SCCM 2012: Forefront, allow updates from alternative sources

Hi,
I'd like to enable alternative sources for updating forefront antivirus (SCEP) on SCCM 2012.
There is a "Disable alternate sources (such as Windows Update, Microsoft Windows Server Update Services or UNC shares) for the initial definition update on client computers" in policies but, as description mentions, this is only for
INITIAL update.
Please advise howto/where to activate.
J.
Jan Hoedt

Hi,
You can configure multiple definition update sources and control the order in which they are assessed and applied. This is done in the
Configure Definition Update Sources dialog box when you create an antimalware policy.
How to Configure Definition Updates for Endpoint Protection in Configuration Manager
http://technet.microsoft.com/en-us/library/jj822983.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

[SCCM 2012 R2] How SCCM 2012 handles Software Update Revisions?

Hi All,
There are a lot of questions regarding how SCCM 2012 handles Software Update Revisions.
Does anyone know what happened if:
Windows update publish some update with revision #1
Same update downloaded and deployed via SCCM 2012
Windows update publish same update with revision #2 or any newer revision
What is happening with SCCM and already deployed and downloaded revision? How should I know what revision is really on my distribution points?
Thank you in advance.
Regards,

In WSUS Revision History is very simple:
Where I can find revision history in SCCM??? (please do not mention dates):
Possible scenario in SCCM:
Windows update publish revision #1 for one update
SCCM Download and Deploy same update and revision #1
Windows update change revision to #2
What SCCM does after this scenario?
Auto update Distribution Points with new revision of already deployed and downloaded update?
Clearly state in SCCM Console that there is new revision of already deployed and downloaded update and waiting for admin to act?
Just update the revision in SCCM Console and leave old revision od Distribution Points?????

Windows 8.1 will not get Forefront Client Updates from WSUS

Recently I noticed that my Windows 8.1 clients were not getting updates from WSUS 3.2. After some searching I found it was an issue with HTTPS and the solution was to disable HTTPS or enable TLS. So I enabled TLS on the Server 2008 R2 WSUS server
and that fixed the issue with my 8.1 clients not getting updates except for Forefront Endpoint Protection 2010. My SCCM server deploys the client fine but it is version 2.1 and normally the client and definition updates come from WSUS with the
latest client version being 4.5. However, my Windows 8.1 machines will not get the client updates even though they are automatically approved for all machines.
I am just wondering what else I can check or change to make sure my Windows 8.1 clients get the Forefront client updates as they should?? I am wondering if I manually install the 4.1 client update if it will take the client updates after that.
I only have about eight Windows 8.1 machines so if I have to do that by hand for now then I will and I think my organization will be moving to Server 2012 and SCCM 2012 this summer sometime.

I reread your post and have another suggestion. If your SCCM 2007 server is still deploying the old 2.1 FEP client version, then you should install the latest anti-malware platform update for the SCCM server so you can deploy it from there instead of WSUS:
http://support.microsoft.com/kb/2952678
http://blogs.msdn.com/b/minfangl/archive/2013/08/15/guidance-on-install-anti-malware-platform-updates-for-fep-2010-su1-and-scep-2012-sp1.aspx
Also, you may be affected by this:
"Anti-malware platform updates on MU will use special detection logic and applicability rules to make the anti-malware platform updates available only on computers with previous N-2 anti-malware platforms installed. For example, on April 8<sup>th</sup>,
anti-malware platform of version 4.5.x will be released on MU, and it will only be offered to computers where anti-malware platform version 4.3.x or 4.4.x is available. If a computer has FEP or SCEP client with version 4.1.x, it has to be upgraded to version
4.3.x first, then to the latest version (4.5.x). If a computer has FEP or SCEP client with version older than 4.1.x, because of the same N-2 rule, it has to be upgraded to 4.1.x first, then to 4.3.x, and then to the latest version (4.5.x). Required updates
will be kept on MU to ensure that this upgrade process is available for computers running older versions of the Microsoft anti-malware platform."
http://blogs.technet.com/b/configmgrteam/archive/2014/03/27/anti-malware-platform-updates-for-endpoint-protection-will-be-released-to-mu.aspx

Server 2012 R2 cannot update from 2008 R2 WSUS server

Our WSUS server is on a 2008 R2 VM. Updates for all 2008 R2 and lower servers, and Windows 7 clients work fine. I have one Server 2012 R2 in production and it cannot check for updates. It gets 800b0001 as the error code. I can
click on check for updates from Microsoft, then it does reach out to the Internet, download and install updates.
I also tried from my Win 8.1 laptop and I get error 8024402C. Any idea's?

I found in another thread the fix.
In regedit go to HKLM\Software\Microsoft\Update Services\Server\Setup and change "wYukonInstalled"
from a 1 to a 0.
Installer succeeds.
However now the Update Services console does not work. I get a connection error.
It's one thing after another with these things. I don't understand why Microsoft can't ever make something simple. IISReset did not cure this either.
The WSUS administration console was unable to connect to the WSUS Server via the remote API.
Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.
The WSUS administration console has encountered an unexpected error. This may be a transient error; try restarting the administration console. If this error persists,
Try removing the persisted preferences for the console by deleting the wsus file under %appdata%\Microsoft\MMC\.
System.IO.IOException -- The handshake failed due to an unexpected packet format.
Source
System
Stack Trace:
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.runTryCode(Object userData)
at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)
** this exception was nested inside of the following exception **
System.Net.WebException -- The underlying connection was closed: An unexpected error occurred on a send.
Source
Microsoft.UpdateServices.Administration
Stack Trace:
at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)
at Microsoft.UpdateServices.Administration.AdminProxy.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
at Microsoft.UpdateServices.UI.AdminApiAccess.AdminApiTools.GetUpdateServer(String serverName, Boolean useSecureConnection, Int32 portNumber)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.GetUpdateServer(PersistedServerSettings settings)
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.ConnectToServer()
at Microsoft.UpdateServices.UI.SnapIn.Scope.ServerSummaryScopeNode.get_ServerTools()

Prestage content no longer working after SCCM 2012 R2 CU1 update

I run SCCM 2012 R2 CU1 on a Windows 2008 R2 server.
I upgraded to CU1 in June, and today is the first time I've attempted to pre-stage a package since then. After pre-staging my package and getting the content out to the target DP, I went to properties of the DP, checked the box "Enable this
distribution point for prestage content", then hit Ok.
Next I went to distribute the content to the DP, however after going thru the wizard, nothing changes. There is no pending status, waiting on prestage content, that I had seen in the past when doing this task. I can go in and run the wizard
again, and the target DP shows up in the list, like I'd never initiated the push before.
Normal (non-prestaged) distributions work fine.
In troubleshooting this, I also noticed that I looking at the site status of the target DP, there are no status message entries for since I upgraded to CU1 (for that matter, none of my DP's have any entries since CU1). I did see a similar issue like
this in the forums
http://social.technet.microsoft.com/Forums/en-US/9491c2b1-37e6-46e3-9bb0-c5d673490d8a/component-status-not-updating-since-upgrade-from-sccm2012-sp1-cu3-to-sccm2012-r2?forum=configmanagergeneral but I don't have a backed up stat.mgr\retry inbox, it's empty.
I think this is related to why I can no longer prestage content, but I can't seem to find a reason for it. The fixes for R2 CU2 don't mention my issue here either
Anyone else seeing this?
Tony

Hi,
Please check SmsAdminUI.log and Smsprov.log after you distribute the content to the DP.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

After SCCM 2012 R2 CU4 update Client won't report status message back

We had SCCM 2012 R2 CU3, just updated it to CU4 (all site servers and clients) last week.
Right after the clients received the CU4 update (no reboot), I saw these started popping up the event log:
The ConfigMgr Client encountered a certificate for Management Point SCCM that could not be verified.
I checked online and it has to do with trusted root key mismatch, but there was no site change. The only thing we did was upgrading from CU3 to CU4.
Right now the symptom is that all these clients do not report status messages back to the MP so we have no idea how our deployments would go.

i am having what i think is a similar issue. i upgraded to CU4 and the only clients to report back in are my SCCM site server and my only DP server. no clients have reported in since. i checked a few clients and they did get the CU4 client update
and installed it but they are not reporting back
I have pretty much the same situation.
A successfully upgrade to SCCM 2012 r2 cu4 on the primary site.
Deployed the cu4 to a few computers which was successfully. Later I also deployed the cu4 to the primary site server and it turned out to be the only computer reporting back with the proper client version.
There is no errors or warnings in the event logs which could explain this strange issue. As far as I can tell the clients is operational but they are just not reporting back with the proper client version. A quick look at the sccm client
logs has also not revealed the root cause.
Any ideas would be appreciated a lot.
Per Dahl Christiansen

SCCM 2012: configure software update point

Hi,
I installed WSUS, installed the software update point on Windows 2012 (for SCCM 2012) with following commands:
Install-WindowsFeature -Name UpdateServices -IncludeManagementTools
cd 'C:\Program Files\Update Services\Tools\'
.\wsusutil.exe postinstall CONTENT_DIR=E:\WSUS
Add-CMSoftwareUpdatePoint -SiteCode "PRD" -SiteSystemServerName "CM01.contoso.com" -ClientConnectionType Intranet -WsusiisPort 8530 -WsusiissslPort 8531
Now I'm stuck. How do I configure the specific update (f.e. Windows 2012, forefront etc), download them to a certain folder?
Please advise.
J.
Jan Hoedt

It really isn't practical (or possible) to try to do an entire ConfigMgr implementation using PowerShell. I don't believe that you can choose your products using PoSH.
You will find a full list of cmdlets here
http://technet.microsoft.com/en-us/library/jj821831(v=sc.20).aspx
The following cmdlets are available to configure your software update infrastructure but I'm pretty sure none of them will help you with this.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

SCCM 2012 R2 - Software Update Point

I have two domains, one where the site server (SCCM) will be installed home office, and then another untrusted domain Management. This server will have site roles, SUP, and some others.
I want to create a site system server with DP, MP in the untrusted domain. In order to push out updates to clients in the untrusted domain, what do I need, in the untrusted domain, to make this work.

Hi,
For the SUP in the untrusted domain the SCCM Site Server you need the proper patch level of the installed WSUS, the correct ports open on Firewall and an account from the Domain where the SCCM Site is installed which has rights on the WSUS on the primary
site. This account has to be configured during the installation of the SUP on the Site System Server.
May this post also give you some hints:
http://social.technet.microsoft.com/Forums/en-US/c3fbf3ab-ca70-48da-90b1-e7322783140c/sup-in-untrusted-forest-using-sccm-2012-sp1?forum=configmanagerdeployment
Cheers
Christoph
PS: Could somebody please move this thread to the correct Configuration Manager Forum :)

SCCM 2012 CU3 / WSUS - Update files are being deleted

We have been running this configuration since April of last year and haven't had any problems.
The problem is a majority of the window/security updates files in the WSUSContent folder are missing. I have ran wsusutil /reset and it takes a day or so but it will successfully download the 80GB of missing files. But after a few days they are
once again missing. We do run our EPP updates through WSUS and we have no problems with those.
I have searched endlessly through the log files, I can see where it goes through and skips them due to being superseded.
Do not see any database or communication issues between SCCM and WSUS, per the wsyncmgr.log it sees the thousands of that are available from our WSUS server.
So, any suggestions as to what might be causing the update files to be deleted from the WSUSContent folder?
We are running this on:
Server 2012 / SCCM 2012 CU3 / WSUS for 2012

So, just to make sure I understand. Is that we should be deploying updates from the SCCM Configmgr?
If you want to use the integrate experience, then yes.
but the problem is that a majority of updates are showing Downloaded = No when looking under All Software Updates
You need to either manually initiate the download of updates or set up an Automatic Deployment Rule (ADR). Either will cause ConfigMgr to download the updates placing them into an update package (which in turn gets placed on a DP where the clients can access
and download the updates).
wsynclog shows the sync of the update catalog, i.e., the metadata, and not the actual update binaries.
Jason | http://blog.configmgrftw.com

SCCM 2012 R2 - No Response from WDS server

We upgraded our SCCM 2012 sp1 servers to R2 and have we are now receiving the following error on our remote PXE enabled DP;
Have performed the usual processes;
Removed the PXE enabled DP
Uninstalled the WDS service
Rebooted server
Deployed the PXE-DP from the site server (letting the site server also install WDS)
Checked the WDS service start OK
Distributed the Boot images to the PXE-DP
Checked the content status has succeeded
Checked that the PXE booting clients are looking at the correct server IP
Checked the smsdpprov.log:
[AC8][Wed 03/19/2014 15:04:50]:Registry key creation successfull
[AC8][Wed 03/19/2014 15:04:51]:CSMSDPInstProv::RegisterDPHealthMonTask: Schedule is '00011700001F2000'
[AC8][Wed 03/19/2014 15:04:51]:1998-01-01T00:00:00Z
[AC8][Wed 03/19/2014 15:04:54]:A DP health monitoring task has been registered successfully
[AC8][Wed 03/19/2014 15:04:54]:CSMSDPInstProv::EnableDPUsageStatsGathering entered
[AC8][Wed 03/19/2014 15:04:59]:Failed to enable IIS logging for DP usage task. Error code: 0x80041013
[AC8][Wed 03/19/2014 15:05:00]:CcmInstallPXE
[AC8][Wed 03/19/2014 15:05:00]:RegQueryValueExW failed for Software\Microsoft\SMS\DP, PxeInstalled
[AC8][Wed 03/19/2014 15:05:00]:RegReadDWord failed; 0x80070002
[AC8][Wed 03/19/2014 15:05:00]:Running: C:\SMS_DP$\sms\bin\vcredist_x64.exe /q /log "C:\SMS_DP$\sms\bin\vcredist.log"
[AC8][Wed 03/19/2014 15:05:00]:Waiting for the completion of: C:\SMS_DP$\sms\bin\vcredist_x64.exe /q /log "C:\SMS_DP$\sms\bin\vcredist.log"
[AC8][Wed 03/19/2014 15:05:10]:Run completed for: C:\SMS_DP$\sms\bin\vcredist_x64.exe /q /log "C:\SMS_DP$\sms\bin\vcredist.log"
[AC8][Wed 03/19/2014 15:05:10]:Created the DP mutex key for WDS.
[AC8][Wed 03/19/2014 15:05:10]:Finding Wimgapi.Dll
[AC8][Wed 03/19/2014 15:05:10]:MsiEnumRelatedProducts failed
[AC8][Wed 03/19/2014 15:05:10]:FindProduct failed; 0x80070103
[AC8][Wed 03/19/2014 15:05:10]:MsiEnumRelatedProducts failed
[AC8][Wed 03/19/2014 15:05:10]:FindProduct failed; 0x80070103
[AC8][Wed 03/19/2014 15:05:10]:Found C:\Windows\system32\wimgapi.dll
[AC8][Wed 03/19/2014 15:05:10]:Wimgapi.dll is already installed.
[AC8][Wed 03/19/2014 15:05:10]:Path to smsdp.dll is 'C:\SMS_DP$\sms\bin\smsdp.dll'
[AC8][Wed 03/19/2014 15:05:10]:PXE performance counters have been initialized
[AC8][Wed 03/19/2014 15:05:10]:Machine is running Windows Server. (NTVersion=0X601, ServicePack=1)
[AC8][Wed 03/19/2014 15:05:10]:WDS is INSTALLED
[AC8][Wed 03/19/2014 15:05:10]:WDS service is already installed.
[AC8][Wed 03/19/2014 15:05:10]:Machine is running Windows Server. (NTVersion=0X601, ServicePack=1)
[AC8][Wed 03/19/2014 15:05:10]:WDS is INSTALLED
[AC8][Wed 03/19/2014 15:05:10]:Machine is running Windows Server. (NTVersion=0X601, ServicePack=1)
[AC8][Wed 03/19/2014 15:05:10]:Setting TFTP config key as: System\CurrentControlSet\Services\WDSSERVER\Providers\WDSTFTP
[AC8][Wed 03/19/2014 15:05:10]:Configuring TFTP read filters
[AC8][Wed 03/19/2014 15:05:10]:SetupComplete is set to 0
[AC8][Wed 03/19/2014 15:05:10]:RegQueryValueExW failed for Software\Microsoft\Windows\CurrentVersion\Setup, REMINST
[AC8][Wed 03/19/2014 15:05:10]:RegReadDWord failed; 0x80070002
[AC8][Wed 03/19/2014 15:05:10]:REMINST not set in WDS
[AC8][Wed 03/19/2014 15:05:10]:WDS is NOT Configured
[AC8][Wed 03/19/2014 15:05:10]:Share (REMINST) does not exist. (NetNameNotFound) (0x00000906)
[AC8][Wed 03/19/2014 15:05:10]:GetFileSharePath failed; 0x80070906
[AC8][Wed 03/19/2014 15:05:10]:REMINST share does not exist. Need to create it.
[AC8][Wed 03/19/2014 15:05:10]:Enumerating drives A through Z for the NTFS drive with the most free space.
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: A:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: B:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: C:\
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: D:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: E:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: F:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: G:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: H:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: I:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: J:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: K:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: L:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: M:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: N:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: O:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: P:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: Q:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: R:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: S:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: T:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: U:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: V:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: W:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: X:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: Y:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Checking Drive: Z:\
[AC8][Wed 03/19/2014 15:05:10]:GetVolumeInformation failed: 3
[AC8][Wed 03/19/2014 15:05:10]:Drive 'C:\' is the best drive for the SMS installation directory.
[AC8][Wed 03/19/2014 15:05:10]:Creating REMINST share to point to: C:\RemoteInstall
[AC8][Wed 03/19/2014 15:05:10]:Succesfully created share REMINST
[AC8][Wed 03/19/2014 15:05:10]:Removing existing PXE related directories
[AC8][Wed 03/19/2014 15:05:10]:Registering WDS provider: SourceDir: C:\SMS_DP$\sms\bin
[AC8][Wed 03/19/2014 15:05:10]:Registering WDS provider: ProviderPath: C:\SMS_DP$\sms\bin\smspxe.dll
[AC8][Wed 03/19/2014 15:05:10]:DoPxeProviderRegister
[AC8][Wed 03/19/2014 15:05:10]:PxeLoadWdsPxe
[AC8][Wed 03/19/2014 15:05:10]:Loading wdspxe.dll from C:\Windows\system32\wdspxe.dll
[AC8][Wed 03/19/2014 15:05:10]:wdspxe.dll is loaded
[AC8][Wed 03/19/2014 15:05:10]:PxeProviderRegister has suceeded (0x00000000)
[AC8][Wed 03/19/2014 15:05:10]:Disabling WDS/RIS functionality
[AC8][Wed 03/19/2014 15:05:10]:PxeProviderUnRegister
[AC8][Wed 03/19/2014 15:05:10]:
[AC8][Wed 03/19/2014 15:05:10]:Found privilege otifyPrivilege on service WDSServer
[AC8][Wed 03/19/2014 15:05:10]:Found privilege SeRestorePrivilege on service WDSServer
[AC8][Wed 03/19/2014 15:05:10]:Found privilege SeBackupPrivilege on service WDSServer
[AC8][Wed 03/19/2014 15:05:10]:Found privilege SeSecurityPrivilege on service WDSServer
[AC8][Wed 03/19/2014 15:05:10]:Privilege SeTakeOwnershipPrivilege NOT found service WDSServer
[AC8][Wed 03/19/2014 15:05:11]:ChangeServiceConfig2 succeeded for WDSServer. Added privilege SeTakeOwnershipPrivilege
[AC8][Wed 03/19/2014 15:05:11]:ChangeServiceConfig succeeded for WDSServer. StartType: 0x2
[AC8][Wed 03/19/2014 15:05:24]:WDSServer status is 4
[AC8][Wed 03/19/2014 15:05:24]:WDSServer is STARTED
[AC8][Wed 03/19/2014 15:05:24]:Running: WDSUTIL.exe /Initialize-Server /REMINST:"C:\RemoteInstall"
[AC8][Wed 03/19/2014 15:05:25]:Waiting for the completion of: WDSUTIL.exe /Initialize-Server /REMINST:"C:\RemoteInstall"
[AC8][Wed 03/19/2014 15:05:27]:Run completed for: WDSUTIL.exe /Initialize-Server /REMINST:"C:\RemoteInstall"
[AC8][Wed 03/19/2014 15:05:27]:Machine is running Windows Server. (NTVersion=0X601, ServicePack=1)
[AC8][Wed 03/19/2014 15:05:27]:No need to configure the firewall
[AC8][Wed 03/19/2014 15:05:27]:CContentDefinition::GetAllPackagesFromLib failed; 0x80070003
[AC8][Wed 03/19/2014 15:05:27]:ProcessBootImages failed; 0x80070003
[AC8][Wed 03/19/2014 15:05:27]:CcmInstallPXE: Deleting the DP mutex key for WDS.
[AC8][Wed 03/19/2014 15:05:27]:Installed PXE
[AC8][Wed 03/19/2014 15:05:27]:Registry key creation successfull
[D48][Wed 03/19/2014 15:08:12]:Registry key creation successfull
[D48][Wed 03/19/2014 15:08:13]:Registry key creation successfull
[D48][Wed 03/19/2014 15:08:13]:Registry key creation successfull
[D48][Wed 03/19/2014 15:08:14]:Registry key creation successfull
[F20][Wed 03/19/2014 15:08:26]:CcmInstallPXE
[F20][Wed 03/19/2014 15:08:26]:PXE provider is already installed.
[F20][Wed 03/19/2014 15:08:26]:Installed PXE
[F20][Wed 03/19/2014 15:08:26]:CSMSDPInstProv::EnableDPUsageStatsGathering entered
[F20][Wed 03/19/2014 15:08:26]:1998-01-01T00:00:00
[F20][Wed 03/19/2014 15:08:27]:A DP usage gathering task has been registered successfully
[BB8][Wed 03/19/2014 15:10:59]:Content 'ASC0000E.8' for package 'ASC0000E' has been added to content library successfully
[BB8][Wed 03/19/2014 15:10:59]:Expanding C:\SCCMContentLib\FileLib\24E7\24E71E7B8DBA522A60756D1C2329EE616A364DAB121FFB7A7117D30D4F77A0EC from package ASC0000E
[BB8][Wed 03/19/2014 15:10:59]:Finding Wimgapi.Dll
[BB8][Wed 03/19/2014 15:10:59]:MsiEnumRelatedProducts failed
[BB8][Wed 03/19/2014 15:10:59]:FindProduct failed; 0x80070103
[BB8][Wed 03/19/2014 15:10:59]:MsiEnumRelatedProducts failed
[BB8][Wed 03/19/2014 15:10:59]:FindProduct failed; 0x80070103
[BB8][Wed 03/19/2014 15:10:59]:Found C:\Windows\system32\wimgapi.dll
[F20][Wed 03/19/2014 15:10:59]:Content 'ASC0000A.7' for package 'ASC0000A' has been added to content library successfully
[BB8][Wed 03/19/2014 15:10:59]:SetNamedSecurityInfo() failed.
[BB8][Wed 03/19/2014 15:10:59]:SetObjectOwner() failed. 0x80070003.
[BB8][Wed 03/19/2014 15:10:59]:SetFileSecurity() failed.
[BB8][Wed 03/19/2014 15:10:59]:Expanding ASC0000E to C:\RemoteInstall\SMSImages
[F20][Wed 03/19/2014 15:11:00]:Successfully expanded package ASC0000A to
\\ASC-DP1.LTCHARITY.ORG.UK\SMSPKGC$\ASC0000A
[F20][Wed 03/19/2014 15:11:00]:Waiting for another PXE operation thread to finish.
[F20][Wed 03/19/2014 15:11:05]:Finished waiting.
[F20][Wed 03/19/2014 15:11:11]:Expanding C:\SCCMContentLib\FileLib\DD54\DD5448253B423537C13072C96F3659FF0D1D51FDA5102BC7A68E4949269A0CA5 from package ASC0000A
[F20][Wed 03/19/2014 15:11:13]:Finding Wimgapi.Dll
[F20][Wed 03/19/2014 15:11:13]:MsiEnumRelatedProducts failed
[F20][Wed 03/19/2014 15:11:13]:FindProduct failed; 0x80070103
[F20][Wed 03/19/2014 15:11:13]:MsiEnumRelatedProducts failed
[F20][Wed 03/19/2014 15:11:13]:FindProduct failed; 0x80070103
[F20][Wed 03/19/2014 15:11:13]:Found C:\Windows\system32\wimgapi.dll
[F20][Wed 03/19/2014 15:11:19]:SetNamedSecurityInfo() failed.
[F20][Wed 03/19/2014 15:11:21]:SetObjectOwner() failed. 0x80070002.
[F20][Wed 03/19/2014 15:11:21]:SetFileSecurity() failed.
[BB8][Wed 03/19/2014 15:11:44]:Waiting for another PXE operation thread to finish.
[F20][Wed 03/19/2014 15:11:44]:Expanding ASC0000A to C:\RemoteInstall\SMSImages
[BB8][Wed 03/19/2014 15:11:49]:Finished waiting.
[BB8][Wed 03/19/2014 15:11:49]:CcmInstallPXE
[BB8][Wed 03/19/2014 15:11:49]:PXE provider is already installed.
[BB8][Wed 03/19/2014 15:11:49]:Installed PXE
[BB8][Wed 03/19/2014 15:11:49]:CSMSDPInstProv::EnableDPUsageStatsGathering entered
[BB8][Wed 03/19/2014 15:11:54]:1998-01-01T00:00:00
[BB8][Wed 03/19/2014 15:11:57]:A DP usage gathering task has been registered successfully
[BB8][Wed 03/19/2014 15:12:22]:Content 'ASC00003.4' for package 'ASC00003' has been added to content library successfully
[F20][Wed 03/19/2014 15:13:08]:CcmInstallPXE
[F20][Wed 03/19/2014 15:13:08]:PXE provider is already installed.
[F20][Wed 03/19/2014 15:13:08]:Installed PXE
[E7C][Wed 03/19/2014 15:13:08]:CSMSDPInstProv::EnableDPUsageStatsGathering entered
[E7C][Wed 03/19/2014 15:13:10]:1998-01-01T00:00:00
[E7C][Wed 03/19/2014 15:13:10]:A DP usage gathering task has been registered successfully
[F20][Wed 03/19/2014 15:13:33]:Content 'ASC00027.7' for package 'ASC00027' has been added to content library successfully
[F20][Wed 03/19/2014 15:13:33]:Expanding C:\SCCMContentLib\FileLib\4681\4681E1F7B35C465F8ADF176C71B2B4CCDA890F2857796DC81EA83B6FC05DBDC3 from package ASC00027
[F20][Wed 03/19/2014 15:13:33]:Finding Wimgapi.Dll
[F20][Wed 03/19/2014 15:13:33]:MsiEnumRelatedProducts failed
[F20][Wed 03/19/2014 15:13:33]:FindProduct failed; 0x80070103
[F20][Wed 03/19/2014 15:13:33]:MsiEnumRelatedProducts failed
[F20][Wed 03/19/2014 15:13:33]:FindProduct failed; 0x80070103
[F20][Wed 03/19/2014 15:13:33]:Found C:\Windows\system32\wimgapi.dll
[F20][Wed 03/19/2014 15:13:33]:SetNamedSecurityInfo() failed.
[F20][Wed 03/19/2014 15:13:33]:SetObjectOwner() failed. 0x80070002.
[F20][Wed 03/19/2014 15:13:33]:SetFileSecurity() failed.
[F20][Wed 03/19/2014 15:13:33]:Expanding ASC00027 to C:\RemoteInstall\SMSImages
[AF4][Wed 03/19/2014 15:14:03]:Waiting for another PXE operation thread to finish.
[AF4][Wed 03/19/2014 15:14:08]:Finished waiting.
[AF4][Wed 03/19/2014 15:14:08]:CcmInstallPXE
[AF4][Wed 03/19/2014 15:14:10]:PXE provider is already installed.
[AF4][Wed 03/19/2014 15:14:10]:Installed PXE
[AF4][Wed 03/19/2014 15:14:10]:CSMSDPInstProv::EnableDPUsageStatsGathering entered
[AF4][Wed 03/19/2014 15:14:19]:1998-01-01T00:00:00
[AF4][Wed 03/19/2014 15:14:22]:A DP usage gathering task has been registered successfully
[F20][Wed 03/19/2014 15:15:13]:Content 'ASC00002.4' for package 'ASC00002' has been added to content library successfully
[A9C][Wed 03/19/2014 15:15:56]:CcmInstallPXE
[A9C][Wed 03/19/2014 15:15:56]:PXE provider is already installed.
[A9C][Wed 03/19/2014 15:15:56]:Installed PXE
[A9C][Wed 03/19/2014 15:15:57]:CSMSDPInstProv::EnableDPUsageStatsGathering entered
[A9C][Wed 03/19/2014 15:15:57]:1998-01-01T00:00:00
[A9C][Wed 03/19/2014 15:15:58]:A DP usage gathering task has been registered successfully
================================================================================
Checked the SMSPXE.log:
<![LOG[================= PXE Provider loaded. =====================]LOG]!><time="15:05:22.792+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="smspxe.cpp:137">
<![LOG[Machine is running Windows Longhorn. (NTVersion=0X601, ServicePack=1)]LOG]!><time="15:05:22.792+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="provsettings.cpp:1112">
<![LOG[Cannot read the registry value of MACIgnoreListFile (00000000)]LOG]!><time="15:05:22.792+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="provsettings.cpp:353">
<![LOG[MAC Ignore List Filename in registry is empty]LOG]!><time="15:05:22.792+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="provsettings.cpp:468">
<![LOG[Begin validation of Certificate [Thumbprint 901708992FC1A759502B2BB7155E20FD7A1385D8] issued to 'dde18d94-b6ea-41d7-8e15-54844518c1b1']LOG]!><time="15:05:22.823+00" date="03-19-2014" component="SMSPXE" context=""
type="1" thread="2720" file="ccmcert.cpp:1662">
<![LOG[Completed validation of Certificate [Thumbprint 901708992FC1A759502B2BB7155E20FD7A1385D8] issued to 'dde18d94-b6ea-41d7-8e15-54844518c1b1']LOG]!><time="15:05:22.823+00" date="03-19-2014" component="SMSPXE" context=""
type="1" thread="2720" file="ccmcert.cpp:1803">
<![LOG[Initializing PXEPerfObject.]LOG]!><time="15:05:22.823+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="smspxe.cpp:399">
<![LOG[Could not load logging configuration for component ccmperf. Using default values.]LOG]!><time="15:05:22.823+00" date="03-19-2014" component="SMSPXE" context="" type="2" thread="2720"
file="stdlogging.cpp:480">
<![LOG[Unable to open Registry key Software\Microsoft\CCM. Return Code [80070002]. Client HTTPS state is Unknown.]LOG]!><time="15:05:24.414+00" date="03-19-2014" component="SMSPXE" context="" type="1"
thread="2720" file="ccmutillib.cpp:373">
<![LOG[Client lookup reply: <ClientIDReply><Identification Unknown="0" ItemKey="0" ServerName=""><Machine><ClientID/><NetbiosName/></Machine></Identification></ClientIDReply>
]LOG]!><time="15:05:24.742+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="libsmsmessaging.cpp:6346">
<![LOG[PXE::CBootImageInfo::CBootImageInfo: key=]LOG]!><time="15:05:24.742+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="bootimagecache.cpp:60">
<![LOG[PXE::CBootImageInfo::CBootImageInfo: key=]LOG]!><time="15:05:24.742+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="bootimagecache.cpp:60">
<![LOG[CContentDefinition::GetAllPackagesFromLib failed; 0x80070003]LOG]!><time="15:05:24.836+00" date="03-19-2014" component="SMSPXE" context="" type="3" thread="2720" file="contentlibrary.cpp:925">
<![LOG[Begin validation of Certificate [Thumbprint 901708992FC1A759502B2BB7155E20FD7A1385D8] issued to 'dde18d94-b6ea-41d7-8e15-54844518c1b1']LOG]!><time="15:05:24.851+00" date="03-19-2014" component="SMSPXE" context=""
type="1" thread="2720" file="ccmcert.cpp:1662">
<![LOG[Completed validation of Certificate [Thumbprint 901708992FC1A759502B2BB7155E20FD7A1385D8] issued to 'dde18d94-b6ea-41d7-8e15-54844518c1b1']LOG]!><time="15:05:24.851+00" date="03-19-2014" component="SMSPXE" context=""
type="1" thread="2720" file="ccmcert.cpp:1803">
<![LOG[PXE Provider finished loading.]LOG]!><time="15:05:24.851+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="smspxe.cpp:184">
<![LOG[Cannot read the registry value of MACIgnoreListFile (800703e5)]LOG]!><time="15:05:29.048+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2700" file="provsettings.cpp:353">
<![LOG[MAC Ignore List Filename in registry is empty]LOG]!><time="15:05:29.048+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2700" file="provsettings.cpp:468">
<![LOG[Cannot read the registry value of MACIgnoreListFile (800703e5)]LOG]!><time="15:06:04.490+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="1408" file="provsettings.cpp:353">
<![LOG[MAC Ignore List Filename in registry is empty]LOG]!><time="15:06:04.490+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="1408" file="provsettings.cpp:468">
<![LOG[================= PXE Provider shutdown. =====================]LOG]!><time="15:06:39.371+00" date="03-19-2014" component="SMSPXE" context="" type="1" thread="2720" file="smspxe.cpp:223">
==============================================================================
Have we missed something in these logs?
Can anyone help with this issue please?

Have you distributed both boot images (x86 and x64) to the PXE-enabled DP?
Torsten Meringer | http://www.mssccmfaq.de

Sccm 2012 multiple language reports from mbam integration

I installed mbam on my sccm 2012 primary server and all went well with one exception. The reports have multiple languages. In the reports folder that houses the mbam reports, there are multiple folders for the four mbam reports, so I have about
10 different languages for my 4 reports. I only want english. I would think that like any other sccm report I can just delete the others I won't use, but am concerned since this is a component of mbam and it might be expecting those reports
as "placeholders" for that data. Can I just delete the folders for the unneeded languages? Additionally I am getting an error when launching the reports when the window for the report opens it has at the bottom of the report: ERROR:
the mbam policy view does not exist. I am assuming this is because not all the components have been installed in the mbam environment as of yet. We are upgrading from mbam 1.0 and I am doing the sccm integration piece. I realize the monitoring
server needs to be installed, the policy template also needs to go somewhere as well, so suspect this is expected behaviour with only the sccm integration piece involved so far. THanks!

It's more of housekeeping issue. I am going to have to delete that folder anyway as right now I am connected to a test database and will need to uninstall mbam and reinstall it when they are ready to point to a different database after testing is
complete.

SCCM 2012 R2 CU2 Update - Need to update console or clients as well?

Hi,
I am going to be installing the following update onto out SCCM 2012 server:
http://support.microsoft.com/kb/2970177/en-us
I am not 100% sure but is there a need to update all installed consoles and/or all sccm clients after the CU2 installation?

Site server, console and clients needs to be updated.
Full installation guide : http://www.systemcenterdudes.com/sccm-2012-r2-cu2-installation-guide/

What is the proper way to apply SCCM 2012 R2 Cumulative Updates

Hello All!
I am looking for a little advice. Since deploying SCCM 2012 R2 I have not yet installed any of the cumulative updates. What is the proper way to install the previusely released updates? I believe there has been 3 CU relases since SCCM 2012R2. Should
I just install the most recent CU or install all of them starting with CU1? I know each one addresses different issues so I would think install all of them would make sense.
Thanks,
Phillip
Phil Balderos

No, they're cumulative, so you only have to install the latest.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

SCCM 2012 client push occurs from site server or from distribution point?

I would like to set up client push in SCCM 2012 and I have a remote site with about 80 workstations that I would like to deploy the clients to using client push, but this remote site is VERY slow, as in less than 3Mbps slow. There is a remote DP located
at this site and I wanted to know if the remote workstations will be hammering my Site Server across the WAN (or MP I guess since the MP role is i installed on the Site Server) to request the client installation, or do the clients just request the client from
the Site Server or MP and then the client downloads to the remote DP and then the workstations install the SCCM 2012 client from the local DP at the remote site?
I just do NOT want the WAN link to become overwhelmed with workstation requests to install the client and have the Site Server have to respond to each and every workstation and download the SCCM 2012 client to each system over this slow WAN link.
How does the client push process actually work?
Thank you

The initial files will come from the primary site server. The rest (the biggest part) will come of the distribution point. See for a good read (even though it's more about secondary sites), this post of Jason:
http://blog.configmgrftw.com/secondary-sites-and-boundary-groups/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

New 2012 iMacs display input from external source

Do the new 2012 imacs support input from external DisplayPort sources?

2012 iMacs can't be used as a monitor for Macs with Mini DisplayPort, but you can use a 27-inch iMac with Mini DisplayPort as a monitor for 2012 iMacs. See > http://support.apple.com/kb/PH4469

SCCM 2012: Forefront, allow updates from alternative sources

Similar Messages

Maybe you are looking for