you are experiencing so do not implement this fix assuming it will fix your problem!)
ISSUE:
- All clients are unable to download policies from the server
CAUSE:
- Bad policies in the Database
RESOLUTION:
-Issue with PADbID - Run below query against SCCM DB to verify corrupt entries:
SELECT * FROM
ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
Confirmed Bad policies entries in the SCCM database
Run below query to delete the bad policy after which we resolved the issue:
Delete FROM ResPolicyMap
WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)"

Problem Installing SCCM 2012 R2 client on Windows Thin PC 7 (Windows Embedded)

Hi, I'm trying to install SCCM 2012 R2 client on Windows thin pc 7
I check the ccmsetup.log and it returned this:
Failed to get list of protected volume: List pointer is NULL (3)
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
DetectEWF failed with 0x80070003. ccmsetup
07/08/2014 08:06:26'' 2040 (0x07F8)
DetectWindowsEmbeddedWF failed with 0x80070003.
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
A Fallback Status Point has not been specified. Message with STATEID='304' will not be sent.
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
Cannot install over embedded OS with WF enabled on the system drive.
ccmsetup 07/08/2014 08:06:26''
2040 (0x07F8)
CcmSetup failed with error code 0x80004005 ccmsetup
07/08/2014 08:06:26'' 1960 (0x07A8)
Can somebody help me?
Thanks
Renzo
PD: Sorry for my bad English

Cannot install over embedded OS with WF enabled on the system drive.
You have to disable write filters on that device first.
Torsten Meringer | http://www.mssccmfaq.de

Installing and Managing SCCM 2012 R2 client in workgroup

Hi,
I'm trying to install sccm 2012 r2 client on a workgroup workstation, but i can't manage to put the client working.
Already tried this solutions
http://blogs.technet.com/b/anilm/archive/2012/05/06/managing-workgroup-clients-in-configuration-manager-2012.aspx
http://eskonr.com/2013/08/sccm-configmgr-2012-manage-workgroup-computers-for-deploymentremote-tools-etc/
if i use this commands to install the client the client don't install.
ccmsetup.exe /source:C:\client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=cm12lab.com
if i use this one same happens
Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX FSP=sccmserver DNSSUFFIX=dnssuffix
If i use this one the client gets installed and the site code assigned but nothing more. It shows at the sccm console, but don't receive informations from sccm i think
Ccmsetup.exe /mp:sccmserver SMSSITECODE=XXX SMSSLP=sccmserver DNSSUFFIX=dnssuffix
on the client, clicking in Site tab and configure settings, the site code is there, clicking in Find Site returns error saying that cant find the site. on the locationservices log i'm getting
Policy prevents failover to WINS for lookup
Unable to retrieve AD Site membership
No Location reply received from xxxxxx.domain.xxx
No location reply received from xxxxxx
thks in advance

It should work just by:
Copy the client files (the whole directory) to the workgroup computer (c:\tmp\Client)
Run ccmsetup.exe /source:c:\tmp\Client SMSSITECODE=PRI SMSMP=sgcmcen.cm12lab.com DNSSUFFIX=CM12LAB.COM
Examine %windir%\ccmsetup\logs\ccmsetup.log for more information if the client doesn't install at all, possible causes might be corrupted WMI, lack of BITS (if running Windows 2003 server).. in these cases you could run WMIDiag (http://www.microsoft.com/en-us/download/details.aspx?id=7684)
to get more info on the errors and how to fix them.
Couple of checks:
DNS is working correctly both ways? Workgroup machine can find ConfigMgr server and ConfigMgr server can find workgroup machine by name? You can test this by running
nslookup <target.fqdn> on both
Workgroup computer is in the boundary / boundary group that has a site server assigned

Coexistence of the SCCM 2012 R2 client and the App-V Full Infrastructure Model

Our environment currently has the App-V Full Infrastructure Model deployed with Windows 7 clients using hundreds of App-V apps. We plan to deploy SCCM 2012 R2 to the environment.
What is the affect on our Windows 7 users when the SCCM 2012 R2 client is deployed - will their existing App-V apps (utilizing the App-V Full Infrastructure Model) continue to function? Or will SCCM 'take over' all App-V functionality?
The only documentation I can find on this is one paragraph in the App-V and ConfigMgr 2012 White Paper (http://download.microsoft.com/download/1/5/A/15AD0DD6-40A8-49E3-86D6-C21E5D0BC7F8/App-V%20and%20ConfigMgr%202012%20White%20Paper.pdf) which
states:
Q: Is it possible to perform a phased migration from an App-V standalone or App-V Full Infrastructure
to Configuration Manager virtual application management?
A: Yes, migration to Configuration Manager virtual application management begins with deployment of
an App-V application from Configuration Manager 2012. Upon the first deployment in Configuration
Manager 2012, no new applications can be deployed via other methods, but all previously deployed
packages will be retained.
A blog post here (http://www.applepie.se/config-mgr-2012-and-app-v) seems to indicate this is expected behavior.
But then, this contradicts what Microsoft says on the TechNet website (http://technet.microsoft.com/en-us/library/jj822982.aspx):
Configuration Manager begins to manage virtual applications on a client after the first deployment of a virtual application. After this, all App-V applications on the computer must be managed by Configuration Manager.
Does anyone have any opinions or experience on this? Or further information?
My Microsoft Core Infrastructure & Systems Management blog -
blog.danovich.com.au

As soon as an App-V package is deployed to a user/device via SCCM then it takes over the management of the client on that device, therefore App-V packages coming from the App-V publishing server will no longer be deployed to that device.
I would assume that full cached apps would continue to be run on the local device but new content would no longer be deployed from it.
Cheers
Paul | sccmentor.wordpress.com

Error installing SCCM 2012 SP1 client

Hi All,
I am getting the following error, detailed in the client.msi.log, when trying to install the SCCM 2012 SP1 client on a couple of windows 2008 R2 servers.
Error 1904. Module C:\Windows\CCM\StatusAgentProxy.dll failed to register. HRESULT -2147010895
The ccmsetup.log details the same message without Error 1904 indicated.
I am installing the client using the SUP method, which has worked without any problems on all 180 other windows servers I have done. ccmsetup starts and downloads all pre reqs required for the client rollout, but it then hits this error and does not
finish the installation.
Any help would be much appreciated?
Regards PowerShell90

Hi,
I've seen this issue a couple of times and usually it's related to incorrect Versions of C++ Library installed on the system you try to install the Client. Try and remove any existing installations, reboot and install this version;
http://www.microsoft.com/en-us/download/details.aspx?id=26368
Let me know how it goes.

SCCM 2012 R2 CU2 Update - Need to update console or clients as well?

Hi,
I am going to be installing the following update onto out SCCM 2012 server:
http://support.microsoft.com/kb/2970177/en-us
I am not 100% sure but is there a need to update all installed consoles and/or all sccm clients after the CU2 installation?

Site server, console and clients needs to be updated.
Full installation guide : http://www.systemcenterdudes.com/sccm-2012-r2-cu2-installation-guide/

New SCCM 2012 client machines still getting SCCM 2012 SP1 client not the new SCCM 2012 SP1 CU3 client

Hi,
I've successfully (as far as I can tell) deployed SCCM 2012 SP1 CU3 and all my existing clients are showing a client version of 5.00.7804.1400. But when I setup a new client system recently I noticed that the client version was showing 5.00.7804.1000,
and not 5.00.7804.1400.
For new client systems, do I need to redeploy the packages that were created for SCCM 2012 SP1 CU3 so that the new systems get the new SCCM 2012 SP1 CU3 client?
Thanks,
Nick

Hi,
Here's some good information to look over:
http://sccmfaq.wordpress.com/2013/09/24/sccm-2012-include-cu-in-osd/
I haven't followed these instructions myself, since I haven't really had any good reason to include CUs during the initial installation process. I use this method instead and I've never run into any problems:
http://www.ronnipedersen.com/2013/06/installing-sccm-2012-sp1-cu2-quick-start-guide/
Don't retire TechNet! -
(Don't give up yet - 12,575+ strong and growing)

SCCM 2012 R2 Client TroubleShooting

Hello,
I have a SCCM 2012 R2 Upgraded environment where I have 1000+ clients. but only 600 clients are reporting active in the console.
Atleast 200 clients doesn't have the site information at all.
Rest of the 200 is reporting with Client as No
Kindly help me with the Troubleshooting steps for the same.

Most common issues for client installation failures are:
SCCM server unable to ping the machine or resolve name.
FW enabled on remote machine.
Unable to access admin shares (C$, Admin$) on remote machine.
WMI issues on remote machine.
BITS service disabled in remote machine.
Less than 500MB free space on C drive.
Ports Used During Configuration Manager Client Deployment
Windows Firewall and Port Settings for Client Computers in Configuration Manager
Troubleshoot administrative shares
Computer Client Hardware Requirements
Check that ccmsetup folder was created under C:\Windows.
Check the following 2 files with
CMTrace.exe: ccmsetup.log and
client.msi.log under
C:\Windows\ccmsetup\Logs and look for errors.
For client with no site information, you need to make sure your boundary group match client IP or AD site.
Some more troubleshooting links:
http://deployos.com/blog/2012/10/01/using-and-troubleshooting-client-push-in-sccm
http://eskonr.com/2010/11/sccm-client-installation-troubleshooting-steps-check-list/
http://blogs.technet.com/b/configurationmgr/archive/2009/08/10/troubleshooting-issues-where-clients-are-not-reporting.aspx
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

SCCM 2012: install individual patch, not visible in monitoring

Hi,
I was deploying a single Windows patch via SCCM 2012. Now this seems to work fine (I can see the deployment status) BUT I cannot see it in monitoring.
When I add the patch to a "Software Update Groups", I CAN see it in monitoring.
My question: what's the logic behind this? Why would I use an individual deployment if there is no monitoring built in. I'd need to know the KB then look into the software updates, select it and select the deployment status. Then also nobody sees that this
deployment exists since it doesn't appear anywhere else.
In other words fully useless(?)
Please advise.
J.
Jan Hoedt

Hi,
You can follow up a single update using a report or the Software Updates view on required/installed column but not under montioring,.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Couldn't verify 'C:\Windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x80096001 - SCCM 2012 R2 Client Deployment

Hi All,
I installed SCCM 2012 R2 one primary site from one of our customer & using SQL 2012 SP1 DB at the back-end.
Facing Issues while deploying agent from one of our client machine - OS - window 7 Professional Sp1:
==========[ ccmsetup started in process 3828 ]==========
ccmsetup 25-02-2014 02:20:37 PM
284 (0x011C)
Running on platform X86 ccmsetup
25-02-2014 02:20:37 PM 284 (0x011C)
Updated security on object C:\Windows\ccmsetup\cache\.
ccmsetup 25-02-2014 02:20:37 PM
284 (0x011C)
Launch from folder C:\Windows\ccmsetup\ ccmsetup
25-02-2014 02:20:37 PM 284 (0x011C)
CcmSetup version: 5.0.7958.1000 ccmsetup
25-02-2014 02:20:37 PM 284 (0x011C)
Successfully started the ccmsetup service ccmsetup
25-02-2014 02:20:37 PM 332 (0x014C)
In ServiceMain ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Folder 'Microsoft\Configuration Manager' not found. Task does not exist.
ccmsetup 25-02-2014 02:20:37 PM
332 (0x014C)
CcmSetup is exiting with return code 0 ccmsetup
25-02-2014 02:20:37 PM 332 (0x014C)
Running on 'Microsoft Windows 7 Professional ' (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 18
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/config:C:\Windows\ccmsetup\MobileClientUnicode.tcf" "/RetryWinTask:1"
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice "/config:C:\Windows\ccmsetup\MobileClientUnicode.tcf" "/RetryWinTask:1"
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
SslState value: 224 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPPORT: 80 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPSPORT: 443 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPSSTATE: 480 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMHTTPSCERTNAME: ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
FSP: SCCM.MYDOMAIN.COM ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
CCMCERTISSUERS: CN=MYDOMAIN-CA-CA; DC=MYDOMAIN; DC=COM
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
CCMFIRSTCERT: 1 ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcf
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Retry time: 10 minute(s)
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
MSI log file: C:\Windows\ccmsetup\Logs\client.msi.log
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
MSI properties: INSTALL="ALL" SMSSITECODE="PRI" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="480" FSP="SCCM.MYDOMAIN.COM" CCMCERTISSUERS="CN=MYDOMAIN-CA-CA; DC=MYDOMAIN; DC=COM"
CCMFIRSTCERT="1" ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Source List: ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
\\SCCM.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
\\SCCMDMZ.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
\\SCCM.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
\\SCCMDMZ.MYDOMAIN.COM\SMSClient
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
MPs: ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
SCCM.MYDOMAIN.COM
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
No version of the client is currently detected.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Folder 'Microsoft\Configuration Manager' not found. Task does not exist.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Attempting #1 retry. Max 5 retries. ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Updated security on object C:\Windows\ccmsetup\.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Sending Fallback Status Point message to 'SCCM.MYDOMAIN.COM', STATEID='100'.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Failed to get client version for sending messages to FSP. Error 0x8004100e
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Params to send FSP message '5.0.7958.1000 Deployment '
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Request failed: 500 Internal Server Error
FSPStateMessage
25-02-2014 02:20:37 PM 1480 (0x05C8)
Running as user "SYSTEM" ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
Detected 69650 MB free disk space on system drive.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Checking Write Filter Status. ccmsetup
25-02-2014 02:20:37 PM 1480 (0x05C8)
This is not a supported write filter device. We are not in a write filter maintenance mode.
ccmsetup 25-02-2014 02:20:37 PM
1480 (0x05C8)
Performing AD query: '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=PRI))'
ccmsetup 25-02-2014 02:20:38 PM
1480 (0x05C8)
OperationalXml '<ClientOperationalSettings><Version>5.00.7958.1000</Version><SecurityConfiguration><SecurityModeMask>0</SecurityModeMask><SecurityModeMaskEx>448</SecurityModeMaskEx><HTTPPort>80</HTTPPort><HTTPSPort>443</HTTPSPort><CertificateStoreName></CertificateStoreName><CertificateIssuers>CN=MYDOMAIN-CA-CA;
DC=MYDOMAIN; DC=COM</CertificateIssuers><CertificateSelectionCriteria></CertificateSelectionCriteria><CertificateSelectFirstFlag>1</CertificateSelectFirstFlag><SiteSigningCert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iteSigningCert></SecurityConfiguration><RootSiteCode>PRI</RootSiteCode><CCM>
<CommandLine>SMSSITECODE=PRI</CommandLine> </CCM><FSP> <FSPServer>SCCM.MYDOMAIN.COM</FSPServer> </FSP><Capabilities SchemaVersion ="1.0"><Property Name="SSLState" Value="0" /></Capabilities><Domain
Value="MYDOMAIN.COM" /><Forest Value="MYDOMAIN.COM" /></ClientOperationalSettings>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Unable to open Registry key Software\Microsoft\CCM. Return Code [80070002]. Client HTTPS state is Unknown.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
The MP name retrieved is 'SCCM.MYDOMAIN.COM' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
MP 'SCCM.MYDOMAIN.COM' is compatible ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
Retrieved 1 MP records from AD for site 'PRI'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Retrived site version '5.00.7958.1000' from AD for site 'PRI'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
SiteCode: PRI ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
SiteVersion: 5.00.7958.1000
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Only one MP SCCM.MYDOMAIN.COM is specified. Use it.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Searching for DP locations from MP(s)... ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
Current AD site of machine is Default-First-Site
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Local Machine is joined to an AD domain LocationServices
25-02-2014 02:20:39 PM 1480 (0x05C8)
Current AD forest name is MYDOMAIN.COM, domain name is MYDOMAIN.COM
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
DhcpGetOriginalSubnetMask entry point is supported.
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Begin checking Alternate Network Configuration
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Finished checking Alternate Network Configuration
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Adapter {95A6D3CE-4F28-4E55-A29A-FF3F1A317C61} is DHCP enabled. Checking quarantine status.
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Adapter {6024AB68-EB5E-4370-BD9E-8B2CEFE261A8} is DHCP enabled. Checking quarantine status.
LocationServices 25-02-2014 02:20:39 PM
1480 (0x05C8)
Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="PRI"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0"
UseInternetDP="0">
<ADSite Name="Default-First-Site"/>
<Forest Name="MYDOMAIN.COM"/>
<Domain Name="MYDOMAIN.COM"/>
<IPAddresses>
<IPAddress SubnetAddress="10.0.0.0" Address="10.10.10.192"/>
</IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
' ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
Sending message header '<Msg SchemaVersion="1.1"><ID>{F6331322-941A-4E44-974F-A755B1B016A4}</ID><SourceHost>POOJASETHI</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:POOJASETHI:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>SCCM.MYDOMAIN.COM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2014-02-25T08:50:39Z</SentTime><Body
Type="ByteRange" Offset="0" Length="1126"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
CCM_POST 'HTTP://SCCM.MYDOMAIN.COM/ccm_system/request'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Content boundary is '--aAbBcCdDv1234567890VxXyYzZ'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Received header '<Msg SchemaVersion="1.1">
<ID>{14ADB6F1-95C1-4EEF-B8BA-16CD020ACFCF}</ID>
<SourceID>GUID:526CE573-6351-407E-AC2A-2C3927979AD9</SourceID>
<SourceHost>SCCM</SourceHost>
<TargetAddress>direct:POOJASETHI:LS_ReplyLocations</TargetAddress>
<ReplyTo>MP_LocationManager</ReplyTo>
<CorrelationID>{00000000-0000-0000-0000-000000000000}</CorrelationID>
<Priority>3</Priority>
<Timeout>600</Timeout>
<Capabilities><Property Name="SSL" Version="1"/></Capabilities><ReplyCapabilities><AllowRegistrationReset>direct:SCCM:ClientRegistration</AllowRegistrationReset></ReplyCapabilities><TargetHost>POOJASETHI</TargetHost><TargetEndpoint>LS_ReplyLocations</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>https</Protocol><SentTime>2014-02-25T08:50:39Z</SentTime><Body
Type="ByteRange" Offset="0" Length="3494"/><Hooks><Hook3 Name="zlib-compress"/><Hook Name="authenticate"><Property Name="Signature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roperty><Property
Name="AuthSenderMachine">SCCM;SCCM.MYDOMAIN.COM;</Property><Property Name="MPSiteCode">PRI</Property></Hook></Hooks><Payload Type="inline"/></Msg>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Received reply body '<ContentLocationReply SchemaVersion="1.00"><ContentInfo PackageFlags="16777216"><ContentHashValues/></ContentInfo><Sites><Site><MPSite SiteCode="PRI" MasterSiteCode="PRI"
SiteLocality="LOCAL" IISPreferedPort="80" IISSSLPreferedPort="443"/><LocationRecords><LocationRecord><URL Name="http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003" Signature="http://SCCM.MYDOMAIN.COM/SMS_DP_SMSSIG$/PRI00003"/><ADSite
Name="Default-First-Site"/><IPSubnets><IPSubnet Address="10.0.0.0"/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SCCM.MYDOMAIN.COM</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="1"/><Locality>LOCAL</Locality></LocationRecord><LocationRecord><URL
Name="http://SCCMDMZ.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003" Signature="http://SCCMDMZ.MYDOMAIN.COM/SMS_DP_SMSSIG$/PRI00003"/><ADSite Name="Default-First-Site"/><IPSubnets><IPSubnet Address="172.16.10.0"/><IPSubnet
Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SCCMDMZ.MYDOMAIN.COM</ServerRemoteName><DPType>SERVER</DPType><Windows
Trust="1"/><Locality>FALLBACK</Locality></LocationRecord></LocationRecords></Site></Sites><ClientPackage FullPackageID="PRI00003" FullPackageVersion="1" FullPackageHash="BFC11E099E8F451107B43E0DBEFD93B01DB2D6453DA74F8A2CB94B73D676C1CD"
MinimumClientVersion="5.00.7958.1000" RandomizeMaxDays="7" ProgramEnabled="false" LastModifiedTime="30354761;897103744" SiteVersionMatch="true" SiteVersion="5.00.7958.1000" EnablePeerCache="true"/><RelatedContentIDs/></ContentLocationReply>'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Found local location 'http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Found remote location 'http://SCCMDMZ.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Discovered 1 local DP locations. ccmsetup
25-02-2014 02:20:39 PM 1480 (0x05C8)
PROPFIND 'http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Using DP location http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
GET 'http://SCCM.MYDOMAIN.COM/SMS_DP_SMSPKG$/PRI00003/ccmsetup.cab'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Couldn't verify 'C:\Windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x80096001
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Sending Fallback Status Point message to 'SCCM.MYDOMAIN.COM', STATEID='316'.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Failed to get client version for sending messages to FSP. Error 0x8004100e
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Params to send FSP message '5.0.7958.1000 Deployment Error 0x80004005. Pre-req file name: C:\Windows\ccmsetup\ccmsetup.cab'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Request failed: 500 Internal Server Error
FSPStateMessage
25-02-2014 02:20:39 PM
1480 (0x05C8)
Failed to extract manifest cab file with error 0x80004005. Try next location.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Enumerated all 1 local DP locations but none of them is good. Fallback to MP.
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
GET 'HTTP://SCCM.MYDOMAIN.COM/CCM_Client/ccmsetup.cab'
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
Couldn't verify 'C:\Windows\ccmsetup\ccmsetup.cab' authenticode signature. Return code 0x80096001
ccmsetup 25-02-2014 02:20:39 PM
1480 (0x05C8)
CcmSetup failed with error code 0x80004005
ccmsetup 25-02-2014 02:20:39 PM
284 (0x011C)
Please let me know any solution or workaround for this
Thanks Rahul$

Hi,
The client cannot verify the signature of ccmsetup.cab. I suggest you check the Trusted Root Certification Authorities in certificate store on the client to see whether a certificate is missing.
Try to enable verbose logging for SCCM client installation. Then check the log to see whether there are some useful information.(http://technet.microsoft.com/en-us/library/gg699356.aspx)
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Previously blocked client computers - now cannot install SCCM 2012 R2 client

Hello,
I have a Primary Site on SCCM 2012 R2. New installation of 2012 R2, not upgrade from SCCM 2007. My environment is pretty small for now, having added just few dept computers in the company.
We are using SCCM for Endpoint Security antivirus deployment. Some time ago I had not configured the Discovery methods correctly and the scep client started to install on few machines on which it was not supposed to be installed. I removed the clients then
(both remote and local uninstallation) but since the sccm client was getinng installed again - I had to Block these few machines. Now the problem is that I cannot install the scep client on these computers that have previously been blocked. I am sure the previous
block is the reason because these are about 6-7 machines and only they do not install. All others do install scep client. The installation process goes smooth on these problematic machines, ccmsetup folder gets created in C:\Windows, I follow the ccmsetup.log
and it says " <![LOG[CcmSetup is exiting with return code 0]LOG]!><time="12:33:56.415-180" date="10-08-2014" component="ccmsetup" context="" type="1" thread="3992"
file="ccmsetup.cpp:10875"> " at the end of the log which is what it is supposed to show when installation goes ok, then Ccmexec.exe process continues running but folder Microsoft Security Client in C:\Program Files never gets
created and no scep client gets installed.
I tried deleting the computers from the sccm console and discovering them anew - did not help. Tried even renaming the comp locally, after having it deleted from sccm console, then adding it anew hoping sccm will regard it as a new resource-again no good.
All these computers have the Approve, Block and Unblock buttons greyed out/inactive in console.
Has anyone had this same problem? Any ideas what can be done. Thank you.
Regards,
Hristo

Hi,
were you ever able to fix this?
I'm running in a similar issue here.
One single client was blocked, then deleted, lateron recreated (imported manually name and MAC address).
Now the client is unable to register itself in SCCM 2012 R2 (no CU yet).
Tried the usual stuff: uninstalled SCCM client, remove the entries of CCMsetup and SMS from registry, deleted the SMS certs from the computer personal
store and deleted the smscfg.ini from C:\Windows. Then re-installed the SCCM client
Client logs look fine, except ClientIDManagerStartup.log:
<![LOG[[RegTask] - Client is not registered. Sending registration request for GUID:F295F120-9C99-4D10-82B7-027FDD86B5F6 ...]LOG]!><time="14:46:11.555-60" date="01-12-2015" component="ClientIDManagerStartup" context=""
type="1" thread="6320" file="regtask.cpp:1609">
<![LOG[[RegTask] - Server rejected registration request: 3]LOG]!><time="14:46:12.616-60" date="01-12-2015" component="ClientIDManagerStartup" context="" type="3" thread="6320" file="regtask.cpp:1675">
On the server:
Begin validation of Certificate [Thumbprint 12923BCACDAE5B89547A25E54BF11E533163742F] issued to 'SMS'   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
Completed validation of Certificate [Thumbprint 12923BCACDAE5B89547A25E54BF11E533163742F] issued to 'SMS'   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
Encountered database error while verifying headers for client 'GUID:F3063334-69B4-471F-B158-56782E499F4A' (0x87d00238).   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
CCMValidateAuthHeaders failed (0x87d00238) to validate headers for client 'GUID:F3063334-69B4-471F-B158-56782E499F4A'.   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
A client is trying to re-register with an administrator revoked certificate: SMSID='GUID:F295F120-9C99-4D10-82B7-027FDD86B5F6'.   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
MP Reg: Processing completed. Completion state = 0   MP_RegistrationManager   12.01.2015 14:31:10   8600 (0x2198)
We are using HTTP for client communication.
Any ideas appreciated.
Michael

SCCM 2012 R2 clients not being automatically 'Approved'

We have a development SCCM 2012 R2 environment that consists of one server with the following roles:
-Component Server
-Distribution Point
-Management point
-Reporting services point
-Site database server
-Site server
-Site system
We're using this for OSD to deploy Windows 8.1 (we have MDT integrated). The problem lies in the fact that once systems are imaged and the client is installed on them, they do not get Approved, and therefore cannot receive any further OSD task sequences
to be reimaged, or any task sequence for that matter.
What are a list of things one should check in troubleshooting this? We've checked AD permissions on the System Management container, they look fine.
What else?

In the Administration workspace, go to Site Configuration, right click on Sites, and select Hierarchy Setttings.
The Client Approval and Conflicting Records tab has a 'Client approval method' section. Do you have "Automatically approve computers in trusted domains" selected? Are these clients a member of a trusted domain when the client is installed?
If you have "Manually approve each computer" selected, then all devices would have to be manually approved.
Regards,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you've found a bug or want the product worked differently,
share your feedback.
<-- If this post was helpful, please click "Vote as Helpful".

SCCM 2012 CU1: client patching needed?

Similar Messages

Maybe you are looking for