SCEP 2012 R2 - Remote Distribution Point

Can I set up a SCEP 2012 web site or portal located in my DMZ that my remote users can connect to if their definition files are out of date.
I would like the portal to be made accessible so that updates can be applied by the end user manually when there AV is out of date and they can not connect to services because of the out of date files.

Apologies Jeff - The following two options look good
Updates distributed from Microsoft Update – This method allows computers to connect directly to Microsoft Update in order to download definition and engine updates. This method can be useful for computers that are not often connected to the business
network.
Updates distributed from Microsoft Malware Protection Center – This method will download definition updates from the Microsoft Malware Protection Center.
Looking at them though there looks like to much for a user to do - We all know what users are like. I want something more like this to be hosted so once advised the AV files are out of data by the gateway devices the user is redirected to a page
that will present a screen like the extract below and then all user has to do is click "update"

Similar Messages

SCCM 2012: Reinstall remote distribution point?

Hi,
We have a remote distribution point to which we can't deploy packages anymore. Several attempts to repair it failed.
I'd like to remove the distribution point and reinstall it via SCCM 2012 console.
However, I'd like to know the impact since it contains GB of packages already.
Note: the DP has been removed for clients (temorarely) so no impatc there.
My questions:
-what is best practises: can I just remove and add it in 1 go (or need to wait before re-adding, reboot needed in between)?
-will all data be pulled in again (I activated pull and would reactivate it after reinstall)?
-what's your experience in this procedure? does it work in general or is it preferrable I continue troubleshooting the current situation?
Please advise.
J.
Jan Hoedt

I can see there was installed a new dotnet version C:\Windows\Microsoft.NET\Framework64\v4.0.30319
recently.
Can/should I register this to IIS?
http://stackoverflow.com/questions/22952115/asp-net-iis-7-5-http-500-21-error
C:\Windows\Microsoft.NET\Framework\v4.0.30319>aspnet_regiis.exe -i
Jan Hoedt

Distribution manager failed to create the defined share or folder on distribution point and failed to connect to remote distribution point

We have recently upgraded remote distribution point to SCCM 2012 R2 CU4. when i try to distribute the package getting the error on the distribution point configuration status "Distribution manager failed to create the defined share or folder on distribution
point and failed to connect to remote distribution point"
Errors on the package transfer log file.
CWmi::Connect() could not connect to \\XXXXXXXX.COM\root\SCCMDP. error = The operation completed successfully.. Will try FQDN
CWmi::Connect() failed to connect to \\XXXXXXX.COM\root\SCCMDP. error = The RPC server is unavailable.
Failed to connect to the DP WMI namespace on the remote DP

Thanks Sandys for your suggestions.
i have tried wbemtest from site server(Secondary site) and remote DP server. Receiving the "The RPC
server is unavailable" from both ends.
error:0x800706ba - The RPC server is unavailable

OSD: prestaged image does not distribute to remote distribution point

Hi,
We have an SCCM 2012 with 2 distribution points: a virtual (the sccm server) and a physical (a pure distribution point). Once and a while we have issues with deploying packages to the physical dp but clearing it and redistirbuting solves the issue.
Now we have a big OS image (15 GB) which does not want to deploy to the physical distribution point at all.
The status stays "in progress" since this morning 11 AM (+/- 8 hours ago). Other packages distribute also slowly but fine.
Distmgr.log shows only logs from end of March this year and then stopped logging anything so I don't have a clue what is going wrong.
Please advise.
J.
Jan Hoedt

Hi,
Please go to the properties of the OS image, make sure "Manually copy this content to the distribution point" on the "Distribution Settings" tab is checked.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 R2 & Pull Distribution Point Casuing 0 Byte amd64 folders

Experiencing an extremely frustrating problem.
ENVIRONMENT:
1 Primary Site Server / DP (Main Office)
40 DP's (Remote School Locations)
- Hosted on a file server VM
- Contains 3 partitions: C: (System), E: (Data), I: (PKG share)
OS: Server 2008 R2 (Primary Site Server and File Servers / DP's)
SCCM Version: SCCM 2012 R2
We recently upgrade to SCCM 2012 R2. I have confirmed that this has not caused the problem I am about to describe. The only other change that has occurred recently is that we configured all of our DP's at each of our 40 sites to be pull distribution points.
While this seems to be working fine we are now seeing a whole bunch of 0 Byte alpha numeric folders with a 0 Byte amd64 subfolder. These folders seem to attach to the E: drive on all of our File server distribution points....for the life of me I cannot figure
out why and this occurred as soon as we switched to pull distribution points. While this does not seem to be having an erroneous effect on our environment, it is annoying and somewhat disconcerting as I have not been able to ascertain what is causing it. Any
SCCM admins out their ever encountered this?
Thanks

Yes, I have examined the logs using cmtrace and done a search for the amd64 string to see if any of the logs indicate its creation as part of the pull dp process. I have not found anything as of yet.
Thanks

2012 SCCM SP1 Distribution Point Certificate store error on Server 2003 R2

Has anyone had this issue on Server 2003 R2 where you are getting this error listed below? All content is being distributed ok. But, monitoring is showing errors with all my Distribution points and I want these errors to go away so I don't have to sift through
all the darn errors.
Thanks for your help. Daniel.
Report status message 0x40000952 to MP
Failed to create certificate store from encoded certificate.. This is usually caused by a problem with the program. Please check the Microsoft Knowledge Base to determine if this is a known issue or contact Microsoft Support Services for further assistance.
The parameter is incorrect. (Error: 80070057; Source: Windows)
Status message has been successfully sent to MP from remote DP

I have found the error message in the smsdpmon.log on a Windows Server 2003 SP2 system acting as a Distribution Point (only). The error shows up when / during a scheduled content validation on that server and is repeated after each package is "validated".
From the smsdpmon.log:
- Start to evaluate package share for package 'XXX0004F' version 5 ...
- Package XXX0004F is verified successfully
- Report state message 0x40000950 to MP
- Failed to create certificate store from encoded certificate.. This is usually caused by a problem with the program. Please check the Microsoft Knowledge Base to determine if this is a known issue or contact Microsoft Support Services for further assistance. The parameter is incorrect. (Error: 80070057; Source: Windows)
- Report Body: <ReportBody><StateMessage MessageTime="20140315150802.000000+000" SerialNumber="5"><Topic ID="XXX0004F" Type="901" IDType="0"/><State ID="2384" Criticality="0"/><UserParameters Flags="0" Count="2"><Param>XXX0004F</Param><Param>["Display=\\DPSERVNAME.domain.com\"]MSWNET:["SMS_SITE=XXX"]\\DPSERVNAME.domain.com\</Param></UserParameters></StateMessage></ReportBody>
- Report status message 0x40000950 to MP
- Failed to create certificate store from encoded certificate.. This is usually caused by a problem with the program. Please check the Microsoft Knowledge Base to determine if this is a known issue or contact Microsoft Support Services for further assistance. The parameter is incorrect. (Error: 80070057; Source: Windows)
- Status message has been successfully sent to MP from remote DP
- Report status message 0x80000954 to MP
- Failed to create certificate store from encoded certificate.. This is usually caused by a problem with the program. Please check the Microsoft Knowledge Base to determine if this is a known issue or contact Microsoft Support Services for further assistance. The parameter is incorrect. (Error: 80070057; Source: Windows)
- Status message has been successfully sent to MP from remote DP
I tried to pretty up the above - not sure that I was successful.
The site server is a Windows Server 2012 R2 Standard running SCCM 2012 R2.

Remote Distribution Points for Software Update Point Site

Hi,
I have deployed Primary Site MP (SCCM 2012 R2) in the Main Office. In our environment, we have many remote offices with limited internet connection.
Is it best to setup Secondary Site in those remote offices or setup Distribution Points? What are the considerations?
Thanks.
~Andre

You only install one SUP. You can't install a SUP on DP's, and you don't need to install WSUS on DP's either, just IIS.
The clients will need to connect to the SUP (port 8530) to get the windows update catalogue. If they can't connect to your MP and SUP directly, then you will need to check your proxy configuration on the clients
Once the client has performed a scan, it will then match what it determines are "required updates" against what you have deployed in its client policy.
The client then connects to the local DP to download the updates and install them.
The client only downloads policy from an MP. If you have a DP on the same server as the MP then clients may try to download updates if you don't have your content boundaries configured correctly, and have also allowed them to use a fallback location.
To prevent clients going over the WAN to download the updates, check your update deployment under the "Download Settings" tab and choose "Do not install software updates" on both the options, and make sure you have your content location
boundaries configured correctly with the DP at each remote site assigned to the correct boundary.

"Failed to connect to remote distribution point" on local machine

I have a new System Center 2012 R2 setup. I only have a single server with Configuration Manager, SQL, and Distribution Point all on the same machine.
The Configuration Manager Client Package is failing to load to the distribution point.
Content Status says: "Distribution Manager failed to connect to distribution point
["Display=\\AcadSCCM01.Academic.local\"]MSWNET:["SMS_SITE=900"]\\AcadSCCM01.Academic.local\. Check your network and firewall settings."
The distribution point is on the same machine as config manager, and the firewall is turned off. When I try to redistribute the package it fails again immediately.
I checked distmgr.log and found the following:
Translated server name AcadSCCM01.Academic.local to Academic.local\AcadSCCM01.Academic.local.
SMS_DISTRIBUTION_MANAGER
2/27/2015 5:15:54 PM    3640 (0x0E38)
CWmi::Connect() failed to connect to \\AcadSCCM01.Academic.local\root\MicrosoftIISv2. Error = 0x8004100E
SMS_DISTRIBUTION_MANAGER
2/27/2015 5:15:54 PM    3640 (0x0E38)
STATMSG: ID=2391 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=AcadSCCM01.Academic.local SITE=900 PID=2240 TID=3640 GMTDATE=Fri Feb 27 22:15:54.990 2015 ISTR0="["Display=\\AcadSCCM01.Academic.local\"]MSWNET:["SMS_SITE=900"]\\AcadSCCM01.Academic.local\"
ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\AcadSCCM01.Academic.local\"]MSWNET:["SMS_SITE=900"]\\AcadSCCM01.Academic.local\"
SMS_DISTRIBUTION_MANAGER
2/27/2015 5:15:54 PM    3640 (0x0E38)
ERROR DPConnection::ConnectRemoteIISManagementWMI() - Failed to connect to
AcadSCCM01.Academic.local. error = 0x8004100e
SMS_DISTRIBUTION_MANAGER
2/27/2015 5:15:54 PM    3640 (0x0E38)
STATMSG: ID=2344 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=AcadSCCM01.Academic.local SITE=900 PID=2240 TID=3640 GMTDATE=Fri Feb 27 22:15:54.991 2015 ISTR0="["Display=\\AcadSCCM01.Academic.local\"]MSWNET:["SMS_SITE=900"]\\AcadSCCM01.Academic.local\"
ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\AcadSCCM01.Academic.local\"]MSWNET:["SMS_SITE=900"]\\AcadSCCM01.Academic.local\"
SMS_DISTRIBUTION_MANAGER
2/27/2015 5:15:54 PM    3640 (0x0E38)

Can you confirm that all the pre-requisites have been installed?
Using the following Powershell:
Get-WindowsFeature –ComputerName AcadSCCM01.Academic.local| Where Installed
And compare against https://technet.microsoft.com/en-us/library/gg682077.aspx

SCCM 2012 cannot access distribution point as a data source for OS image

I am trying to path a data source to one of our file servers and get the following error:
I am guessing this is a permissions issue. The path is correct. This is also a distribution point and I have no trouble distributing content to it. The SCCM server is set to have local admin and network share rights to this file server. Any
ideas?

Of course - that would be too easy... had to ask though :)
Hmm, sounds odd. I'm guessing that since you're using it as a DP you're on Windows Server... You might try browsing there in your runline but instead of doing
\\server\share\OS.WIM try doing
\\Server.FQDN\Share\OS.WIM
I've seen some odd issues where I need to specify FQDN but it's pretty rare. I do remember an issue where my own account would not go through even though it had rights and I could navigate. I used a different account and I think after a while
it cleared up. My guess is something got rebooted and it "righted the ship" so-to-speak. I'm sorry I don't remember more, that particular client had multiple accounts so I just switched to a different one and by the time I had to do the same function
again the issues had resolved itself so I just moved on.

SCCM 2012 distribution point install failes with faild to verify disk drive

I am trying to install remote distribution point on new Windows Server 2012 standard but getting failures. here is the code:
Failed to find a valid drive on the distribution point
Failed to install DP files on the remote DP. Error code = 15
I can created files and folder manually on the server fine on the drive specified during the deployment wizard. I need to know what process SCCM 2012 goes through to verify a disk drive for usage as a remote distribution point

Hi,
Did you ever get this fixed?
In my case, it's a physical server with a 2x 500GB in RAID1.
Server OS is 2012. SCCM Version is 2012 SP1 cu2
The disk has been partitioned into 2 logical drives: C-Drive and D-drive
The distmgr.log states:
failed to find a valid drive on the Distribution Point
Failed to install DP Files on the remote DP. Error Code = 15
Drive D: is not valid. Error = 15
Do you have any ideas of how SCCM evaluates drives to be correct?
I've ran a WMI Query and the partition shows as a Local Hard Disk.
Do you have any more ideas what I can check?
Thanks!
Filip

Calling back with empty distribution points list : Local DP vs Remote DP

Hi all,
I am an issue getting remote offices to pull packages (A task sequence) from their onsite DP. They keep pulling from the main DP in the datacenter.
How do I ensure the mainDP is not considured 'LOCAL' but it is 'REMOTE' and the local office DP is 'LOCAL'?
Here is my setup:
SCCM 2012 with DP / MP set in Datacenter: mainDP
3 Offices up the country with local DP Server: OfficeDP1 / OfficeDP2 / OfficeDP3 (green under monitoring and my packages show as verified content)
SCCM Boundaries set via "AD Site". This matches our AD Structure. In AD Sites and Services, each site has a unique IPv4 addressing (AD Address Prefix: Office1 - 192.168.100.0/25 & Office 2 - 192.168.101.0/25 etc)
Each SCCM Boundary has a boundary group that reflects the local office
The locationservices file on an office PC has:
Current AD Site of machine is Office1
Calling back with the following distribution points
Distribution Point='http://mainDP/SMS_DP_SMSPKG$/PR10005D', Locality='LOCAL', DPType='SERVER', Version='7804', Capabilities='<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>',
Signature='http://mainDP/SMS_DP_SMSSIG$/PR10005D', ForestTrust='TRUE',
I would expect it to say http://Office1DP/SMS_DP_SMSPKG$/PR10005D
This is how I configured my separate packages / programs:
Package A and Package B:
Data Source Tab: disabled Binary diff replication
Data Access Tab: nothing ticked
Distribution Settings: ticked - distribute the content for this package to pref dist points
Program 1 and 2 respective config:
Advanced tab: ticked - Allow this program to be installed...deployed
This is settings when the TS deployed agaisnt Device Collection
Distribution Points Tab: Nothing ticked (no fallback configured nor use remote distribution point)
Deployment options dropdown: Download all content locally before starting task sequence
This is the CAS.log file
Location update from CTM for content PR10005D.4 and request {6637EBA8-A69C-4C96-940B-255EF1A45B3F}
ContentAccess 16/12/2013 19:04:15
4704 (0x1260)
Download request only, ignoring location update
ContentAccess 16/12/2013 19:04:15
4704 (0x1260)
Location update from CTM for content PR100063.4 and request {6637EBA8-A69C-4C96-940B-255EF1A45B3F}
ContentAccess 17/12/2013 07:45:34
3832 (0x0EF8)
Download location found 0 - http://mainDP/SMS_DP_SMSPKG$/PR10005D
ContentAccess 17/12/2013 07:45:34
3832 (0x0EF8)
Download requestonly, ignoring location update
ContentAccess
17/12/2013 07:45:34
3832 (0x0EF8)
and then the CTM log file:
Persisted locations for CTM job {028C06AE-9D79-481C-A26B-2FF98A1D916C}:
(LOCAL) http://mainDP/SMS_DP_SMSPKG$/PR10005D
ContentTransferManager 16/12/2013 17:42:15
2724 (0x0AA4)
Nothing points to the local officeDP which has the content successfully distributed and verified against it.
Help
Thanks

This may not be the answer you're looking for since you're doing boundaries differently.
This is how I have it setup and it works perfect.
1) Do ip ranges for all boundaries
2) Assign each boundary to a boundary group
3) Add the remote dp as the site server in the boundary group
4) Also make sure the main local dp also has a boundary group with all the ip ranges that don't have a remote dp.
I believe when you download something from software center, you can check the following log to see what download locations it finds.
C:\Windows\CCM\Logs\CAS.log

SCCM 2012 Distribution Point Issue

Dear Team,
Hi, we deploy another Distribution point on other server on same subnet/LAN. but it show errors and progress run daily but not successful.
durranifaisal

Hi, did have some issues before when installing remote distribution points. More about that can be found here:
http://henkhoogendoorn.blogspot.nl/2014/07/installing-remote-distribution-point.html
It mentions: I did choose "Install and configure II if required by Configuration Manager" during installation, but IIS was installed already on servers. I did install BITS on servers also, because this seems to be needed (installation can be failing
otherwise). Strange thing, because BITS is no prerequisite at all? What I did NOT however is installing RDC as a prerequisite. Therefore files couldn't be replicated after all.
The issue described above where you can only add 2 roles is not known to me. Maybe server must be restarted or prerequisites are not in place? Like to hear the answer as well..
My blogs: Henk's blog and
Virtuall | Follow Me on:
Twitter | View My Profile on:
LinkedIn

SCCM 2012 Distribution Point Priority

Hello
When two distribution points are assigned to a boundary group and the connection speeds are assigned as "Fast" and "Slow", will the clients within that boundary group always attempt to download from the fast one first if it is available?
Regards,
Mark

Correct. You should also be able to see in the client log files that it, the site system with the "Slow" connection, will be treated as a "remote" distribution point.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

SCCM 2012 R2 Pull distribution fails on remote DPs

I have a few remote distribution points that I've been able to distribute driver packages to in the past, but after loading updates on my primary site server and the DPs, distribution of new driver packages fail even though it distributes fine to my primary
site server.
All DPs are in remote subnets connected via VPN.

Actually when you use pull DP that mean there will be a standard DP as source, where all the content will be downloading on pull DP from the source DP. so pull DPs should have good enough network from standard DP to pull DPs. and distributed content should
be available on source DP, otherwise content distribution will be failed.
Sharad Singh | My blogs: SharadTech | Twitter:
@SinghSharaad | | Please remember to click “Mark as Answer” on the post that helps you.This can be beneficial to other community members reading the thread.

SCCM 2012 Distribution Point in workgroup

I am trying to install a SCCM 2012 SP1 DP on a Windows 2008 workgroup server.
Some parts are working but during installation I get errors....
The question is: is it supported what I am trying to do, a workgroup (not part of a domain) server using as DP in SCCM 2012 SP1 ?

Distribution Points must be domain members
http://eskonr.com/2013/08/sccm-configmgr-2012-manage-workgroup-computers-for-deploymentremote-tools-etc/
You can manage workgroup clients though.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

SCEP 2012 R2 - Remote Distribution Point

Similar Messages

Maybe you are looking for