SCEP install and policy issue (after migration SCCM 2007 to 2012)

Question

Hi,
We have some terminal services which were connected to SCCM 2007.
I migrated 3 of them (via "install client" in SCCM 2012), what worked fine. Since they become member of the Windows server group + terminal services group, they get the scep-client as well as a specific policy.
Now we have 1 terminal server which did not install the scep client.
Logfile:
Failed to get EP event code under registry key SOFTWARE\Microsoft\CCM\EPAgent    EndpointProtectionAgent    21/08/2014 11:19:42    43640 (0xAA78)
Failed to get EP event message under registry key SOFTWARE\Microsoft\CCM\EPAgent    EndpointProtectionAgent    21/08/2014 11:19:42    43640 (0xAA78)
State 1, error code 0 and detail message are not changed, skip updating registry value    EndpointProtectionAgent    21/08/2014 11:19:42    43640 (0xAA78)
File C:\Windows\ccmsetup\SCEPInstall.exe version is 4.5.216.0.    EndpointProtectionAgent    21/08/2014 11:19:42    43640 (0xAA78)
Sleep 10 seconds and retry read ProductName of the AM solution    EndpointProtectionAgent    21/08/2014 11:19:42    43640 (0xAA78)
Sleep 10 seconds and retry read ProductName of the AM solution    EndpointProtectionAgent    21/08/2014 11:19:52    43640 (0xAA78)
Sleep 10 seconds and retry read ProductName of the AM solution    EndpointProtectionAgent    21/08/2014 11:20:02    43640 (0xAA78)
Sleep 10 seconds and retry read ProductName of the AM solution    EndpointProtectionAgent    21/08/2014 11:20:12    43640 (0xAA78)
Sleep 10 seconds and retry read ProductName of the AM solution    EndpointProtectionAgent    21/08/2014 11:20:22    43640 (0xAA78)
Unable to query registry value (ProductName), return (0x80070002) means EP client is NOT installed successfully.    EndpointProtectionAgent    21/08/2014 11:20:32    43640 (0xAA78)
So I installed the client manually via "SCEPInstall.exe /policy z:\client\ep_defaultpolicy.xml" (after a pushd \\sccmserver\c$\...client\).
2 things:
1.any idea why it wouldn't install "failed to get EP event code under reigstry key" ..?
2.specific scep terminal server policy will be applied afterwards (file exclusions etc), right (don't see it yet and refreshed policy several times)?
J.
Jan Hoedt

Answer 1

Hi,
I have seen a temporary solution, created a package with the command line: REG add “HKLM\SOFTWARE\Microsoft\Microsoft Security Client” and deployed this program to the Client.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.