SCEP - to be installed status when it IS installed already

Question

I have a few servers in a colection of many servers, that show "To be installed" in the Endpoint Protection Deployment State in my console.
However, they already have SCEP installed, and are updating from SCCM every day, and have applied the correct policies (except one, see below) with a set of file and folder exclusions and settings for real time protection and so on, these options are
disabled in the SCEP GUI on ALL the servers. The console even shows the SCEP policies Applied, which are 4 at the moment. All the servers have had days to update it's computer policy, and 95% of the servers in the collection have updated it's policy and
are working fine.
In the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\EPAgent\GeneratedPolicy registry key (The servers that are OK have LastAppliedPolicy instead), all minus one Endpoint Protection policy is shown. The console shows more policies, than the ones applied
on the servers.
How can I fix this? Maybe it is a bug?
Freddy

Answer 1

I've removed the servers from the SCEP manage Collection, then the status in the console showed unmanaged, even though i didn't put these in a Collection that says No in the "manage Endpoint Protection Client on Client computers".  I don't
think this will make a difference actually.
I put the servers back in a Collection With a Managed policy, and the status of these servers in the console went back to "To be installed". I also set the "Allow Endpoint Protection Client installation outside maintenance Windows" Client
setting to Yes, but it didnt make a difference, the same info was written in the log as earlier.
This is the EndpointProtectionAgent.log:
Endpoint is triggered by WMI notification. EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
start to send State Message with topic type = 2001, state id = 2, and error code = 0x00000000 EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Start to send state message. EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Send state message successfully EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Save new state 2, error code 0, detail message '' to registry SOFTWARE\Microsoft\CCM\EPAgent\State EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Failed to get C:\Windows\ccmsetup\SCEPInstall.exe version. EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Failed to get EP installer version. EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Failed to refresh EP Agent Status with error = 0x80004005. EndpointProtectionAgent 15.09.2014 10:34:42 2380 (0x094C)
Endpoint is triggered by message. EndpointProtectionAgent 15.09.2014 10:34:42 4512 (0x11A0)
Endpoint is triggered by message. EndpointProtectionAgent 15.09.2014 10:34:42 3488 (0x0DA0)
Failed to get C:\Windows\ccmsetup\SCEPInstall.exe version. EndpointProtectionAgent 15.09.2014 10:34:42 4512 (0x11A0)
Failed to get EP installer version. EndpointProtectionAgent 15.09.2014 10:34:42 4512 (0x11A0)
Failed to refresh EP Agent Status with error = 0x80004005. EndpointProtectionAgent 15.09.2014 10:34:42 4512 (0x11A0)
Failed to get C:\Windows\ccmsetup\SCEPInstall.exe version. EndpointProtectionAgent 15.09.2014 10:34:42 3488 (0x0DA0)
Failed to get EP installer version. EndpointProtectionAgent 15.09.2014 10:34:42 3488 (0x0DA0)
Failed to refresh EP Agent Status with error = 0x80004005. EndpointProtectionAgent 15.09.2014 10:34:42 3488 (0x0DA0)