SCCM 2012 protection?

Hello, I found
technet documentation that states I can protect my SCCM 2012 primary site with DPM 2012.
"Create New Protection Group Wizard, you select the SMS Writer service from the data source list, and then select
the site database as an appropriate member."
The problem is I don't see the SMS Writer service in the data source list. Just the usual volumes, SQL instance, etc. Should DPM be detecting that the server is running SCCM services much like it would for Exchange or SharePoint? Or should I simply backup
my site database like any other SQL database?

Hi
I have posted the utility that will enable SCCM protection so DPM can protect it.
1) Download the
ENABLE-SCCM-PROTECTION.zip
2) Extract it on the DPM Server in a folder like c:\temp
3) Open an administratve command prompt and CD to the c:\temp folder
4) Execute the ENABLEPROTECTION.EXE - accept the ULA - and after it runs you should get a COMMAND COMPLETE popup message.
5) In DPM create a new protection group, expand out the server hosting SCCM and you should see the SMS Writer option to protect.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.

Similar Messages

Automatic Install of Endpoint Protection fails on windows 8.1 clients with SCCM 2012 R2

Running SCCM 2012 R2 and deploying CM clients and Endpoint Protection via software updates. CM client and EP install fine on Windows 7 clients. CM client installs fine but endpoint protection fails on Windows 8.1 clients with the following from the
endpoint protection agent log:
<![LOG[Create Process Command line: "C:\Windows\ccmsetup\SCEPInstall.exe" /s /q /policy "C:\Windows\CCM\EPAMPolicy.xml".]LOG]!><time="12:22:02.560+240" date="08-13-2014" component="EndpointProtectionAgent"
context="" type="1" thread="4260" file="epagentutil.cpp:607">
<![LOG[Detail error message is : [EppSetupResult]
HRESULT=0x80070643
Description=Cannot complete the System Center Endpoint Protection installation. An error has prevented the System Center Endpoint Protection setup wizard from completing successfully. Please restart your computer and try again. Error code:0x80070643. Fatal
error during installation.
So on the win8.1 client I run the above command line manually in a command window and receive Access is denied. Then I run the same command in an elevated command window and EP installs fine. Does this have something to do with why the automatic
EP client install fails with the 0x80070643 error code? If so, what is the fix?

Hi,
Try uninstalling any other security software.
For more information, please review the link below:
I‘m getting an error code from my Microsoft security software
http://www.microsoft.com/security/portal/mmpc/help/errorcodes.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 Endpoint Protection initial update not downloaded

Hi,
I'm new to SCCM 2012. I recently started deploying the Endpoint Protection to all of clients (Windos 7 and XP Pro).
I've noticed that some clients have not been updating their initial definitions after the Endpoint Protection Software is installed.
Since they are not updating their detonation the client remains unprotected with the status icon in red.
The odd thing is that some of our computers do the initial update just fine while others are effected.
Also if I click update manually then the update goes through no issue, but with 100+ clients not updated its not something I want to do manually.
The clients are set to receive auto updates via a auto deployment rule.
Also the antimalware policy is set to do updates as well in this order:
Config Mgr
WSUS
Microsoft Malware Protection Center
Microsoft Update
Has anyone seen this before?
If I need to upload any specific logs just let me know.
Many Thanks

Do you have Software update configured (and working) thru ConfigMgr or using a standalone WSUS?
Kent Agerlund | My blogs: blog.coretech.dk/kea and
SCUG.dk/ | Twitter:
@Agerlund | Linkedin: Kent Agerlund |
Mastering ConfigMgr 2012 The Fundamentals

Updating Endpoint Protection definitions via SCCM 2012 R2

I've successfully deployed System Center Endpoint Protection to a device collection using SCCM 2012 R2. However, the PC Status is "At Risk" because it's out of date. Can someone please explain how I'm supposed to get the clients to
update the definition files. I realized I didn't have "Definition Updates" checked under the Classifications tab of the Software Update Point Components Properties which I've now checked. I'm not sure which Product to check under the
Products tab.
Also not sure what the process is to deploy definition updates to Endpoint clients and have them update automatically with the latest definitions. Thank You

You need to check "Forefront Endpoint Protection 2010" as the Product. Yes yes its the old name.
After that you need to create an ADR using the template Definition Updates under Software Updates and deploy it to a Collection that holds all clients with SCEP installed. The ADR will run directly after each syncronization of the SUP, so you should change
the SUP to sync to Windows Update at least once every 8 hour (definition updates are released that often).
Thats the short version.
Tim Nilimaa | Blog: http://infoworks.tv | Twitter: @timnilimaa

SCCM 2012 R2: Forefront Endpoint protection via automatic updates only work when manually triggering automatic updat rule

Hi,
I followed this manual to configure forefront endpoint protection on clients: http://www.windows-noob.com/forums/index.php?/topic/6106-using-system-center-2012-configuration-manager-part-6-adding-the-endpoint-protection-role-configure-alerts-and-custom-antimalware-policies/
Now in short: everything works fine ... as long as I trigger the audomatic deployment rules.
Current situation:
1. ADR ran fine (3:30 this night)
2.Software update group is NOT ok
3.I run ADR manually (right click on ADR, run)
4.software update group is ok (green icon)
Then virusupdates are succesfull. This means that clients only update their virus definitions when I manually run the ADR-rule.
I'm missing something here.
Please advise.
J.
Jan Hoedt

Probably this issue: http://social.technet.microsoft.com/Forums/en-US/c6109678-785b-4c6d-9cb4-c9dfc1e34b2e/sccm-2012-automatic-deployment-rule-not-executing-updates-for-scep?forum=configmanagerapps
Iow: wsus updates were scheduled at 3, automatic update rules at 3:15, probably sync wasn't done yet so it doesn't find updates. "The day after" updates are marked as expired.
Jan Hoedt

Random BSOD after migrated to SCCM 2012 R2 - System Endpoint Protection

We are currently experiencing random BSOD after upgrade to SCCM 2012 R2 from SCCM 2012. These BSOD are happening on our Windows 7 x64 machines. With the upgrade, we switched to System Center Endpoint Protection for the anti-virus protection and start
to notice this problem. Have anyone else experiencing the same issue? I'm trying to run adplus right now on 2 machines to try and capture the error but so far no luck. This BSOD is so random and we are getting at least 5 calls a day from users about this.
The only similarity with these BSOD is usually the user is away from keyboard and after the BSOD, System Center Endpoint cannot connect to update virus definition.
Below is a screenshot of the BSOD and it didn't create any memory dump file. We are currently running Windows 7 x64.
Message was: "STOP:
C000021a [fatal system error]. The Windows subsystem process terminate
unexpectedly with a status of 0xC0000005

- Event Type : Stopped working (APPCRASH)
      Application Name: Client Server Runtime Process
      Path:             C:\windows\system32\csrss.exe
      Event Time      : 03/22/2014 12:30:26 AM
          Application Name: csrss.exe
          Application Version: 6.1.7600.16385
          Application Timestamp: 4a5bc115
          Fault Module Name: sxs.dll
          Fault Module Version: 6.1.7601.17514
          Fault Module Timestamp: 4ce7c9cc
          Exception Code: c0000005
          Exception Offset: 0000000000011b2f
      Memory dump     : Not created

Windows 10 in SCCM 2012/SCEP (system center endpoint protection)

I have been able to put my test machine into SCCM 2012 R2. But it seems that SCEP won't work, this is the message:
System Center Endpoint Protection cannot be installed on your operating system. Windows Program Compatibility mode is not supported by this program. <a>For information about supported operating systems, see the online Help</a>. Error code:0x8004FF71.
Will we be able to test SCEP in any of the upcoming versions?

I have the same situation during a pre pilot phase in a customer environment, but still no sulution

Using the pre-configured SCCM 2012 SP1 endpoint protection templates for Exchange 2010?

I am looking to update the exclusions for SCCM Endpoint Protect clients performing server AV protection on Exchange 2010 nodes.
Within SC there are a number of pre-defined templates, including ones for Exchange 2007 / 2010. However when I analyse these they do not appear to list all the exclusions that the Exchange product team define on TechNet -
http://technet.microsoft.com/en-us/library/bb332342(v=exchg.141).aspx
So do I;
1 - Use the template as it has been verified by Microsoft for using with Exchange 2010 and it covers all I need to exclude?
2 - Edit the template, adding in the additional exclusions as defined by the Exchange product team?
Would whichever logic I use apply to other templates, such as SQL, SharePoint, etc as well?
Thank you
Alan

As I cut and pasted the xml file I noticed the following comment that I had missed before..........
        
        
        
Still going with adding the full recommended list from TechNet though

Satellite Z930-14F - cannot install Win 8.1 from SCCM 2012 R2 environment

Dear all,
Sattelite Z series laptops cannot install OS (win 8.1) from our SCCM 2012 R2 environment.
Either no installation is starting, or pxe boot aborted error is showed.
The environment is used to successfully install OS (win 8.1) on different other vendor computers (dell) and virtual machines (hyper-v and vmware).
I've tried both UEFI and CMS boot options and tried to switch off the secure boot. Please advice.
Also, i've read about the "SCCM installation package for Toshiba". Will it help in my situation or is it just driver packages for SCCM?
Best Regards, Evgeny.

I guess you are speaking about this Toshiba package:
http://www.toshiba.eu/services/on-demand/business-computing/sdp120gs-v/
I dont have much experience using such SCCM drive package but it definitely compatible with the Toshiba business notebooks. The Satellite / Portege Z930 belong to the business range and I think the package should be compatible.
This package seems to be for all IT administrators who manage devices on the corporate network with SCCM 2012 R2. Toshiba offers with the new Toshiba SCCM package a solution to integrate other notebook into an existing IT infrastructure quickly and smoothly and all Toshiba Driver and application packages and a demonstration task sequence are integrated.
However, it seems that you could get more details about this package directly from Toshiba [email protected]
By the way: The Win 8.1 installation requires the UEFI mode (in case the UEFI BIOS is available). But booting from another, external source requires the disabled secure boot option.
So maybe you should use the UEFI mode but should disable the secure boot option in order to boot from LAN.

SCCM 2012 SP1 - Offline Servicing failure - Failed to find or access the update binaries to be applied on the image

Hi there
Trying to patch a new Windows 7 SP1 image within SCCM 2012 SP1, but it's failing.
I've searched for information on the failure messages I am seeing, but although there is a LOT of information online concerning Offline Servicing failures, I can't find anything on the errors I am seeing.
I've tried injecting a single update, five updates and ten updates, no difference, same messages.
We have McAfee Access Protection disabled, as we know Offline Servicing simply won't work if this is running.
In the console, in Schedule Update Status for the image I am trying to update, the following message is shown:
"Failed to find or access the update binaries to be applied on the image."
That sounds as if the process can't find the actual .cab file for any update I've tried to inject, but I don't know why it wouldn't be able to do that, we have Software Updates configured and the .cab files are on the same server.
When I looked at the OfflineServicingMgr.log file, I see the following entries:
Processing image at index 1        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:52:49        8272 (0x2050)
Mounting image at index 1. Image file='D:\ConfigMgr_OfflineImageServicing\PackageID\W7_Image.wim', MountDirectory='D:\ConfigMgr_OfflineImageServicing\PackageID\ImageMountDir', ImageFileType='WIM', Mode='ReadWrite'        SMS_OFFLINE_SERVICING_MANAGER
14/06/2014 14:52:49        8272 (0x2050)
Image OS information : MajorVersionMS = 6, MinorVersionMS = 1, MajorVersionLS = 7601, MinorVersionLS = 17514        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:53:31
8272 (0x2050)
Failed to find properties of file 4        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:53:31        8272 (0x2050)
UnMounting Image (Commit Changes = 0) ...        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:53:31        8272 (0x2050)
Completed processing image package PackageID. Status = Failed        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:54:04        8272 (0x2050)
Updated history for image package PackageID in the database        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:54:04        8272 (0x2050)
Schedule processing failed        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:54:04        8272 (0x2050)
Processing completed for Schedule with ID 16777237        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:54:04        8272 (0x2050)
STATMSG: ID=7910 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_OFFLINE_SERVICING_MANAGER" SYS=SCCMServer.domain SITE=Site_Code PID=8560 TID=8272 GMTDATE=Sat Jun 14 13:54:04.964 2014 ISTR0="16777237" ISTR1="" ISTR2=""
ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0        SMS_OFFLINE_SERVICING_MANAGER
14/06/2014 14:54:04        8272 (0x2050)
Schedule processing thread stopped        SMS_OFFLINE_SERVICING_MANAGER        14/06/2014 14:54:05        8272 (0x2050)
I'm not sure what file "Failed to find properties of file 4" is referring to, whether dism.exe, an update or the image itself, but immediately after this message appears the image is unmounted. After that this message shows:
"Completed processing image package PackageID. Status = Failed"
As I say, there's a lot of information available re Offline Servicing but I haven't found anything with these particular messages.
If anyone has encountered this before, I'd appreciate any information you have.
Regards,
John.

Hi,
I think file named 'NO_SMS_ON_DRIVE.SMS’ might be causing this issue. If this file is present in logical drives, then please give it a shot one more time after deleting this file from the logical drives.
Due to this file, it might be preventing 'smsexec' service to skip the drive when looking for content. So worth a try!
After deleting this file, you also need to restart 'smsexec' service to reflect the changes. You can also verify from below registry value & ensure that all of your logical drives (specially where SCCMContentLib directory resides) should be listed
over there
'HKLM\Software\Microsoft\SMS\DP\ContentLibUsableDrives'
Hope this will help!
Cheers | Navdeep Sidhu

Windows 8.1 laptop computer not showing in SCCM 2012 devices collection

Hi,
I am trying to do a POC on license management from SCCM 2012. I have configures a SCCM 2012 server and intune subscription also. I have Android, iOS and desktop apps uploaded (.msi). when I enrolled android and ios devices its shows up in SCCM,
devices collection but do not show in Intune.
my company portal is nicely coming up on android and iOS tabs. on the other hand company portal showing only Web apps, on a win8.1/7 laptop.
When I tried to enroll 2 windows 8.1/ 7 laptop (intel x86), they donot show up in SCCM. clients of intune manually installed, endpoint protection of SCCM installed also on both boxes.
I tried updating membership in SCCM for both know and unknown type, many time and also triggered Deployment of some desktop app, to the win 8.1 laptops. the desktops are showing in Intune All devices -> all computers nicely. But
not in SCCM2012.
what did I missed, I tried to add all the logical roles. below is some details what shows up in Intune:
indranil

If you installed the Intune agents on the Win 8.1 and Win 7 systems, then they will never show up in ConfigMgr.
There are basically two parts of Intune -- a Mobile Device Management piece and a Windows management piece. The Intune connector in ConfigMgr takes over the MDM piece and nothing more. When ConfigMgr takes over this MDM piece, as Torsten said, all MDM devices
enrolled show up in ConfigMgr and not Intune because that's now controlled by ConfigMgr. The Windows management piece remains unchanged and separate though and so those systems will be directly managed by Intune only or ConfigMgr only.
So you have three options there:
- Install the ConfigMgr agent and managed using COnfigMgr
- Install the Intune agent and manage using Intune
- Enroll the systems using OMA-DM which manages them as if they were devices. This means so you don't get SCEP or Windows Updates or most of the other ConfigMgr functionality. This is only valid for Win 8.1 though.
Jason | http://blog.configmgrftw.com

Windows Intune, Windows 8.1, SCCM 2012 R2

Hello,
I am planning to setup a new infrastructure to manage devices using Intune and SCCM 2012 R2 for one of my customer.
We plan to have one single site, where in the devices will be imaged with Windows 8.1 and then will be provided to users who roam around the world.
We like to manage these devices and do:
1. Inventory
2. Software Distribution
3. Software Updates
4. EndPoint Protection
5. Reporting
I have come to learn that:
1. Add and verify company domain at account.manage.microsoft.com
2. Add UPN in AD
3. Run DIR Sync for Users
4. Configure Intune Subscription
5. Install Connector
6. Whats the next step for configuring Windows 8.1?
My questions:
1. Is Cloud based Distribution Point required for hosting content. If not, how will the devices download the content and install the app?
2. Do we need PKI for Windows 8.1 devices(enrollment and management)?
3. Where should I install Company App Portal?
4. What are the different ways of enrolling Windows 8.1 device (Workplace & Store)?
5. Any other info if you can share, really appreciate
Please advice
Rajiv

Hello Nico,
Thanks for the guidance.
1. Distribution Point: manage.microsoft.com - whats the disk size/storage available by default. Is it unlimited. As the Intune license is user based. I can have 5 devices enrolled per user. I may have loads of packages/apps.
5. Your apps need to be signed with certificate that's is trusted by your device : I guess when we import
an Application in SCCM, it never checks if it has a signed certificate. One would need to ensure that the cert is present.
Can I install software updates to devices managed using SCCM Intune?
We are planning to have a single site with a remote DP for building devices with Windows 8.1. Once the device is ready, it will be given to the user. The user will enroll the device and is good to go. I am sure we will be able to embed Company Portal App
into the build image?
Thanks
Raijv

Procedure performing a "Retry Secondary Site" Operation in SCCM 2012 R2 Secondary Server

Dear Brother,
My SCCM 2012 R2 Secondary Site Server, unfortunately crashed and required to be restored, doing this I end up performing a "Retry Secondary Site Operation.
One by one I am clearing out the errors but there are few remaining errors on the prerequisite checks:
1.[Failed]:The logon account for the SQL Server service cannot be a local user account, NT SERVICE\<sql service name> or LOCAL SERVICE. You must configure the SQL Server service to use a valid domain account, NETWORK SERVICE, or LOCAL SYSTEM.
Actions Done: SQL Related Services use Logon As Domain Account "Microsoft-Domain\BillAdmin" , but still the above message still appears in the logs.
Actions Done: None
2.[Failed]:The collation of the site database does not match the collation of the parent site's database. All sites in a hierarchy must use the same database collation.
3.[Failed]:The site server might be unable to publish to Active Directory. The computer account for the site server must have Full Control permissions to the System Management container in its Active Directory domain. You can ignore this warning if you have
manually verified these permissions. For more information about your options to configure required permissions, see
http://go.microsoft.com/fwlink/p/?LinkId=233190.
Actions Done: None, as this machine is previously a working Secondary site for 1 Year already. So I do not suspect anything from the current related configuration.
4.[Failed]: Either the user account running Configuration Manager Setup does not have sysadmin SQL Server role permissions on the SQL Server instance selected for site database installation, or the SQL Server instance could not be contacted to verify permissions.
Setup cannot continue.
Action Taken: Domain Account "Microsoft-Domain\BillAdmin" has a
Sysadmin roles and actually all the check boxes are chosen to acquire all SQL account roles"
5. [Failed]:Prerequisite checks complete with failure - check ConfigMgrPrereq.log
in the root of the primary site server system drive.
6[Failed]:Unable to complete secondary site server installation - check ConfigMgrSetup.log in the root of the secondary site server system drive.
ConfigMgrPrereq.log-Start
?<12-27-2014 23:39:35> ********************************************
?<12-27-2014 23:39:35> ******* Start Prerequisite checking. *******
?<12-27-2014 23:39:35> ********************************************
?<12-27-2014 23:39:35> Commandline :
"E:\Program Files\Microsoft Configuration Manager\bin\x64\smsexec.exe"
?<12-27-2014 23:39:35> Check Type: Secondary site
Site Server: SecondarySite2.microsoft.com,
SQL Server: SecondarySite2.microsoft.com,
SQL Named Instance: MSSQLSERVER,
Install Folder: E:\Program Files\Microsoft Configuration Manager\,
Setup Source Folder: E:\Source\SCCM2012-R2
?<12-27-2014 23:39:35> INFO: Executing prerequisite functions...
?<12-27-2014 23:39:35> ===== INFO: Prerequisite Type & Server: SITE_SEC:SecondarySite2.microsoft.com =====
?<12-27-2014 23:39:35> <<<RuleCategory: Access Permissions>>>
?<12-27-2014 23:39:35> <<<CategoryDesc: Checking access permissions...>>>
?<12-27-2014 23:39:35> INFO: CheckLocalSys is Admin of <SecondarySite2.microsoft.com>.
?<12-27-2014 23:39:43> SecondarySite2.microsoft.com;    Site server computer account administrative rights;    Passed
?<12-27-2014 23:39:43> <<<RuleCategory: System Requirements>>>
?<12-27-2014 23:39:43> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
?<12-27-2014 23:39:43> INFO: Check Lanman service: <SecondarySite2.microsoft.com>.
?<12-27-2014 23:39:44> SecondarySite2.microsoft.com;    Check Server Service is running;    Passed
?<12-27-2014 23:39:45> INFO: OS version:601, ServicePack:1.
?<12-27-2014 23:39:46> INFO: Target computer is a Windows server.
?<12-27-2014 23:39:46> SecondarySite2.microsoft.com;    Unsupported site server operating system version for Setup;    Passed
?<12-27-2014 23:39:46> SecondarySite2.microsoft.com;    Domain membership;    Passed
?<12-27-2014 23:39:47> INFO: Free disk space on target
\\SecondarySite2.microsoft.com\E$\. = 83157 MB
?<12-27-2014 23:39:47> SecondarySite2.microsoft.com;    Free disk space on site server;    Passed
?<12-27-2014 23:39:47> SecondarySite2.microsoft.com;    Pending system restart;    Passed
?<12-27-2014 23:39:48> INFO: The server SecondarySite2.microsoft.com is not read-only domain controller.
?<12-27-2014 23:39:48> SecondarySite2.microsoft.com;    Read-Only Domain Controller;    Passed
?<12-27-2014 23:39:48> INFO: Check FQDN Length for site server: <SecondarySite2.microsoft.com>.
?<12-27-2014 23:39:48> SecondarySite2.microsoft.com;    Site Server FQDN Length;    Passed
?<12-27-2014 23:39:48> <<<RuleCategory: Dependent Components>>>
?<12-27-2014 23:39:48> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
?<12-27-2014 23:39:48> SecondarySite2.microsoft.com;    Microsoft XML Core Services 6.0 (MSXML60);    Passed
?<12-27-2014 23:39:49> SecondarySite2.microsoft.com;    Microsoft Remote Differential Compression (RDC) library registered;    Passed
?<12-27-2014 23:39:49> INFO: Checking Windows Installer version on SecondarySite2.microsoft.com.
?<12-27-2014 23:39:50> INFO: Path of Windows Installer is <\\SecondarySite2.microsoft.com\C$\Windows\system32\msi.dll>.
?<12-27-2014 23:39:51> INFO: Msi.dll version is: <5.0.7601.17807> .
?<12-27-2014 23:39:51> SecondarySite2.microsoft.com;    Microsoft Windows Installer;    Passed
?<12-27-2014 23:39:51> INFO: Start Checking InstallSQLExpress on site server: SecondarySite2.microsoft.com, SQL Server instance MSSQLSERVER
?<12-27-2014 23:39:51> INFO: SQL Server Express installation was not selected.
?<12-27-2014 23:39:51> SecondarySite2.microsoft.com;    SQL Server Express on Secondary Site;    Passed
?<12-27-2014 23:39:52> SecondarySite2.microsoft.com;    Existing Configuration Manager server components on site server;    Passed
?<12-27-2014 23:39:52> SecondarySite2.microsoft.com;    Firewall exception for SQL Server (stand-alone primary site);    Passed
?<12-27-2014 23:39:52> INFO: SQL Server computer <SecondarySite2.microsoft.com>
?<12-27-2014 23:39:52> INFO: SQL Server named instance <MSSQLSERVER>
?<12-27-2014 23:39:53> SecondarySite2.microsoft.com;    SQL Server service running account;    Error;    The logon account for the SQL Server service cannot be a local user account, NT SERVICE\<sql service
name> or LOCAL SERVICE. You must configure the SQL Server service to use a valid domain account, NETWORK SERVICE, or LOCAL SYSTEM.
?<12-27-2014 23:39:53> INFO: SQL Server computer <SecondarySite2.microsoft.com>
?<12-27-2014 23:39:53> INFO: SQL Server named instance <MSSQLSERVER>
?<12-27-2014 23:39:53> INFO: Cannot connect to registry key.
?<12-27-2014 23:39:53> SecondarySite2.microsoft.com;    Dedicated SQL Server instance;    Passed
?<12-27-2014 23:39:53> INFO: CheckSQLCollationSecondary
?<12-27-2014 23:39:53> INFO: Collation on <PrimarySite2DB.microsoft.com> <SQL_Latin1_General_CP1_CI_AS>
?<12-27-2014 23:41:27> ERROR: failed to get collation from secondary site
?<12-27-2014 23:41:27> SecondarySite2.microsoft.com;    Parent/child database collation;    Error;    The collation of the site database does not match the collation of the parent site's database. All
sites in a hierarchy must use the same database collation.
?<12-27-2014 23:41:27> INFO: Checking .NET framework versions 3.5...
?<12-27-2014 23:41:28> INFO: .NET is installed
?<12-27-2014 23:41:28> SecondarySite2.microsoft.com;    Minimum .NET Framework version for Configuration Manager site server;    Passed
?<12-27-2014 23:41:28> INFO: Skipping check for .NET version, user did not select to install SQL Server Express for Secondary Site.
?<12-27-2014 23:41:28> SecondarySite2.microsoft.com;    Minimum .NET Framework version for SQL Server Express edition installation for Configuration Manager Secondary Site;    Passed
?<12-27-2014 23:41:28> INFO: CheckInstallSourceVersion <E:\Source\SCCM2012-R2>
?<12-27-2014 23:41:29> SecondarySite2.microsoft.com;    Setup Source Version;    Passed
?<12-27-2014 23:41:29> INFO:CheckInstallSourcePath <SecondarySite2.microsoft.com>
?<12-27-2014 23:42:14> SecondarySite2.microsoft.com;    Setup Source Folder;    Passed
?<12-27-2014 23:42:14> INFO: Enter CheckSecSiteSqlOnSameMachine.
?<12-27-2014 23:42:14> INFO: Target secondary site Machine <SecondarySite2.microsoft.com>
?<12-27-2014 23:42:14> INFO: SQL Server computer <SecondarySite2.microsoft.com>
?<12-27-2014 23:42:14> SecondarySite2.microsoft.com;    SQL Server on the Secondary Site Computer;    Passed
?<12-27-2014 23:42:14> INFO:CheckSupportedFQDNFormat <SecondarySite2.microsoft.com>
?<12-27-2014 23:42:15> INFO: NetBIOS <SECONDARYSITE2>
?<12-27-2014 23:42:15> SecondarySite2.microsoft.com;    Primary FQDN;    Passed
?<12-27-2014 23:42:15> INFO:CheckMachineAccountHasADAccess <SecondarySite2.microsoft.com>
?<12-27-2014 23:42:40> ERROR: Site server does not have create child permission on AD 'System Management'
?<12-27-2014 23:42:40> WARN: Site server does not have delete child permission on AD 'System Management'
?<12-27-2014 23:42:40> SecondarySite2.microsoft.com;    Verify site server permissions to publish to Active Directory.;    Warning;    The site server might be unable to publish to Active Directory. The computer
account for the site server must have Full Control permissions to the System Management container in its Active Directory domain. You can ignore this warning if you have manually verified these permissions. For more information about your options to configure
required permissions, see
http://go.microsoft.com/fwlink/p/?LinkId=233190.
?<12-27-2014 23:42:40> INFO:CheckRemoteWMIConnection <SecondarySite2.microsoft.com>
?<12-27-2014 23:42:48> SecondarySite2.microsoft.com;    Remote Connection to WMI on Secondary Site;    Passed
?<12-27-2014 23:42:48> INFO: Check required collation of Sql Server.
?<12-27-2014 23:42:48> INFO: LangID <409>
?<12-27-2014 23:42:48> INFO: NOT primary site or CAS install, skipping check for reqired collation of SQL Server.
?<12-27-2014 23:42:48> SecondarySite2.microsoft.com;    Required SQL Server Collation;    Passed
?<12-27-2014 23:42:48> ===== INFO: Prerequisite Type & Server: SQL:SecondarySite2.microsoft.com =====
?<12-27-2014 23:42:48> <<<RuleCategory: Access Permissions>>>
?<12-27-2014 23:42:48> <<<CategoryDesc: Checking access permissions...>>>
?<12-27-2014 23:42:48> INFO:RemoteCheckAdminOnSQL <SecondarySite2.microsoft.com>, SQL Server <SecondarySite2.microsoft.com>
?<12-27-2014 23:44:33> SecondarySite2.microsoft.com;    SQL Server sysadmin rights;    Error;    Either the user account running Configuration Manager Setup does not have sysadmin SQL Server role permissions
on the SQL Server instance selected for site database installation, or the SQL Server instance could not be contacted to verify permissions. Setup cannot continue.
?<12-27-2014 23:44:33> ===== INFO: Prerequisite Type & Server: MP:SecondarySite2.microsoft.com =====
?<12-27-2014 23:44:33> <<<RuleCategory: Access Permissions>>>
?<12-27-2014 23:44:33> <<<CategoryDesc: Checking access permissions...>>>
?<12-27-2014 23:44:33> SecondarySite2.microsoft.com;    Administrative share (Site system);    Passed
?<12-27-2014 23:44:33> INFO:CheckSiteSystemtoSQLConnectivity <SecondarySite2.microsoft.com>
?<12-27-2014 23:44:33> INFO: Installing secondary site, skipping SQL Server connectivity check.
?<12-27-2014 23:44:33> SecondarySite2.microsoft.com;    Site System to SQL Server Communication;    Passed
?<12-27-2014 23:44:33> <<<RuleCategory: System Requirements>>>
?<12-27-2014 23:44:33> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
?<12-27-2014 23:44:33> INFO: The rule 'Check Server Service is running' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:44:34> INFO: OS version:601, ServicePack:1.
?<12-27-2014 23:44:35> INFO: Target computer is a Windows server.
?<12-27-2014 23:44:35> SecondarySite2.microsoft.com;    Unsupported management point operating system version for Setup;    Passed
?<12-27-2014 23:44:35> INFO: The rule 'Domain membership' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:44:36> INFO: Windows Cluster not found on SecondarySite2.microsoft.com.
?<12-27-2014 23:44:36> SecondarySite2.microsoft.com;    Windows Failover Cluster;    Passed
?<12-27-2014 23:44:36> INFO: The rule 'Pending system restart' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:44:36> <<<RuleCategory: Dependent Components>>>
?<12-27-2014 23:44:36> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
?<12-27-2014 23:44:36> INFO: The rule 'Microsoft XML Core Services 6.0 (MSXML60)' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:44:36> SecondarySite2.microsoft.com;    IIS service running;    Passed
?<12-27-2014 23:45:35> INFO: CheckWebSvcExtnRemote, result:<7>.
?<12-27-2014 23:45:35> SecondarySite2.microsoft.com;    BITS installed;    Passed
?<12-27-2014 23:47:00> INFO: CheckWebSvcExtnRemote, result:<7>.
?<12-27-2014 23:47:01> WARN: BITS Service is not running on SecondarySite2.microsoft.com.
?<12-27-2014 23:47:01> SecondarySite2.microsoft.com;    BITS enabled;    Passed
?<12-27-2014 23:47:01> SecondarySite2.microsoft.com;    IIS HTTPS Configuration for management point;    Passed
?<12-27-2014 23:47:01> INFO: Stand-alone primary site or secondary site. Skip checking firewall settings for SQL Server
?<12-27-2014 23:47:01> SecondarySite2.microsoft.com;    Firewall exception for SQL Server for management point;    Passed
?<12-27-2014 23:47:01> SecondarySite2.microsoft.com;    Administrative rights on management point;    Passed
?<12-27-2014 23:47:01> INFO:CheckV4ClientNotInstalled <SecondarySite2.microsoft.com>
?<12-27-2014 23:47:45> SecondarySite2.microsoft.com;    Client Version on Management Point Computer;    Passed
?<12-27-2014 23:47:45> ===== INFO: Prerequisite Type & Server: DP:SecondarySite2.microsoft.com =====
?<12-27-2014 23:47:45> <<<RuleCategory: Access Permissions>>>
?<12-27-2014 23:47:45> <<<CategoryDesc: Checking access permissions...>>>
?<12-27-2014 23:47:45> <<<RuleCategory: System Requirements>>>
?<12-27-2014 23:47:45> <<<CategoryDesc: Checking system requirements for ConfigMgr...>>>
?<12-27-2014 23:47:47> SecondarySite2.microsoft.com;    Unsupported distribution point operating system version for Setup;    Passed
?<12-27-2014 23:47:47> INFO: The rule 'Domain membership' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:47:47> INFO: The rule 'Windows Failover Cluster' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:47:47> INFO: The rule 'Pending system restart' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:47:47> <<<RuleCategory: Dependent Components>>>
?<12-27-2014 23:47:47> <<<CategoryDesc: Checking dependent components for ConfigMgr...>>>
?<12-27-2014 23:47:47> SecondarySite2.microsoft.com;    Microsoft XML Core Services 6.0 (MSXML60) for distribution point;    Passed
?<12-27-2014 23:47:47> INFO: The rule 'IIS service running' has been run on server 'SecondarySite2.microsoft.com', skipped.
?<12-27-2014 23:47:47> SecondarySite2.microsoft.com;    IIS HTTPS Configuration for distribution point;    Passed
?<12-27-2014 23:47:47> SecondarySite2.microsoft.com;    Administrative rights on distribution point;    Passed
?<12-27-2014 23:47:48> ***************************************************
?<12-27-2014 23:47:48> ******* Prerequisite checking is completed. *******
?<12-27-2014 23:47:48> ***************************************************
?<12-27-2014 23:47:48> INFO: Updating Prerequisite checking result into the registry
?<12-27-2014 23:47:48> INFO: Connecting to SecondarySite2.microsoft.com registry
?<12-27-2014 23:47:50> INFO: Setting registry values
ConfigMgrPrereq.log-End
Well my question is what would be the best solutions as it bugs me for days now.
Regards,

Hello,
?<12-27-2014 23:44:33> SecondarySite2.microsoft.com;
SQL Server sysadmin rights;    Error;
Either the user account running Configuration Manager Setup does not have sysadmin SQL Server role permissions on the SQL Server instance selected for site database installation, or the SQL Server instance could not be contacted to verify permissions.
Setup cannot continue.
Did you install SQL server with a local account?
?<12-27-2014 23:41:27> SecondarySite2.microsoft.com;
Parent/child database collation;    Error;
The collation of the site database does not match the collation of the parent site's database.
All sites in a hierarchy must use the same database collation.
Try this blog:
http://jthys.wordpress.com/2012/04/02/sccm-2012-required-sql-server-collation/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

SCCM 2012 does not find the last signature of SCEP

Hi, we have installed SCCM 2012 with SCEP as our antivirus, all clients use the SCCM to download the signature, the alternate sources has been unmarked, and only we have selected SCCM and WSUS to download the updates.
In SCCM 2012 we have created the ADR to search and download ForeFront EndPoint Protection 2010 Security Updates. The server downloads the packages everyday at 01:00 a.m. (local time) and start to distribute to all DP at 03:00 a.m. The clients start to retrieve
when they are switched on or from 08:00 a.m. and verify new signatures every hour from them.
But the clients have the SCEP client update to 2 or 3 days ago! When we check the packages downloaded we note that the last package was not downloaded. This is the problem what we have. How can we solve this?
Raulito

Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
Have you confirmed that your ADR is running correctly?
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

After installing SCCM 2012 R2 CU4, I show a Distribution Point warning that won't clear.

I recently installed SCCM 2012 R2 CU4 on a LAB environment, and nowhere is it more important to wait until all requisite site roles are reinstalled before doing anything else.
I did, and still do, have an warning/ error on the Site components that shows up on one of the child primary sites after the CU4 installation.
Distribution Manager has not tried to install IIS component of operating system to distribution point “[“Display=\\SCxxx\”]MSWNET:[“SMS_SITE=xxx”]\\xxx\”. You should install and configure IIS manually. Please ensure RDC is also enabled.
IIS is installed, RDC is enabled, but I get this error. What could be the real issue?

Hi,
So you have tried to reinstall IIS conponents and DP?
Have you checked the distmgr.log? Anything helpful?
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

SCCM 2012 protection?

Similar Messages

Maybe you are looking for