Some clients not logging in

Hello,
We have 20 Mac clients connected wirelessly via an AirPort Extreme. We have an Xserve, and it runs Open Directory, AFP, DHCP, and Software Update. All of our clients have been working fine until recently. Some clients shake the login window when all the correct information is provided (List of users, correct password). This has only happened to a few client, and I noticed that in Directory Utility, they were running LDAPv3 version 3.1, while the working ones were running 3.0. Also, sometimes the server DNS IP address must be entered twice as two different DNS servers on the client machine for it to work. Any suggestions?
Thanks

You may have tried this already, but sometimes it works:
Log in as admin on the client, go to System Preferences>Accounts>Login Options and hit the 'Edit...' button for the Network Account Server. Delete the entry, add it again, save & restart the client.
Good luck. Logs of both the client and the server may give you a good hint, but without them, we're shooting a bit in the dark.
Cheers,
M

Similar Messages

ORA-16191: Primary log shipping client not logged on standby.

Hi,
Please help me in the following scenario. I have two nodes ASM1 & ASM2 with RHEL4 U5 OS. On node ASM1 there is database ORCL using ASM diskgroups DATA & RECOVER and archive location is on '+RECOVER/orcl/'. On ASM2 node, I have to configure STDBYORCL (standby) database using ASM. I have taken the copy of database ORCL via RMAN, as per maximum availability architecture.
Then I have ftp'd all to ASM2 and put them on FS /u01/oradata. Have made all necessary changes in primary and standby database pfile and then perform the duplicate database for standby using RMAN in order to put the db files in desired diskgroups. I have mounted the standby database but unfortunately, log transport service is not working and archives are not getting shipped to standby host.
Here are all configuration details.
Primary database ORCL pfile:
[oracle@asm dbs]$ more initorcl.ora
stdbyorcl.__db_cache_size=251658240
orcl.__db_cache_size=226492416
stdbyorcl.__java_pool_size=4194304
orcl.__java_pool_size=4194304
stdbyorcl.__large_pool_size=4194304
orcl.__large_pool_size=4194304
stdbyorcl.__shared_pool_size=100663296
orcl.__shared_pool_size=125829120
stdbyorcl.__streams_pool_size=0
orcl.__streams_pool_size=0
*.audit_file_dest='/opt/oracle/admin/orcl/adump'
*.background_dump_dest='/opt/oracle/admin/orcl/bdump'
*.compatible='10.2.0.1.0'
*.control_files='+DATA/orcl/controlfile/current.270.665007729','+RECOVER/orcl/controlfile/current.262.665007731'
*.core_dump_dest='/opt/oracle/admin/orcl/cdump'
*.db_block_size=8192
*.db_create_file_dest='+DATA'
*.db_domain=''
*.db_file_multiblock_read_count=16
*.db_name='orcl'
*.db_recovery_file_dest='+RECOVER'
*.db_recovery_file_dest_size=3163553792
*.db_unique_name=orcl
*.fal_client=orcl
*.fal_server=stdbyorcl
*.instance_name='orcl'
*.job_queue_processes=10
*.log_archive_config='dg_config=(orcl,stdbyorcl)'
*.log_archive_dest_1='LOCATION=USE_DB_RECOVERY_FILE_DEST'
*.log_archive_dest_2='SERVICE=stdbyorcl'
*.log_archive_dest_state_1='ENABLE'
*.log_archive_dest_state_2='ENABLE'
*.log_archive_format='%t_%s_%r.dbf'
*.open_cursors=300
*.pga_aggregate_target=121634816
*.processes=150
*.remote_login_passwordfile='EXCLUSIVE'
*.sga_target=364904448
*.standby_file_management='AUTO'
*.undo_management='AUTO'
*.undo_tablespace='UNDOTBS'
*.user_dump_dest='/opt/oracle/admin/orcl/udump'
Standby database STDBYORCL pfile:
[oracle@asm2 dbs]$ more initstdbyorcl.ora
stdbyorcl.__db_cache_size=251658240
stdbyorcl.__java_pool_size=4194304
stdbyorcl.__large_pool_size=4194304
stdbyorcl.__shared_pool_size=100663296
stdbyorcl.__streams_pool_size=0
*.audit_file_dest='/opt/oracle/admin/stdbyorcl/adump'
*.background_dump_dest='/opt/oracle/admin/stdbyorcl/bdump'
*.compatible='10.2.0.1.0'
*.control_files='u01/oradata/stdbyorcl_control01.ctl'#Restore Controlfile
*.core_dump_dest='/opt/oracle/admin/stdbyorcl/cdump'
*.db_block_size=8192
*.db_create_file_dest='/u01/oradata'
*.db_domain=''
*.db_file_multiblock_read_count=16
*.db_name='orcl'
*.db_recovery_file_dest='+RECOVER'
*.db_recovery_file_dest_size=3163553792
*.db_unique_name=stdbyorcl
*.fal_client=stdbyorcl
*.fal_server=orcl
*.instance_name='stdbyorcl'
*.job_queue_processes=10
*.log_archive_config='dg_config=(orcl,stdbyorcl)'
*.log_archive_dest_1='LOCATION=USE_DB_RECOVERY_FILE_DEST'
*.log_archive_dest_2='SERVICE=orcl'
*.log_archive_dest_state_1='ENABLE'
*.log_archive_dest_state_2='ENABLE'
*.log_archive_format='%t_%s_%r.dbf'
*.log_archive_start=TRUE
*.open_cursors=300
*.pga_aggregate_target=121634816
*.processes=150
*.remote_login_passwordfile='EXCLUSIVE'
*.sga_target=364904448
*.standby_archive_dest='LOCATION=USE_DB_RECOVERY_FILE_DEST'
*.standby_file_management='AUTO'
*.undo_management='AUTO'
*.undo_tablespace='UNDOTBS'
*.user_dump_dest='/opt/oracle/admin/stdbyorcl/udump'
db_file_name_convert=('+DATA/ORCL/DATAFILE','/u01/oradata','+RECOVER/ORCL/DATAFILE','/u01/oradata')
log_file_name_convert=('+DATA/ORCL/ONLINELOG','/u01/oradata','+RECOVER/ORCL/ONLINELOG','/u01/oradata')
Have configured the tns service on both the hosts and its working absolutely fine.

ASM1
=====
[oracle@asm dbs]$ tnsping stdbyorcl


TNS Ping Utility for Linux: Version 10.2.0.1.0 - Production on 19-SEP-2008 18:49:00


Copyright (c) 1997, 2005, Oracle. All rights reserved.


Used parameter files:


Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.20.20)(PORT = 1521))) (CONNECT_DATA = (SID = stdbyorcl) (SERVER = DEDICATED)))
OK (30 msec)
ASM2
=====


[oracle@asm2 archive]$ tnsping orcl


TNS Ping Utility for Linux: Version 10.2.0.1.0 - Production on 19-SEP-2008 18:48:39


Copyright (c) 1997, 2005, Oracle. All rights reserved.


Used parameter files:


Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.20.10)(PORT = 1521))) (CONNECT_DATA = (SID = orcl) (SERVER = DEDICATED)))
OK (30 msec)
Please guide where I am missing. Thanking you in anticipation.
Regards,
Ravish Garg

Following are the errors I am receiving as per alert log.
ORCL alert log:
Thu Sep 25 17:49:14 2008
ARCH: Possible network disconnect with primary database
Thu Sep 25 17:49:14 2008
Error 1031 received logging on to the standby
Thu Sep 25 17:49:14 2008
Errors in file /opt/oracle/admin/orcl/bdump/orcl_arc1_4825.trc:
ORA-01031: insufficient privileges
FAL[server, ARC1]: Error 1031 creating remote archivelog file 'STDBYORCL'
FAL[server, ARC1]: FAL archive failed, see trace file.
Thu Sep 25 17:49:14 2008
Errors in file /opt/oracle/admin/orcl/bdump/orcl_arc1_4825.trc:
ORA-16055: FAL request rejected
ARCH: FAL archive failed. Archiver continuing
Thu Sep 25 17:49:14 2008
ORACLE Instance orcl - Archival Error. Archiver continuing.
Thu Sep 25 17:49:44 2008
FAL[server]: Fail to queue the whole FAL gap
GAP - thread 1 sequence 40-40
DBID 1192788465 branch 665007733
Thu Sep 25 17:49:46 2008
Thread 1 advanced to log sequence 48
Current log# 2 seq# 48 mem# 0: +DATA/orcl/onlinelog/group_2.272.665007735
Current log# 2 seq# 48 mem# 1: +RECOVER/orcl/onlinelog/group_2.264.665007737
Thu Sep 25 17:55:43 2008
Shutting down archive processes
Thu Sep 25 17:55:48 2008
ARCH shutting down
ARC2: Archival stopped
STDBYORCL alert log:
==============
Thu Sep 25 17:49:27 2008
Errors in file /opt/oracle/admin/stdbyorcl/bdump/stdbyorcl_arc0_4813.trc:
ORA-01017: invalid username/password; logon denied
Thu Sep 25 17:49:27 2008
Error 1017 received logging on to the standby
Check that the primary and standby are using a password file
and remote_login_passwordfile is set to SHARED or EXCLUSIVE,
and that the SYS password is same in the password files.
returning error ORA-16191
It may be necessary to define the DB_ALLOWED_LOGON_VERSION
initialization parameter to the value "10". Check the
manual for information on this initialization parameter.
Thu Sep 25 17:49:27 2008
Errors in file /opt/oracle/admin/stdbyorcl/bdump/stdbyorcl_arc0_4813.trc:
ORA-16191: Primary log shipping client not logged on standby
PING[ARC0]: Heartbeat failed to connect to standby 'orcl'. Error is 16191.
Thu Sep 25 17:51:38 2008
FAL[client]: Failed to request gap sequence
GAP - thread 1 sequence 40-40
DBID 1192788465 branch 665007733
FAL[client]: All defined FAL servers have been attempted.
Check that the CONTROL_FILE_RECORD_KEEP_TIME initialization
parameter is defined to a value that is sufficiently large
enough to maintain adequate log switch information to resolve
archivelog gaps.
Thu Sep 25 17:55:16 2008
Errors in file /opt/oracle/admin/stdbyorcl/bdump/stdbyorcl_arc0_4813.trc:
ORA-01017: invalid username/password; logon denied
Thu Sep 25 17:55:16 2008
Error 1017 received logging on to the standby
Check that the primary and standby are using a password file
and remote_login_passwordfile is set to SHARED or EXCLUSIVE,
and that the SYS password is same in the password files.
returning error ORA-16191
It may be necessary to define the DB_ALLOWED_LOGON_VERSION
initialization parameter to the value "10". Check the
manual for information on this initialization parameter.
Thu Sep 25 17:55:16 2008
Errors in file /opt/oracle/admin/stdbyorcl/bdump/stdbyorcl_arc0_4813.trc:
ORA-16191: Primary log shipping client not logged on standby
PING[ARC0]: Heartbeat failed to connect to standby 'orcl'. Error is 16191.
Please suggest where I am missing.
Regards,
Ravish Garg

Some Clients Not Updating. Reporting "Compliant." hr=8007000E Error in WindowsUpdate.log

I have a significant number (but not all) of my SCCM 2012 R2 CU3 clients not updating though my SCCM software updates. On these problem clients, I get this error in WindowsUpdate.log:
"COMAPI WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E"
Then these machines report "Compliant" even though they don't install the updates. Almost all of our workstations are Windows 7 SP1 32bit. We are running SCCM 2012 R2 CU3. My site servers are running Windows 2008 R2.
I don't see much in WUAhandler.log or scanagent.log. These client are however, getting my SCEP definition updates just fine. (I have an ADR for those.) And when you go out to Microsoft for security updates it works. I have tried all of the usual Windows
Updates repair suggestions (re-register dlls, rename software distribution folder, etc.) And I tried un-installing and re-installing the SCCM client on a problem PC, to no avail. I also tried using a Software Update Group with fewer updates (<100) and targeting
a problem system with only that SUG, to no avail.
Any assistance would be greatly appreciated. Thank you.

Hi all,
One of the bigger nuissances of this particular bug is that it's hard to identify from a central location that you've fallen victim to it. Without spot-checking client machines you'd be none-the-wiser. This most likely results in a lot of shops out their
thar are completely unaware they have a security issue with a false sense of "fully patched" security.
I've create the following guidelines to identify whether you are indeed one of the victims.
create a script configuration item.
Select All Windows 7 32 bit as the supported platform
Use String as the data type
Choose powershell as your script language of choice
Paste the following text in the discovery script:select-string-pattern'GetWARNING:
ISusInternal::GetUpdateMetadata2 failed, hr=8007000E'-path"$env:windir\windowsupdate.log"
Add the configuration item to a Configuration baseline
Deploy the configuration baseline to All Windows 7 32bit machines
The report list of assets by compliance state for a given baseline is a good report to check the results.
!!!! Any machines reporting compliant to this baseline have a serious issue as they won't install any software updates, yet report compliant on all !!!!
Good luck
Hi, Does the configuration item need any kind of compliance rule setup to make it work?

Some Clients not using Local Distribution Point

I have a new physcial site that we are wanting to put the SCCM client on the workstations. The local DP has been setup and the SCCM 2012 config settings for the new site have been made. I did a manual push to 5 workstations and monitored the ccmsetup.log.
I had some clients using the local DP for the client install and some went back across the WAN to the MP to get the files. The ones that come back across the WAN to the MP have this in their log shown below. It does not appear to be boundary related or
Client OS as they are in the same subnet that is configured and have both xp and win7 working and not working. I found a few others have had this issue come up searching the web, but none of solutions helped in my situation. The client is installing on
all of the workstations I have manually pushed it to. I just can't figure out why some are not using the local DP and YES I have verified that the ones not using the local DP are in the same boundary group as the ones that do.
Any help is appreciated. FVH081-DP1 is the local DP and AHDC400 is my MP
Only one MP AHDC400.phs-sfalls.amck.net is specified. Use it. ccmsetup 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Searching for DP locations from MP(s)... ccmsetup 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Current AD site of machine is FVH LocationServices 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Local Machine is joined to an AD domain LocationServices 1/23/2015 2:56:41 PM 2728 (0x0AA8)
Current AD forest name is amck.net, domain name is fvh.amck.net LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
DhcpGetOriginalSubnetMask entry point not supported. LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Begin checking Alternate Network Configuration LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Finished checking Alternate Network Configuration LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Adapter {AB6BAB2C-7B65-441A-A83C-C91FF8B8498D} is DHCP enabled. Checking quarantine status. LocationServices 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Sending message body '<ContentLocationRequest SchemaVersion="1.00">
<AssignedSite SiteCode="MCK"/>
<ClientPackage/>
<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0"
UseInternetDP="0">
 <ADSite Name="FVH"/>
 <Forest Name="amck.net"/>
 <Domain Name="fvh.amck.net"/>
 <IPAddresses>
<IPAddress SubnetAddress="10.7.64.0" Address="10.7.79.3"/>
 </IPAddresses>
</ClientLocationInfo>
</ContentLocationRequest>
' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Sending message header '<Msg SchemaVersion="1.1"><ID>{DA5C91BE-3A3E-4E14-AF6E-DB0E9AC36878}</ID><SourceHost>FVHH008</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:FVHH008:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>AHDC400.phs-sfalls.amck.net</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2015-01-23T20:56:42Z</SentTime><Body
Type="ByteRange" Offset="0" Length="1068"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
CCM_POST 'HTTP://AHDC400.phs-sfalls.amck.net/ccm_system/request' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Content boundary is '--aAbBcCdDv1234567890VxXyYzZ' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Received header '<Msg SchemaVersion="1.1">
<ID>{45121E9D-C6EE-4154-BF60-AADD6204B66E}</ID>
<SourceID>GUID:1B6F821D-DF54-4E9D-89BD-D68DD917DBD2</SourceID>
<SourceHost>AHDC400</SourceHost>
<TargetAddress>direct:FVHH008:LS_ReplyLocations</TargetAddress>
<ReplyTo>MP_LocationManager</ReplyTo>
<CorrelationID>{00000000-0000-0000-0000-000000000000}</CorrelationID>
<Priority>3</Priority>
<Timeout>600</Timeout>
<TargetHost>FVHH008</TargetHost><TargetEndpoint>LS_ReplyLocations</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2015-01-23T20:56:42Z</SentTime><Body Type="ByteRange"
Offset="0" Length="2590"/><Hooks><Hook3 Name="zlib-compress"/><Hook Name="authenticate"><Property Name="Signature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roperty><Property
Name="AuthSenderMachine">AHDC400;AHDC400.phs-sfalls.amck.net;</Property><Property Name="MPSiteCode">MCK</Property></Hook></Hooks><Payload Type="inline"/></Msg>' ccmsetup 1/23/2015
2:56:42 PM 2728 (0x0AA8)
Received reply body '<ContentLocationReply SchemaVersion="1.00"><ContentInfo PackageFlags="16777216"><ContentHashValues/></ContentInfo><Sites><Site><MPSite SiteCode="MCK" MasterSiteCode="MCK"
SiteLocality="LOCAL" IISPreferedPort="80" IISSSLPreferedPort="443"/><LocationRecords><LocationRecord><URL Name="http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002" Signature="http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSSIG$/AHS00002"/><ADSite
Name="FVH"/><IPSubnets><IPSubnet Address="10.7.64.0"/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7804</Version><Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>FVH081-DP1.phs-sfalls.amck.net</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="1"/><Locality>LOCAL</Locality></LocationRecord></LocationRecords></Site><Site><MPSite
SiteCode="MCK" MasterSiteCode="MCK" SiteLocality="LOCAL"/><LocationRecords/></Site></Sites><ClientPackage FullPackageID="AHS00002" FullPackageVersion="1" FullPackageHash="5EF3A189C48F3469440A83026EC8ECD36EAD6EAF3B5D35663F8201BDE175413C"
MinimumClientVersion="5.00.7804.1000" RandomizeMaxDays="7" ProgramEnabled="false" LastModifiedTime="30282566;3841038464" SiteVersionMatch="true" SiteVersion="5.00.7804.1000" EnablePeerCache="true"/></ContentLocationReply>' ccmsetup 1/23/2015
2:56:42 PM 2728 (0x0AA8)
Found local location 'http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Discovered 1 local DP locations. ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
PROPFIND 'http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Got 401 challenge Retrying with Windows Auth... ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
PROPFIND 'http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Failed to correctly receive a WEBDAV HTTP request.. (StatusCode at WinHttpQueryHeaders: 401) ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Failed to check url http://FVH081-DP1.phs-sfalls.amck.net/SMS_DP_SMSPKG$/AHS00002. Error 0x80004005 ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
Enumerated all 1 local DP locations but none of them is good. Fallback to MP. ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
GET 'HTTP://AHDC400.phs-sfalls.amck.net/CCM_Client/ccmsetup.cab' ccmsetup 1/23/2015 2:56:42 PM 2728 (0x0AA8)
C:\WINDOWS\ccmsetup\ccmsetup.cab is Microsoft trusted. ccmsetup 1/23/2015 2:56:43 PM 2728 (0x0AA8)

Single forest with mutiple child domains. SCCM is in one child domain trying to get this other child domain's workstations as clients. We have the same setup for another child domain and it worked without any issues.
The IIS log file in C:\inetpub\logs\logfiles\w3svc1 only shows the successful installs. There are no entries about any failures in the log to correlate unfortunately. All failures have been XP SP3 machines except for one Win7 pc and all successes have been
Win7 except for one xp machine.
You wouldn't think it is network related because some workstations can access the DP fine.
It's not boundaries because the successes and failures are all sharing the same subnet that is configured.
Wasn't MSI 4.5 required for SCCM 2012 clients?

Some clients not receiving SCEP definition updates

I have a collection for some of our application servers that is used in conjunction with an ADR to deploy the SCEP definition updates. 12 of the servers in this collection recently had the SCCM 2012 R2 client installed on them. (The collection has a total
of 23 servers in it)
I can see that these 12 servers have the Antimalware policy applied, but are not getting the SCEP updates. The summary for SCEP is: Service started without any malware protection engine; AV signatures out of date; AS signatures out
of date.
The policy application state is "Succeeded" with the recent date and time.
When I view the status of the deployment, the enforcement state is "Failed to install update(s) " with an error code of 0X87D00667 - No current or future service window exists to install software updates.
These servers are members of another collection that is used for deploying the Monthly updates. This "update" collection does have a maintenance window on it specific to software updates, with no recurrence schedule.
Do maintenance windows apply to the machine then, regardless of what collection they are in?
These 12 servers, for the Endpoint Protection client settings have the "Allow EP client installation and restarts outside MW" set to No, and the Suppress any required computer restarts after the EP client is installed set to Yes.
For the Software Updates client setting, the update scan schedule and deployment re-evaluation is set to every 7 days.
So, in looking at this, it appears that these servers will never get any SCEP updates because they are members of another collection that has a MW, even though the SCEP collection does not have a MW?
Is that correct?

I added a MW on the collection that is used for SCEP updates. I made the MW effective yesterday, but the MW hours were from 5:30am-7:30am daily (which should have started this morning, 1/30, at 5:30am).
In the updatesdeployment.log, I see the MW starting:
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event UpdatesDeploymentAgent 1/30/2015 5:30:00 AM 3004 (0x0BBC)
No current service window available to run updates assignment with time required = 1 UpdatesDeploymentAgent 1/30/2015 5:30:00 AM 3004 (0x0BBC)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event UpdatesDeploymentAgent 1/30/2015 7:30:00 AM 3312 (0x0CF0)
No current service window available to run updates assignment with time required = 1 UpdatesDeploymentAgent 1/30/2015 7:30:00 AM 3312 (0x0CF0)
Attempting to cancel any job started at non-business hours. UpdatesDeploymentAgent 1/30/2015 7:30:00 AM 3312 (0x0CF0)
However, the definitions are not installed. These 12 servers have the SCEP client, but no definitions installed.
There are 11 servers in this collection that are getting the definition updates, but the 12 servers in this collection that have recently had the SCCM client installed on it are not getting the updates. So I know that the ADR is working.
What am I missing to get these 12 servers to install/update the definitions?

DHCP: Some clients not getting IP address

Recently setup a new DHCP server on Mac OS X Server 10.5.8 running on an Xserve. We migrated from a Linux server.
The Xserve was originally just a file server. So the only services currently running are: AFP, DHCP, NFS, and SMB. No additional software is running.
The DHCP server ran just fine for the first couple weeks. But then we found some computers just stopped getting IP addresses from the DHCP server. Some were new computers introduced to the network. Some were laptops that had left and come back. However, the DHCP server is definitely still giving out IP addresses and renewing them for most new and existing computers. There have been five computers that have not gotten IP addresses so far, and that had been the case both on the wireless and on a wired connection. Two were PC's, one running Windows 7 and one running Windows XP with Lenovo's ThinkVantage software. The other three were different models of MacBook Pros.
For those five computers, we managed to get them working in two ways. One, we can select to use DHCP with a manual address. When we do that, it manages to pick up all the other information from the DHCP server like DNS and gateway. The second thing we can do is configure the DHCP server to supply a static IP address by providing it with the MAC address of these machines. When we do that, the computers receive the IP address from the DHCP server.
So I guess you could say the problem I'm experiencing is for a few computers the DHCP server seems to only be able to provide static addresses, but not dynamic ones with a lease time.
I have logging set to the highest for the DHCP server. Below is the first thing I noticed that keeps showing up. Sometimes it shows a different MAC address than the one below. None of the afflicted computers have that MAC address, though. I have not seen any other errors in the logs for the DHCP server.
Jan 24 12:09:47 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:09:47 fileserver bootpd[73839]: service time 0.000304 seconds
Jan 24 12:09:50 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:09:50 fileserver bootpd[73839]: service time 0.000280 seconds
Jan 24 12:09:54 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:09:54 fileserver bootpd[73839]: service time 0.000264 seconds
Jan 24 12:10:03 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:03 fileserver bootpd[73839]: service time 0.000265 seconds
Jan 24 12:10:11 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:11 fileserver bootpd[73839]: service time 0.000283 seconds
Jan 24 12:10:19 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:19 fileserver bootpd[73839]: service time 0.000291 seconds
Jan 24 12:10:28 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:28 fileserver bootpd[73839]: service time 0.000324 seconds

Recently setup a new DHCP server on Mac OS X Server 10.5.8 running on an Xserve. We migrated from a Linux server.
The Xserve was originally just a file server. So the only services currently running are: AFP, DHCP, NFS, and SMB. No additional software is running.
The DHCP server ran just fine for the first couple weeks. But then we found some computers just stopped getting IP addresses from the DHCP server. Some were new computers introduced to the network. Some were laptops that had left and come back. However, the DHCP server is definitely still giving out IP addresses and renewing them for most new and existing computers. There have been five computers that have not gotten IP addresses so far, and that had been the case both on the wireless and on a wired connection. Two were PC's, one running Windows 7 and one running Windows XP with Lenovo's ThinkVantage software. The other three were different models of MacBook Pros.
For those five computers, we managed to get them working in two ways. One, we can select to use DHCP with a manual address. When we do that, it manages to pick up all the other information from the DHCP server like DNS and gateway. The second thing we can do is configure the DHCP server to supply a static IP address by providing it with the MAC address of these machines. When we do that, the computers receive the IP address from the DHCP server.
So I guess you could say the problem I'm experiencing is for a few computers the DHCP server seems to only be able to provide static addresses, but not dynamic ones with a lease time.
I have logging set to the highest for the DHCP server. Below is the first thing I noticed that keeps showing up. Sometimes it shows a different MAC address than the one below. None of the afflicted computers have that MAC address, though. I have not seen any other errors in the logs for the DHCP server.
Jan 24 12:09:47 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:09:47 fileserver bootpd[73839]: service time 0.000304 seconds
Jan 24 12:09:50 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:09:50 fileserver bootpd[73839]: service time 0.000280 seconds
Jan 24 12:09:54 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:09:54 fileserver bootpd[73839]: service time 0.000264 seconds
Jan 24 12:10:03 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:03 fileserver bootpd[73839]: service time 0.000265 seconds
Jan 24 12:10:11 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:11 fileserver bootpd[73839]: service time 0.000283 seconds
Jan 24 12:10:19 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:19 fileserver bootpd[73839]: service time 0.000291 seconds
Jan 24 12:10:28 fileserver bootpd[73839]: DHCP DISCOVER [en1]: 1,0:23:32:c1:31:c3
Jan 24 12:10:28 fileserver bootpd[73839]: service time 0.000324 seconds

Archivelink - how to set valid in only some clients, not in others?

Hi,
Were building an ASP-solution, where storage of outgoing documents will be an optional service, where the customers that choose to use the functionality will have to pay for it. Each customer will run in a separate client in the same instance.
Now, what we need to figure out is how to deactivate the functions for those customers that choose NOT to pay for the service. As the repositories are cross-client, and configuration/customizing will be as close to identical as possible in the different client, we have problems identifying how to do this. It is not a viable option to change configuration for some customers - were talking lots of clients here.
Does anyone have a proposal for how we could handle this situation?
Best regards,
Sten Erik

Solved by use of exits

Some client systems not pulling down updates

Hi,
I recently pushed out the all the March Patch Tuesday updates and I've got around 11 systems that are reporting as compliant when I review the status of the deployment, but are systems that haven't actually pulled down or installed the updates from the deployment.
Strangely the systems show up as Active in the SCCM 2012 console and have current (within the last 4 hours or so) active times. So it seems the SCCM client components are working correctly.
The thing all these systems appear to have in common is that in the WindowsUpdate.log I see the following lines:
2015-03-23 04:32:32:148 2216 16d8 COMAPI ---------
2015-03-23 04:32:32:148 2216 16d8 COMAPI -- END -- COMAPI: Search [ClientId = CcmExec]
2015-03-23 04:32:32:148 2216 16d8 COMAPI -------------
2015-03-23 04:32:32:959 2216 a18 COMAPI WARNING: ISusInternal::GetUpdateMetadata2 failed, hr=8007000E
Reviewing the WindowsUpdate.log I can see the CCMExec process talking to my SCCM 2012 server but then I get the error above and no updates appear to get pulled down.
I've tried rebooting the systems to see if that resolves the issue but it doesn't. Also what is strange is that these systems have all been working fine in the past. So something appears to have gotten messed up but I'm not sure what?
Any ideas?
Thanks in advance,
Nick

Just to update - I followed the steps to resolve the problem that were mentioned in the following thread
https://social.technet.microsoft.com/Forums/en-US/cf8fbe28-714d-49d3-b2ce-5cc5f6f79c63/some-clients-not-updating-reporting-compliant-hr8007000e-error-in-windowsupdatelog?forum=configmanagersecurity
Namely I did:
Clean up WSUS - I had over 18000 expired/unneeded updates in my WSUS server. I used the SQL script from the following post:
http://blog.coretech.dk/kea/house-of-cardsthe-configmgr-software-update-point-and-wsus/
It took over two days to delete all the updates in batches of 2000
I also plan to add a weekly scheduled job with the WSUS Server Cleanup process PowerShell script they provide to keep my WSUS server clean
Index the WSUS database - I used the SQL Script provided in the following post
https://gallery.technet.microsoft.com/ScriptCenter/6f8cde49-5c52-4abd-9820-f1d270ddea61/
I also plan to add a scheduled job to run this weekly
After I made these changes my Windows 7 x86 clients that hadn't pulled down the latest March updates pulled them down.
I also ran the batch file they provided
Net stop wuauserv
Sc config wuauserv type= own
Net start wuauserv
Just in case on these machines.
Thanks for the help on this one.

VPN clients not able to ping Remote PCs & Servers : ASA 5520

VPN is connected successfully. But not able to ping any remote ip or fqdn from client pc. But able to ping ASA 5520 firewalls inside interface. Also some clients able to access, some clients not able to access. I new to these firewalls. I tried most of ways from internet, please any one can help asap.
Remote ip section : 192.168.1.0/24
VPN IP Pool : 192.168.5.0/24
Running Config :
ip address 192.168.1.2 255.255.255.0
interface GigabitEthernet0/2
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
interface Management0/0
shutdown
no nameif
no security-level
no ip address
management-only
passwd z40TgSyhcLKQc3n1 encrypted
boot system disk0:/asa722-k8.bin
ftp mode passive
clock timezone GST 4
dns domain-lookup outside
dns domain-lookup inside
dns server-group DefaultDNS
name-server 213.42.20.20
domain-name default.domain.invalid
access-list outtoin extended permit tcp any host 83.111.113.114 eq 3389
access-list outtoin extended permit tcp any host 83.111.113.113 eq https
access-list outtoin extended permit tcp any host 83.111.113.114 eq smtp
access-list outtoin extended permit tcp any host 83.111.113.114 eq https
access-list outtoin extended permit tcp any host 83.111.113.114 eq www
access-list outtoin extended permit tcp any host 83.111.113.115 eq https
access-list outtoin extended permit tcp any host 94.56.148.98 eq 3389
access-list outtoin extended permit tcp any host 83.111.113.117 eq ssh
access-list fualavpn_splitTunnelAcl standard permit 192.168.1.0 255.255.255.0
access-list outside_nat0_outbound extended permit ip 192.168.5.0 255.255.255.0
92.168.1.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 1
2.168.5.0 255.255.255.0
access-list inet_in extended permit icmp any any time-exceeded
access-list inet_in extended permit icmp any any unreachable
access-list inet_in extended permit icmp any any echo-reply
access-list inet_in extended permit icmp any any echo
pager lines 24
logging enable
logging asdm informational
logging from-address [email protected]
logging recipient-address [email protected] level errors
logging recipient-address [email protected] level emergencies
logging recipient-address [email protected] level errors
mtu outside 1500
mtu inside 1500
ip local pool fualapool 192.168.5.10-192.168.5.50 mask 255.255.255.0
ip local pool VPNPool 192.168.5.51-192.168.5.150 mask 255.255.255.0
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-522.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound outside
nat (inside) 1 192.168.1.0 255.255.255.0
static (inside,outside) 94.56.148.98 192.168.1.11 netmask 255.255.255.255
static (inside,outside) 83.111.113.114 192.168.1.111 netmask 255.255.255.255
access-group inet_in in interface outside
route outside 0.0.0.0 0.0.0.0 83.111.113.116 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
group-policy DfltGrpPolicy attributes
banner none
wins-server none
dns-server none
dhcp-network-scope none
vpn-access-hours none
vpn-simultaneous-logins 10
vpn-idle-timeout 30
vpn-session-timeout none
vpn-filter none
vpn-tunnel-protocol IPSec l2tp-ipsec webvpn
password-storage disable
ip-comp disable
re-xauth disable
group-lock none
pfs disable
ipsec-udp disable
ipsec-udp-port 10000
split-tunnel-policy tunnelall
split-tunnel-network-list none
default-domain none
split-dns none
intercept-dhcp 255.255.255.255 disable
secure-unit-authentication disable
user-authentication disable
user-authentication-idle-timeout 30
ip-phone-bypass disable
leap-bypass disable
nem disable
backup-servers keep-client-config
msie-proxy server none
msie-proxy method no-modify
msie-proxy except-list none
msie-proxy local-bypass disable
nac disable
nac-sq-period 300
nac-reval-period 36000
nac-default-acl none
address-pools none
client-firewall none
client-access-rule none
webvpn
functions url-entry
html-content-filter none
homepage none
keep-alive-ignore 4
http-comp gzip
filter none
url-list none
customization value DfltCustomization
port-forward none
port-forward-name value Application Access
sso-server none
deny-message value Login was successful, but because certain criteria have no
been met or due to some specific group policy, you do not have permission to u
e any of the VPN features. Contact your IT administrator for more information
svc none
svc keep-installer installed
svc keepalive none
svc rekey time none
svc rekey method none
svc dpd-interval client none
svc dpd-interval gateway none
svc compression deflate
group-policy fualavpn internal
group-policy fualavpn attributes
dns-server value 192.168.1.111 192.168.1.100
vpn-tunnel-protocol IPSec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value fualavpn_splitTunnelAcl
username test password I7ZgrgChfw4FV2AW encrypted privilege 0
username Mohamed password Vqmmt8cR/.Qu7LhU encrypted privilege 0
username Moghazi password GMr7xgdqmGEQ2SVR encrypted privilege 0
username Moghazi attributes
password-storage enable
username fualauaq password E6CgvoOpTKphiM2U encrypted privilege 0
username fualauaq attributes
password-storage enable
username fuala password IFtijSYb7LAOV/IW encrypted privilege 15
username Basher password Djf15nXIJXmayfjY encrypted privilege 0
username Basher attributes
password-storage enable
username fualafac password VGC/7cKXW1A6eyXS encrypted privilege 0
username fualafac attributes
password-storage enable
username fualaab password ONTH8opuP4RKgRXD encrypted privilege 0
username fualaab attributes
password-storage enable
username fualaadh2 password mNEgLxzPBeF4SyDb encrypted privilege 0
username fualaadh2 attributes
password-storage enable
username fualaain2 password LSKk6slwsVn4pxqr encrypted privilege 0
username fualaain2 attributes
password-storage enable
username fualafj2 password lE4Wu7.5s7VXwCqv encrypted privilege 0
username fualafj2 attributes
password-storage enable
username fualakf2 password 38oMUuwKyShs4Iid encrypted privilege 0
username fualakf2 attributes
password-storage enable
username fualaklb password .3AMGUZ1NWU1zzIp encrypted privilege 0
username fualaklb attributes
password-storage enable
username fualastr password RDXSdBgMaJxNLnaH encrypted privilege 0
username fualastr attributes
password-storage enable
username fualauaq2 password HnjodvZocYhDKrED encrypted privilege 0
username fualauaq2 attributes
password-storage enable
username fualastore password wWDVHfUu9pdM9jGj encrypted privilege 0
username fualastore attributes
password-storage enable
username fualadhd password GK8k1MkMlIDluqF4 encrypted privilege 0
username fualadhd attributes
password-storage enable
username fualaabi password eYL0j16kscNhhci4 encrypted privilege 0
username fualaabi attributes
password-storage enable
username fualaadh password GTs/9BVCAU0TRUQE encrypted privilege 0
username fualaadh attributes
password-storage enable
username fualajuh password b9QGJ1GHhR88reM1 encrypted privilege 0
username fualajuh attributes
password-storage enable
username fualadah password JwVlqQNIellNgxnZ encrypted privilege 0
username fualadah attributes
password-storage enable
username fualarak password UE41e9hpvcMeChqx encrypted privilege 0
username fualarak attributes
password-storage enable
username fualasnk password ZwZ7fVglexrCWFUH encrypted privilege 0
username fualasnk attributes
password-storage enable
username rais password HrvvrIw5tEuam/M8 encrypted privilege 0
username rais attributes
password-storage enable
username fualafuj password yY2jRMPqmNGS.3zb encrypted privilege 0
username fualafuj attributes
password-storage enable
username fualamaz password U1YUfQzFYrsatEzC encrypted privilege 0
username fualamaz attributes
password-storage enable
username fualashj password gN4AXk/oGBTEkelQ encrypted privilege 0
username fualashj attributes
password-storage enable
username fualabdz password tg.pB7RXJx2CWKWi encrypted privilege 0
username fualabdz attributes
password-storage enable
username fualamam password uwLjc0cV7LENI17Y encrypted privilege 0
username fualamam attributes
password-storage enable
username fualaajm password u3yLk0Pz0U1n.Q0c encrypted privilege 0
username fualaajm attributes
password-storage enable
username fualagrm password mUt3A60gLJ8N5HVr encrypted privilege 0
username fualagrm attributes
password-storage enable
username fualakfn password ceTa6jmvnzOFNSgF encrypted privilege 0
username fualakfn attributes
password-storage enable
username Fualaain password Yyhr.dlc6/J7WvF0 encrypted privilege 0
username Fualaain attributes
password-storage enable
username fualaban password RCJKLGTrh7VM2EBW encrypted privilege 0
username John password D9xGV1o/ONPM9YNW encrypted privilege 15
username John attributes
password-storage disable
username wrkshopuaq password cFKpS5e6Whp0A7TZ encrypted privilege 0
username wrkshopuaq attributes
password-storage enable
username Talha password 3VoAABwXxVonLmWi encrypted privilege 0
username Houssam password Cj/uHUqsj36xUv/R encrypted privilege 0
username Faraj password w2qYfE3DkYvS/oPq encrypted privilege 0
username Faraj attributes
password-storage enable
username gowth password HQhALLeiQXuIzptCnTv1rA== nt-encrypted privilege 15
username Hameed password 0Kr0N1VRmLuWdoDE encrypted privilege 0
username Hameed attributes
password-storage enable
username Hassan password Uy4ASuiNyEd70LCw encrypted privilege 0
username cisco password IPVBkPI1GLlHurPD encrypted privilege 15
username Karim password 5iOtm58EKMyvruZA encrypted privilege 0
username Shakir password BESX2bAvlbqbDha/ encrypted privilege 0
username Riad password iB.miiOF7qMESlCL encrypted privilege 0
username Azeem password 0zAqiCG8dmLyRQ8f encrypted privilege 15
username Azeem attributes
password-storage disable
username Osama password xu66er.7duIVaP79 encrypted privilege 0
username Osama attributes
password-storage enable
username Mahmoud password bonjr0B19aOQSpud encrypted privilege 0
username alpha password x8WO0aiHL3pVFy2E encrypted privilege 15
username Wissam password SctmeK/qKVNLh/Vv encrypted privilege 0
username Wissam attributes
password-storage enable
username Nabil password m4fMvkTgVwK/O3Ms encrypted privilege 0
aaa authentication telnet console LOCAL
aaa authentication ssh console LOCAL
aaa authentication enable console LOCAL
http server enable
http 0.0.0.0 0.0.0.0 outside
http 192.168.1.4 255.255.255.255 inside
http 192.168.1.100 255.255.255.255 inside
http 192.168.1.111 255.255.255.255 inside
http 192.168.1.200 255.255.255.255 inside
http 83.111.113.117 255.255.255.255 outside
http 192.168.1.17 255.255.255.255 inside
http 192.168.1.16 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map outside_dyn_map 20 set pfs
crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
tunnel-group fualavpn type ipsec-ra
tunnel-group fualavpn type ipsec-ra
tunnel-group fualavpn general-attributes
address-pool fualapool
address-pool VPNPool
default-group-policy fualavpn
tunnel-group fualavpn ipsec-attributes
pre-shared-key *
tunnel-group fualavpn ppp-attributes
authentication pap
authentication ms-chap-v2
authentication eap-proxy
telnet 0.0.0.0 0.0.0.0 outside
telnet 0.0.0.0 0.0.0.0 inside
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh 192.168.1.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
management-access inside
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns migrated_dns_map_1
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns migrated_dns_map_1
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect icmp
inspect icmp error
service-policy global_policy global
prompt hostname context
Cryptochecksum:38e41e83465d37f69542355df734db35
: end

Hi,
What about translating the traffic on the local ASA (Active unit) for traffic received from the VPN tunnel to the internal interface IP address? You can try something like nat (outside,inside) source dynamic obj-VpnRemoteTraffic interface destination static StandbyIP StandbyIP
Regards,

Software Update Point Switching is not working for some Clients

Hi there,
I found nothing similar here and I hope this is the right section.
I´m running ConfigMgr 2012 R2 where one of the Site Systems from one of the Primaries is located in an untrusted Forest in a perimeter Network. The Site System there has the MP, SUP and DB Roles. In general it works great. The Systems in that untrusted Forest
get the SCCM Agent pushed, see and can install published Software packages and receive Windows Updates. But there are a few systems where everything works, except Windows Updates.
So I had a deeper look at what is happening and found out that the SUP switching is not working for them. They always try to contact the SUP from the Primary, which they cannot reach (this is intended).
From how I understand SUP switching as described here
http://blogs.technet.com/b/configmgrteam/archive/2013/03/27/software-update-points-in-cm2012sp1.aspx#pi140062=1
the Windows Update Agent tries to connect to a SUP every 30 minutes and after 4 failed attempts he will try to connect to the next one until he finds one which works.
As I said before, this seems to work for most systems in the untrusted forest, but some do not make any intentions to switch the SUP.
So my next step was to find out from where the Update Agent can get the information of the available SUPs. I think they either don´t receive the information that other SUPs exist, or if the Information is there, they don´t realize that there´s an error and
make no attempt to switch.
I used the System Center Support Center to gather all Information from some of the systems with that problems (Log Files, WMI information, registry information, policies etc.) but I cannot find where SCCM or the Update Agent store the information which SUPs
are available in my environment.
I´m sure the problem is on the Systems which fail to connect to the right SUP and not in the SCCM infrastructure itself, because for most of the systems everything is working just perfect. Unfortunately in the Blog Post above there´s also no information
where this information is stored and how it is obtained by the clients. In the comments there´s even one post which describes the same problem I have here, but there was no answer. I hope someone can point me into the right direction, because I´m stuck currently.
Things I tried additionally to all the log file / WMI / registry sniffing:
Removing the Software Distribution Folder and restarting the Windows Update Agent
Removing the WindowsUpdate Registry folder in the HKLM\SOFTWARE\Policies\Windows section in the Registry and restarting the Windows Update Agent.
Tried to reset the WUAgent with wuauclt /Resetauthorization additionally to the steps above.
I also tried to manually set the WUServer and WUStatusServer Keys in the registry to the new Server, but as soon as the next Update Scan cycle runs, the value is set back to the URL of the Primary Sites SUP
Is someone having additional ideas? It seems to me older systems are more affected (which were configured for a standard WSUS before SCCM 2012 was deployed) than newer ones which were installed when SCCM was in place already. But I don´t know what else to
"reset" on those machines without reinstalling them.

Thank you very much for your response. I must have missed that one by looking through numerous Logfiles. In this, there´s indeed a list of all available SUPs. So according to the LocationServices.log the machine should have a choice.
The WMI Key however, contains just one entry and this is the URL of the Primaries SUP which is not reachable in the untrusted forest. Is it OK that the WMI entry includes only one entry? If yes, what process is putting the results from the LocationServices
into WMI? It seems like the Windows Update Agent is feeded from the WMI Key then. If this is the case my problems seems to be the "communication path" between these two components.
Is this the job from the SCCM Agent, the Windows Update Agent or maybe some third component I´m not aware of? I wonder how I can fix this.

Group Policy not work in some client machine.

Hello All,
Existing environment is AD 2012. gpupdate /force command does not working in some client machine. And it's occur randomly. Error shown about 15-20% of client machine. Please suggest. Hopefully this time get reply from community.
The Error:
User policy could not be updated successfully. The following errors were encount
ered:
The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller
has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
Computer policy could not be updated successfully. The following errors were enc
ountered:
The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
tings may not be applied until this event is resolved. This issue may be transie
nt and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.

Thanks for your reply. basically this error occurs with in same location as well as branch location. i have check event log in AD but not got any specific error. AD health status is ok. AD to AD synchronization also working well. All the client machine running
on windows 7 64 bit and few of them are windows 8.
Please suggest. if you need any event log for analysis i can send you.
Thanks
I recommend you examine the event logs upon an affected client machine. Specifically, look for the surrounding events on that machine (both System, and Application logs), for the hours previous and the hour after.
The time period may vary according to your environment (e.g. what is expected/normal for your environment, your configured GP refresh cycle-time).
e.g., are there network drops, or power drops, or system crashes, restarts at the similar time.
if it's a laptop, is it wireless? Was there a transition from wireless to wired operation?
Is there VPN in use?
If you are able to compare with another machine (I would encourage that), to understand what "normal" looks like in the logs, so that you have some kind of baseline data for comparison.
Other checks, maybe confirm that the machines are updating as required (have the relevant WindowsUpdates etc), and consider if some security/protection/firewall software might be interfering with normal Windows operations.
Also the potential for malware or virus, which can disturb many basic services (ensure a scan is performed and returns clean).
If you have the opportunity for an affected user to contact you urgently when the symptom occurs, check that the gpt.ini file is accessible from their PC.
e.g.: \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
984F9}\gpt.ini
This file is hosted within the replicated SYSVOL share on your DC's, so check that it is accessible.
You might also validate the particular GPO this refers to, and check each of your DC's holds the correct copy of the files for that GPO GUID.
If you open that GPO, and perform a minor change to it (e.g. add a comment), then click Apply, OK, this should cause the GPO contents to replicate an updated version (be cautious, depending upon the nature of that GPO !!!)
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

SCCM/WSUS 2007 01-2015 Bulletin Patching issue. Some clients patch just fine, some will not download the content.

Bit new to the admin side, so please excuse some ignorance.
We have approx 6000 end points. We setup this months patches and a couple out of cycle ones we noticed. We are getting a TON of clients that will not patch. They are getting the defintions but when we attempt to run the advertised
patches they fail approx 10 seconds later. However, some servers on the same boundry will patch just fine. We get the error message in the logs that when the client was told to download the content from the DP, it spits out error that content does
not exist. The DPs we believe are having the issues are MPs as well sitting in DMZ. We have 2 sites configured basically the same, both DP/MPs in DMZ are the ones having the issues. We have confirmed clients are able to connect anon to the
DP/MP. But again, some clients are patching just fine.
UpdatesDeployment.log has the following warning listed 7 times.
Not refreshing update presence state as error CI Info status received
But yet does see that it needs 7 patches.
EnumerateUpdates for action (UpdateActionInstall) - Total visible updates = 7
No other logs show any errors on the clients. I have confirmed the content is avalible on the DP/MP it is reporting too. Obviously though since other clients sitting right next to them work still.
Any ideas? Trying to avoid working all weekend. Thank you!

We checked every single log on every MP, DP, SS and many clients. For unknown reasons, deleteing and rebuilding the Jan update list did the trick.

After ApplyMRD Report Rows on some clients are not refreshed

hi all,
i've come across an issue regearding mr delete on some clients using ie for acess to an apex application.
a report displays a number of rows of a single table.
the user is able to check some rows.
a special button branches to an url "javascript:confirmDelete(htmldb_delete_message,'MULTI_ROW_DELETE');"a standard mrd process, using table pk, deletes the checked rows.
most of the clients work fine.
on some clients the deleted rows still appear in the report. the shown data will not be refreshed untill user logs out and logs in to the application.
i double checked that the rows are physically deleted from the table.
any idea if this is an ms ie issue and whch option has to be changed?
and no, customer can't switch to ff because of administrative policy.
regards peter

That could happen if region or page caching is enabled. If yes, disable it by setting it to never.
Denes Kubicek
http://deneskubicek.blogspot.com/
http://www.opal-consulting.de/training
http://apex.oracle.com/pls/otn/f?p=31517:1
http://www.amazon.de/Oracle-APEX-XE-Praxis/dp/3826655494
-------------------------------------------------------------------

SCCM client not registering on some machines

Hello,
I am running across a strange problem that is only affecting some machines. We are imaging via OSD task sequence, 2012 R2 and some machines do not register properly with SCCM. When I say not registering, I mean it doesn't get its Site code and
missing most of its actions. Most machines that we image work fine, but the odd one doesn't register using the same task sequence that we use on other PC's. When I watch the task sequence steps go through I noticed that right after the installing SCCM
client step it boots right into windows. Basically skipping the steps we have set afterwards, the next step is to install some software (adobe reader, SCEP, and a few others).
I also noticed it seems to happen more often with certain model machines. I have an HP Z420 and an HP Folio 9470m. These consistently fail to register everytime I image.
I've tried quite a few fixes I found online, but nothing has worked as of yet. The most recent fix I tried was to delete the hardware inventory and then rebuild it. That did not work. Entering SMSMP= in the Setup Windows and Config manager step also did
not work. I also tried entering in our DNS server into the registry under the CCM directory. It appears something is happening during the client install (or not happening). But why only certain machines? Most work fine.
Our fix is to simply re-install the client after imaging, this solution has been working for us but I want to find a more permanent solution.
Any ideas?

Jason,
We have this line in the Setup Config Manager,
PATCH=C:\_SMSTaskSequence\OSD\PNS00002\Updates\configmgr2012ac-r2-kb2970177-x64.msp
Keep in mind, that this same task sequence works fine with most other machines. It almost appears to be model specific. Certain models definitely have more issues registering than others.
I'm still fairly new to SCCM, so if you need more from the logs let me know.
==========[ ccmsetup started in process 2176 ]========== ccmsetup 12/8/2013 9:04:50 PM 2180 (0x0884)
Running on platform X64 ccmsetup 12/8/2013 9:04:50 PM 2180 (0x0884)
Launch from folder C:\_SMSTaskSequence\OSD\PNS00002\ ccmsetup 12/8/2013 9:04:50 PM 2180 (0x0884)
CcmSetup version: 5.0.7958.1000 ccmsetup 12/8/2013 9:04:50 PM 2180 (0x0884)
Running on 'Microsoft Windows 7 Enterprise ' (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 18 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
Ccmsetup command line: "C:\_SMSTaskSequence\OSD\PNS00002\ccmsetup.exe" /useronly /source:C:\_SMSTaskSequence\OSD\PNS00002 /config:MobileClient.TCF /status:524 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required. ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
Command line: "C:\_SMSTaskSequence\OSD\PNS00002\ccmsetup.exe" /useronly /source:C:\_SMSTaskSequence\OSD\PNS00002 /config:MobileClient.TCF /status:524 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
Copying config file from C:\_SMSTaskSequence\OSD\PNS00002\MobileClient.TCF to folder C:\WINDOWS\ccmsetup\. Return result: 0x0 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
SslState value: 224 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
CCMHTTPPORT:    80 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
CCMHTTPSPORT:    443 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
CCMHTTPSSTATE:    224 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
CCMHTTPSCERTNAME:    ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
FSP:    ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
CCMFIRSTCERT:    1 ccmsetup 12/8/2013 9:04:51 PM 2180 (0x0884)
Config file:      C:\WINDOWS\ccmsetup\MobileClientUnicode.tcf ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
Retry time:       10 minute(s) ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
MSI log file:     C:\WINDOWS\ccmsetup\Logs\client.msi.log ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
MSI properties:    INSTALL="ALL" SMSPROVISIONINGMODE="1" SMSSITECODE="PNS" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="224" CCMFIRSTCERT="1" ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
Source List: ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
                  C:\_SMSTaskSequence\OSD\PNS00002 ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
MPs: ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
                  None ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
No version of the client is currently detected. ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
Folder 'Microsoft\Configuration Manager' not found. Task does not exist. ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
Updated security on object C:\WINDOWS\ccmsetup\. ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent. ccmsetup 12/8/2013 9:04:52 PM 2180 (0x0884)
Downloading file C:\_SMSTaskSequence\OSD\PNS00002\ccmsetup.exe ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
Downloading C:\_SMSTaskSequence\OSD\PNS00002\ccmsetup.exe to C:\WINDOWS\ccmsetup\ccmsetup.exe ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 16% complete (262144 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 32% complete (524288 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 48% complete (786432 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 64% complete (1048576 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 81% complete (1310720 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 97% complete (1572864 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
File download 100% complete (1614520 of 1614520 bytes). ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
Download complete. ccmsetup 12/8/2013 9:04:53 PM 2180 (0x0884)
Running as user "SYSTEM" ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
Detected 118178 MB free disk space on system drive. ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
Checking Write Filter Status. ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
This is not a supported write filter device. We are not in a write filter maintenance mode. ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
Unexpected row count (0) retrieved from AD. ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
Failed to get site version from AD with error 0x80004005 ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
SiteCode:         PNS ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
SiteVersion:      ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
No MPs were specified from commandline or the mobileclient.tcf. ccmsetup 12/8/2013 9:04:54 PM 2180 (0x0884)
An MP does not exist on this machine. ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
Client (5.00.7958.1000) is installed and is the same or lower version. Initiating repair. ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
Repairing version 5.00.7958.1000 of the client with product code {8864FB91-94EE-4F16-A144-0D82A232049D} ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
No features were excluded and will be excluded. ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
MSI PROPERTIES are REINSTALL=ALL REINSTALLMODE=vmous INSTALL="ALL" PATCH="C:\_SMSTASKSEQUENCE\OSD\PNS00002\UPDATES\CONFIGMGR2012AC-R2-KB2970177-X64.MSP" SMSPROVISIONINGMODE="1" SMSSITECODE="PNS" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0"
CCMFIRSTCERT="1" SMSPUBLICROOTKEY=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 ccmsetup 7/21/2014
12:19:50 PM 2452 (0x0994)
C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi is Microsoft trusted. ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
Running installation package
Package:     C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi
Log:         C:\WINDOWS\ccmsetup\Logs\client.msi.log
Properties:   REINSTALL=ALL REINSTALLMODE=vmous INSTALL="ALL" PATCH="C:\_SMSTASKSEQUENCE\OSD\PNS00002\UPDATES\CONFIGMGR2012AC-R2-KB2970177-X64.MSP" SMSPROVISIONINGMODE="1" SMSSITECODE="PNS" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0"
CCMFIRSTCERT="1" SMSPUBLICROOTKEY=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 ccmsetup 7/21/2014
12:19:50 PM 2452 (0x0994)
File C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi installation failed. Error text: ExitCode: 1635
Action:
ErrorMessages:
ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
Next retry in 1 minute(s)... ccmsetup 7/21/2014 12:19:50 PM 2452 (0x0994)
C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi is Microsoft trusted. ccmsetup 7/21/2014 12:20:50 PM 2452 (0x0994)
Running installation package
Package:     C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi
Log:         C:\WINDOWS\ccmsetup\Logs\client.msi.log
Properties:   REINSTALL=ALL REINSTALLMODE=vmous INSTALL="ALL" PATCH="C:\_SMSTASKSEQUENCE\OSD\PNS00002\UPDATES\CONFIGMGR2012AC-R2-KB2970177-X64.MSP" SMSPROVISIONINGMODE="1" SMSSITECODE="PNS" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0"
CCMFIRSTCERT="1" SMSPUBLICROOTKEY=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 ccmsetup 7/21/2014
12:20:50 PM 2452 (0x0994)
File C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi installation failed. Error text: ExitCode: 1635
Action:
ErrorMessages:
ccmsetup 7/21/2014 12:20:50 PM 2452 (0x0994)
Next retry in 1 minute(s)... ccmsetup 7/21/2014 12:20:51 PM 2452 (0x0994)
C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi is Microsoft trusted. ccmsetup 7/21/2014 12:21:51 PM 2452 (0x0994)
Running installation package
Package:     C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi
Log:         C:\WINDOWS\ccmsetup\Logs\client.msi.log
Properties:   REINSTALL=ALL REINSTALLMODE=vmous INSTALL="ALL" PATCH="C:\_SMSTASKSEQUENCE\OSD\PNS00002\UPDATES\CONFIGMGR2012AC-R2-KB2970177-X64.MSP" SMSPROVISIONINGMODE="1" SMSSITECODE="PNS" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0"
CCMFIRSTCERT="1" SMSPUBLICROOTKEY=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 ccmsetup 7/21/2014
12:21:51 PM 2452 (0x0994)
File C:\WINDOWS\ccmsetup\{181D79D7-1115-4D96-8E9B-5833DF92FBB4}\client.msi installation failed. Error text: ExitCode: 1635
Action:
ErrorMessages:
ccmsetup 7/21/2014 12:21:51 PM 2452 (0x0994)
Client installation has failed too many times. Ccmsetup will now abort. ccmsetup 7/21/2014 12:21:51 PM 2452 (0x0994)
A Fallback Status Point has not been specified. Message with STATEID='313' will not be sent. ccmsetup 7/21/2014 12:21:51 PM 2452 (0x0994)
InstallFromManifest failed 0x80070663 ccmsetup 7/21/2014 12:21:51 PM 2452 (0x0994)
Deleted file C:\WINDOWS\ccmsetup\ccmsetup.xml ccmsetup 7/21/2014 12:21:51 PM 2452 (0x0994)

I purchased some movies off iTunes from my account from my fathers IPad as a gift but didn't realize can not view if not logged with my account. Is there any way to save directly to the IPad (regardless of account)? Or transfer to him so he can view have?

I purchased some movies off iTunes from my account (but from my father IPad) to download as a gift,
but didn't realize he can not view if not logged in with my account.
Is there any way to save directly to the IPad (regardless of account) so he can view?
Or transfer to his account?
Or is any was to cancel the recent purchase if can not transfer as I will not watch these myself?

sure pretty simple. make a backup of your current settings
http://support.apple.com/kb/HT1766?viewlocale=en_US
then restore device from old backup you need pics off of
then import pics to computer
http://support.apple.com/kb/HT4083
you may need to save pics to camera roll first
then restore the new backup and sync pics back to phone via itunes
Peace, Clyde

Some clients not logging in

Similar Messages

Maybe you are looking for