Updates on SCCM Client for Silverlight, Visual C++

Recently I've noticed that after installing a new Windows 7 system with the latest SCCM client ( 5.00.7858.1203 ), the first Software Scan shows each machine needs these three updates
Is there any reason to not download these and put them into the Client folder on the SCCM server as newer versions? The Visual C++ 2010 and Silverlight updates look straightforward and have the same file names however the Visual X++ 2005
update is named different.
Orange County District Attorney

Yes. The ones installed as part of the client are checked by the client install process against hashes to verify they are the correct versions. Thus, replacing those files will cause errors during the install process because the hashes won't match.
Jason | http://blog.configmgrftw.com

Similar Messages

  • Security Update (KB2917500) fails to update on SCCM client

    In this latest batch of December updates, I've run across about 4 updates that stubbornly refuse to update from the Software Center. They all return an error 0x87D00705 which in a CMTrace lookup says the error is "Pause State Required". The actual
    message in Software Center reads
    The software change returned error code 0x87D00705(-2016409851).
    The UpdatesDeployment.log shows the same error code. When I Retry the update, it logs this
    InstallUpdates Initiated by user 
    ApplyCIs - JobId = {4AD644BB-081B-4043-9674-A19FBA5C2EBB} 
    Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 0, Result = 0x0
    Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
    verbosity 30l 
    Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateDownloading, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
    Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
    verbosity 30l 
    Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
    Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
    verbosity 30l 
    CUpdatesJob({4AD644BB-081B-4043-9674-A19FBA5C2EBB}): CUpdatesJob::NotifyError - NotifyError received. Result = 0x87d00705 
    Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateError, PercentComplete = 0, DownloadSize = 0, Result =
    0x87d00705 
    Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
    verbosity 30l 
    Not refreshing update presence state as error CI Info status received
    Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 11l, value NULL, user NULL, session 4294967295l, level 0l,
    verbosity 30l 
    CUpdatesJob({4AD644BB-081B-4043-9674-A19FBA5C2EBB}): Delete job from WMI UpdatesDeploymentAgent 12/13/2013 10:12:30 AM 4960 (0x1360)
    No other installations in pipeline. No reboot required. 
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
    Has anyone run into this error before?
    Orange County District Attorney

    InstallUpdates Initiated by user 
    ApplyCIs - JobId = {4AD644BB-081B-4043-9674-A19FBA5C2EBB} 
    Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda)
    Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 0, Result = 0x0
    <...>
    Progress: Status = ciStateDownloading, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
    <...>
    Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
    <...>
    Progress: Status = ciStateError, PercentComplete = 0, DownloadSize = 0, Result =
    0x87d00705 
    <...>
    Not refreshing update presence state as error CI Info status received
    <...>
    CUpdatesJob({4AD644BB-081B-4043-9674-A19FBA5C2EBB}): Delete job from WMI UpdatesDeploymentAgent 12/13/2013 10:12:30 AM 4960 (0x1360)
    No other installations in pipeline. No reboot required. 
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
    without diving into all the other logs to see what's happening in the time-frame, it looks like the "normal" sequence of detect->download->install->confirm, isn't getting traction.
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Problem with update SCCM client to Sp1 CU3 on Windows 2008 server

    Hi all,
    I have problem with update SCCM client on Windows 2008 Server to 2012 Sp1 CU3. I have sent to deployment package with update (SP1 Cumulative Update 3 - server update) on four servers and after few minutes I have got in Monitoring\Deployment details four
    this same errors in "Asset Details":
    USER Message ID
    Status type Description
    NT\AUTHORITY\SYSTEM  1006
    Error 3003
    I love that types of error... which is har to find answer on google :-( I have tried but I haven't find any constructive :-( Did you met with something similar? Which log I should check (sorry - I'm still noob in SCCM2012) to update actual SCCM Client SP1
    (5.00.7804.1000) to SP1 CU3 (5.00.7804.1400)? 
    Thank you.

    I see in fodler with CU3 updates, are four packages:
    - SP1 Cumulative update 3 - x64 client update
    - SP1 Cumulative update 3 - x86 client update
    - SP1 Cumulative update 3 - server update 
    - SP1 Cumulative update 3 - console update
    It will be stupid but... maybe I should deploy x64 client update package? 

  • OSD Task Sequence fails to install SCCM client

    Hello,
    Our OSD task sequence fails to install the SCCM client with certain images.
    The TS gets to the "Setup Windows and Configuration" step, during which it downloads all the necessary SCCM client files (silverlight, C++ redistributable, client.msi....etc.). At this point computer restarts and in never loads back into the
    task sequence, instead it enters the minisetup (setup is starting services, setup is installing devices, setup is applying system settings...preparing computer for first use), after which the computer restarts and you are back at the CTR+ALT+Del screen.
    The computer has joined the domain and has run all other steps but it has failed to install SCCM client. I can also see the leftovers of an incomplete TS under c:\_SMSTaskSequence
    If we change the image specified under "Apply Operating System" step, everything works ok.
    It appears there is something wrong with this particular image. Any ideas?
    Logs show no errors. Let me know which logs you'd like me to post (and from which location)
    There is no ccm folder under c:\windows

    Hoping you are using ConfigMgr 2012 R2. If a client machine Join to Domain and doesn't proceed with other steps and not installing the CCM client, then problem seems to be with the Image.Do you have any RunOnce registry setting specified in the Image? You
    can mount the Image and check those settings.
    RunOnce Key Reference :
    https://msdn.microsoft.com/en-us/library/windows/desktop/aa376977(v=vs.85).aspx
    If the above key is present in the Image, TS Engine won't resume after the reboot.
    You need to use a new variable "SMSTSPostAction" at the end of the Task Sequence, to add your custom actions.
    The above variable is applicable in CM 2012 SP1 and R2.
    Thanks, Senthil. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. Click on "vote as Helpful" if you feel this post helpful to you. This
    can be beneficial to other community members reading the thread.

  • Error in push sccm client CcmSetup failed with error code 0x80070643 ccmsetup sccm 2012

    i want to push sccm client for all computer i enable automatic side-wide client installation 
     some computer get error code 0x80070643
    ccmsetup sccm 2012 this 
    when i tray manual installation get same error and ccmsetup.exe stopped 

    Duplicate of
    https://social.technet.microsoft.com/Forums/en-US/3bac4677-46b0-4d96-b63d-a819efcc7f35/error-in-push-sccm-client-ccmsetup-failed-with-error-code-0x80070643-ccmsetup-sccm-2012?forum=configmgrgeneral
    Please don't double post.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • SCCM Client and SCEP Client Uninstall

    Hi, I have below questions with regard to the SCCM client software and the SCEP client software.
    Does SCCM client uninstallation removes SCEP client as well? If not, how does the Endpoint Protection get the updates after SCCM client is removed? How to remove/uninstall SCEP client?
    If the SCCM client uninstallation removes the SCEP client as well (by running ccmsetup.exe /uninstall), how to make it to NOT uninstall the SCEP client?
    Thanks.
    NM

    Yes, your SCEP client should still be able to update.
    If you're installing the ConfigMgr client again, and have manage SCEP client enabled in the ConfigMgr client settings, it does more then just adding the update source. It allows you to manage the SCEP client configuration (like scan settings, exclusions,
    etc), perform remote actions (like initiating a scan) and report about them.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Upgraded SCCM 2012 SP1 to CU5 - Problem updating Endpoint Protection Client (to V4.5.216.0)

    We upgraded SCCM SP1 to CU5. We got one primary site, on which we had no problems with running the CU setup. After the upgrade we pushed the new administrator console and client.
    SP1 CU5 - console update -> Updated on all administrator users (50 computers)
    SP1 CU5- x64 and x86 client update -> Updated on pilot group (50 computers)
    No problems so far.
    We are having troubles updating the Endpoint Protection Client version. This was V4.1.522.0 before the upgrade. When we enroll a new computer, it receives the new V4.5.216.0, which is the last version.
    But we can't update our older clients. We try to deploy the software update (Update for Forefront Endpoint Protection 2010 Client - 4.5.216.0 (KB2952678)) but it doesn't install. After 20 minutes, if I look in the Deployment logs, it says the installation
    was successfull; but it isn't, it's still the old version.
    Strange thing is, we can upgrade to an inbetween version (Update for Forefront Endpoint Protection 2010 Client - 4.3.215.0 (KB2864366)). Which installs on a test client.
    If I look to the cache files of the new EP Client update, and use the UpdateInstall.exe manually, the update does install. Then I see in the logfile EndpointProtectionAgent.log it still refers to the version 4.1.522.0.
    EP 4.5.216.0 is installed, version is higher than expected installer version 4.1.522.0. EndpointProtectionAgent 13/01/2015 14:54:00 7808 (0x1E80)
    Re-apply EP AM policy. EndpointProtectionAgent 13/01/2015 14:54:00 7808 (0x1E80)
    Apply AM Policy. EndpointProtectionAgent 13/01/2015 14:54:00 7808 (0x1E80)
    Create Process Command line: "c:\Program Files\Microsoft Security Client\\ConfigSecurityPolicy.exe" "C:\Windows\CCM\EPAMPolicy.xml". EndpointProtectionAgent 13/01/2015 14:54:00 7808 (0x1E80)
    Applied the C:\Windows\CCM\EPAMPolicy.xml with ConfigSecurityPolicy.exe successfully. EndpointProtectionAgent 13/01/2015 14:54:02 7808 (0x1E80)
    Save new policy state 1 to registry SOFTWARE\Microsoft\CCM\EPAgent\PolicyApplicationState EndpointProtectionAgent 13/01/2015 14:54:02 7808 (0x1E80)
    State 1 and ErrorCode 0 and ErrorMsg and PolicyName Antimalware Policy and GroupResolveResultHash D277339FA77A9017801399D96266BAD42DE74F38 is NOT changed. EndpointProtectionAgent 13/01/2015 14:54:02 7808 (0x1E80)
    Skip sending state message due to same state message already exists. EndpointProtectionAgent 13/01/2015 14:54:02 7808 (0x1E80)
    Firewall provider is installed. EndpointProtectionAgent 13/01/2015 14:54:02 7808 (0x1E80)
    Installed firewall provider meet the requirements. EndpointProtectionAgent 13/01/2015 14:54:02 7808 (0x1E80)
    This is the WindowsUpdate.log when I try to push the new EP client.
    2015-01-14 11:24:13:651 7416 1c44 Handler :::::::::
    2015-01-14 11:24:13:651 7416 1c44 Handler : Updates to install = 1
    2015-01-14 11:24:21:716 7416 1c44 Handler : WARNING: Command line install completed. Return code = 0x8004ff25, Result = Failed, Reboot required = false
    2015-01-14 11:24:21:716 7416 1c44 Handler : WARNING: Exit code = 0x8024200B
    2015-01-14 11:24:21:716 7416 1c44 Handler :::::::::
    2015-01-14 11:24:21:716 7416 1c44 Handler :: END :: Handler: Command Line Install
    2015-01-14 11:24:21:732 7416 1c44 Handler :::::::::::::
    2015-01-14 11:24:21:794 1096 c18 Agent *********
    2015-01-14 11:24:21:794 1096 edc AU Can not perform non-interactive scan if AU is interactive-only
    2015-01-14 11:24:21:794 1096 c18 Agent ** END ** Agent: Installing updates [CallerId = CcmExec]
    2015-01-14 11:24:21:794 1096 c18 Agent *************
    2015-01-14 11:24:21:794 2296 fac COMAPI >>-- RESUMED -- COMAPI: Install [ClientId = CcmExec]
    2015-01-14 11:24:21:794 2296 fac COMAPI - Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, unaccounted = 0)
    2015-01-14 11:24:21:794 2296 fac COMAPI - Reboot required = No
    2015-01-14 11:24:21:794 2296 fac COMAPI - WARNING: Exit code = 0x00000000; Call error code = 0x80240022
    2015-01-14 11:24:21:794 2296 fac COMAPI ---------
    2015-01-14 11:24:21:794 2296 fac COMAPI -- END -- COMAPI: Install [ClientId = CcmExec]
    2015-01-14 11:24:21:794 2296 fac COMAPI -------------
    2015-01-14 11:24:21:794 1096 1620 AU Can not perform non-interactive scan if AU is interactive-only
    2015-01-14 11:24:26:739 1096 1424 Report REPORT EVENT: {ED287668-4BEF-46FD-BB57-CA17680E5D3B} 2015-01-14 11:24:21:732+0100 1 182 101 {A90C3005-7B59-4268-8B11-12D9BE5C8EA0} 201 80070643 CcmExec Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80070643: Update for System Center Endpoint Protection 2012 Client - 4.5.216.0 (KB2952678).
    2015-01-14 11:24:27:207 1096 1424 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8
    2015-01-14 11:24:27:207 1096 1424 Report WER Report sent: 7.5.7601.17514 0x80070643 A90C3005-7B59-4268-8B11-12D9BE5C8EA0 Install 101 Managed
    2015-01-14 11:24:27:207 1096 1424 Report CWERReporter finishing event handling. (00000000)
    Thanks in advance!

    Hello,
    According to
    kb2952678:
    To apply this update, you must have one of the following installed:
    System Center 2012 R2 Configuration Manager Cumulative Update 4 for System Center 2012
    Configuration Manager Service Pack
    Service Pack 2 for System Center Configuration Manager 2007 and Update Rollup 1 for
    Forefront Endpoint Protection 2010
    Do you have Update Rollup 1 for Forefront Endpoint Protection 2010?
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • Adobe Reader 11.0.04 SCUP update causing SCCM 2007 SP2 R3 client to crash

    When we started deploying the 11.0.0.4 update for Adobe Reader provided for System Center Updates Publisher (SCUP), we started having failures with our Operating System Deployments. When the 11.0.0.4 update installs during the Install Software Updates (via WSUS) step, it stops the SCCM client, causing the SCCM client to crash and uninstall. When the SCCM client uninstalls, it breaks the OSD process and the image process fails. Our current .wim file has Adobe Reader 11.x patched to the 11.0.0.3 level. We are using SCUP 2011. Everything was working ok until this update came out. We even tried creating an SCCM software distribution package to deploy the update and it still crashes the SCCM client when installed that way. Has anyone seen similar issues in their SCCM environments? Does Adobe have a support number available to get help with these types of issues? Thanks.

    Try using the Adobe doc:  1   Introduction — Enterprise Administration Guide
    Also, you'll find installing and updating via bootstrapper is easier than AIP over the long haul.
    hth,
    Ben

  • Getting error when updating the JavaScript API for Office and manifest schema files in your Visual Studio project from version 1.0 to 1.1

    Hi,
    I`m getting error message like "None of the apps in your project can be activated in the target. The manifest file of one or more apps contain API sets or Office applications that are not supported by
    the target Office client. To debug those apps, update manifest files to exclude any unsupported API sets or Office applications, and then start the project again. Alternatively, you can debug your apps by using Office 365 as a target." when when
    updating the JavaScript API for Office and manifest schema files in your Visual Studio project from version 1.0 to 1.1 in manifest file though i have added host elements.
    any help in this regard is highly appreciated
    Thanks,
    Santosh Sutar  

    Hi Satosh Sutar,
    Based on the description, you got the error message when you update the apps from version 1.0 to 1.1.
    From the error message, it seems the menifest include some settings no allowed in the new version. Would you mind sharing more detail about how you update the project?
    And here is an article about updating apps for Office and menifest schema files in the project for your reference:
    How to: Update the JavaScript API for Office and manifest schema files in your Visual Studio project from version 1.0 to 1.1
    Regards & Fei
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • SCCM Client PC's failing to download/install Windows Updates

    Hi,
    Last month I noticed that our client PC's, shortly after they had built (using SCCM Task Sequence)  were downloading and installing Windows Updates using the usual Windows Update process. What I mean is, I had Software Centre showing Updates as installing,
    but also had the Windows Update agent installing various updates. It was also showing in the start menu (Yellow icon saying Shut down and install updates). Now my understanding is, that that shouldn't of been happening, and only SCCM/Software Centre should
    be showing Windows Updates as installing.
    I noticed that we had some GPO's set for Windows Updates, which I have disabled, as I believed these were not necessary. Also, I like to control my Updates via SCCM Software Update groups after testing them, and not just allow clients to grab any updates
    that are required and approved.
    My problem now is, none of the clients are getting/installing any updates. I'm getting the following errors in the WUAHandler.log:
    Unable to read existing WUA resultant policy. Error = 0x80070002.
    WUAHandler
    09/04/2015 19:03:29
    8732 (0x221C)
    Group policy settings were overwritten by a higher authority (Domain Controller) to: Server  and Policy NOT CONFIGURED
    WUAHandler
    09/04/2015 19:03:29
    8732 (0x221C)
    Failed to Add Update Source for WUAgent of type (2) and id ({FC358571-80C5-4EAA-8A33-F79AD4C14785}). Error = 0x87d00692.
    WUAHandler
    09/04/2015 19:03:29
    8732 (0x221C)
    So, I've checked in:
    HKLM\Software\Policies\Microsoft\Windowa\WindowsUpdate\ & HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate 
    and neither have a WSUS server set. I'm assuming this is correct?
    RSOP shows all policies in \\Computer Configuration\Administrative Templates\Windows Components\Windows Update as
    DISABLED
    GPEDIT shows \\Computer Configuration\Administrative Templates\Windows Components\Windows Update\Specify intranet Microsoft update service location as
    Enabled and as our server (https://XXX.XXX:8531) - I'm assuming this is what SCCM client sets as if I changed this setting and then restart the setting comes back. If it was a Group Policy conflict then I
    would expect to see it in RSOP.
    Does anyone have any suggestions? I'm puzzled as to what to look at next. Is my first assumption of having 0 group policies configured for WSUS correct? Am I also correct in assuming Windows Updates shouldn't show in Control panel, or at the Start > Shutdown
    prompt, and only show in Software Centre?
    Thanks, and sorry for the long winded post!

    Hey Jason,
    Thanks for replying and explaining the WUA stuff. That made sense to be but my mind was being clouded by the issue all of the PC's/Clients onsite were, and are still getting. I cleared out the Group Policy cache as detailed on the link.
    - Cleared C:\Program Data\Microsoft\Group Policy\History\*.*
    - Ran a gpupdate /force
    - Restarted PC
    Issue still remains. Here is the output from the WUAHandler.log
    CWuaHandler::SetCategoriesForStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B;E0789628-CE08-4437-BE74-2495B842F43B,A38C835C-2950-4E87-86CC-6911A52C34A3; for leaves and E0789628-CE08-4437-BE74-2495B842F43B,A38C835C-2950-4E87-86CC-6911A52C34A3;
    for bundles 
    WUAHandler 13/04/2015 16:14:34 2508 (0x09CC)
    Its a WSUS Update Source type ({FC358571-80C5-4EAA-8A33-F79AD4C14785}), adding it. WUAHandler 13/04/2015 16:15:02 2488 (0x09B8)
    Unable to read existing resultant WUA policy. Error = 0x80070002. WUAHandler 13/04/2015 16:15:02 2488 (0x09B8)
    Enabling WUA Managed server policy to use server: https://(Name.domain of our SCCM SUP):8531 WUAHandler 13/04/2015 16:15:02 2488
    (0x09B8)
    Waiting for 2 mins for Group Policy to notify of WUA policy change... WUAHandler 13/04/2015 16:15:02 2488 (0x09B8)
    Unable to read existing WUA resultant policy. Error = 0x80070002. WUAHandler 13/04/2015 16:15:11 2488 (0x09B8)
    Group policy settings were overwritten by a higher authority (Domain Controller) to: Server  and Policy NOT CONFIGURED WUAHandler 13/04/2015 16:15:11 2488 (0x09B8)
    Failed to Add Update Source for WUAgent of type (2) and id ({FC358571-80C5-4EAA-8A33-F79AD4C14785}). Error = 0x87d00692. WUAHandler 13/04/2015 16:15:11 2488 (0x09B8)

  • Sharing Primary Site and Secondary Site's SUP WSUS for non-SCCM client use

    I was wondering if the WSUS deployed for the SCCM's SUP can also be (re)used for non-SCCM clients.
    Our SCCM infrastructure are mainly used to manage Workstations whereas our back-end servers are not deployed with SCCM agents due to overlapping SLAs and responsibilities. However, we would like to take advantage of WSUS's centralized update repository without
    each back-end servers initiating connection to the Internet to get their updates.
    Is this possible?

    No. WSUS servers that are used for SUPs are controlled by ConfigMgr and cannot be used outside ConfigMgr.
    Torsten Meringer | http://www.mssccmfaq.de

  • Endpoint Protection clients no getting updates from SCCM 2012 in new Secondary Site

    I recently stood up a secondary site behind a PCI firewall to manage PCI in-scope systems. All of my boundaries are properly configured and there are no overlaps. I am able to push packages to these clients and the clients are reporting as healthy however
    I am not able to get updates to the SCEP clients. There is no internet access from these systems so I have to rely on updates from SCCM. From what I can see in the WindowsUpdate log it is only trying to go to Microsoft for the definitions. Here is the Log:
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: Send failed with hr = 80072ee2.
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: Send request failed, hr:0x80072ee2
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: WinHttp: SendRequestUsingProxy failed for <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=41&L=en-US&P=&PT=0x7&WUA=7.9.9600.16422>.
    error 0x80072ee2
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2014-04-30 11:05:09:739
     828 da8
    Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2014-04-30 11:05:09:739
     828 da8
    SLS FATAL: GetResponse failed with hresult 0x80072ee2...
    2014-04-30 11:05:09:739
     828 da8
    EP FATAL: EP: CSLSEndpointProvider::GetWUClientDataAndInitParser - failed to get SLS data, error = 0x80072EE2
    2014-04-30 11:05:09:739
     828 da8
    EP FATAL: EP: CSLSEndpointProvider::GetEndpointFromSLS - Failed to get client data and init parser, error = 0x80072EE2
    2014-04-30 11:05:09:739
     828 da8
    EP FATAL: Failed to obtain 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL, error = 0x80072EE2
    2014-04-30 11:05:09:739
     828 da8
    Agent WARNING: Failed to obtain the authorization cab URL for service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0
    2014-04-30 11:05:09:739
     828 da8
    Agent FATAL: Caller <NULL> failed to opt in to service 7971f918-a847-4430-9279-4a52d1efe18d, hr=0X80072EE2
    2014-04-30 11:05:09:739
     828 da8
    SLS Retrieving SLS response from server...
    2014-04-30 11:05:09:739
     828 da8
    SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=41&L=en-US&P=&PT=0x7&WUA=7.9.9600.16422
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: Send failed with hr = 80072ee2.
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: Send request failed, hr:0x80072ee2
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: WinHttp: SendRequestUsingProxy failed for <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=41&L=en-US&P=&PT=0x7&WUA=7.9.9600.16422>.
    error 0x80072ee2
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2014-04-30 11:05:30:742
     828 da8
    Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2014-04-30 11:05:30:742
     828 da8
    SLS FATAL: GetResponse failed with hresult 0x80072ee2...
    2014-04-30 11:05:30:742
     828 da8
    EP FATAL: EP: CSLSEndpointProvider::GetWUClientDataAndInitParser - failed to get SLS data, error = 0x80072EE2
    2014-04-30 11:05:30:742
     828 da8
    EP FATAL: EP: CSLSEndpointProvider::GetSecondaryServicesEnabledState - Failed to get client data and init parser, error = 0x80072EE2
    2014-04-30 11:05:30:742
     828 da8
    Agent   * WARNING: Online service registration/service ID resolution failed, hr=0x80248014
    2014-04-30 11:05:30:742
     828 da8
    Agent   * WARNING: Exit code = 0x80248014
    2014-04-30 11:05:30:742
     828 da8
    Agent *********
    2014-04-30 11:05:30:742
     828 da8
    Agent **  END  **  Agent: Finding updates [CallerId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)  Id = 9]
    2014-04-30 11:05:30:742
     828 da8
    Agent *************
    2014-04-30 11:05:30:742
     828 da8
    Agent WARNING: WU client failed Searching for update with error 0x80248014
    2014-04-30 11:05:30:742
     828 da8
    IdleTmr WU operation (CSearchCall::Init ID 9, operation # 99) stopped; does use network; is not at background priority
    2014-04-30 11:05:30:742
     828 da8
    IdleTmr Decremented PDC RefCount for Network to 0
    2014-04-30 11:05:30:742
     828 da8
    IdleTmr Decremented idle timer priority operation counter to 0
    2014-04-30 11:05:30:743
     576 12c0
    COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
    2014-04-30 11:05:30:743
     576 12c0
    COMAPI   - Updates found = 0
    2014-04-30 11:05:30:743
     576 12c0
    COMAPI   - WARNING: Exit code = 0x00000000, Result code = 0x80248014
    2014-04-30 11:05:30:743
     576 12c0
    COMAPI ---------
    2014-04-30 11:05:30:743
     576 12c0
    COMAPI --  END  --  COMAPI: Search [ClientId = System Center Endpoint Protection (DDEFDD14-250E-4DC8-A0B3-9D667EC5D8EB)]
    2014-04-30 11:05:30:743
     576 12c0
    COMAPI -------------
    2014-04-30 11:05:30:743
     576 1254
    COMAPI WARNING: Operation failed due to earlier error, hr=80248014
    2014-04-30 11:05:30:743
     576 1254
    COMAPI FATAL: Unable to complete asynchronous search. (hr=80248014)
    The log is from a Server 2012 R2 Client. The only thing I was able to find was this Article which did not resolve my issue. Anyone else encounter anything similar? Any help would be appreciated.
    Regards, Evan Mills - Systems Administrator

    Every two hours is too aggressive for the ADR. Definitions are only released 2-3 times a day so every 8 hours is what most consider best practice. Is your WSUS sync occurring every two hours as well? If not, then the ADR wouldn't have anything new to pick
    up anyway. It's best to set the WSUS sync for every 8 hours and then set the ADR to run after any successful WSUS sync.
    So the EP definitions are caching but not installing? What does the WUAHandler.log show? One of my machines shows the following which indicates a successful installation from the ConfigMgr delivered update:
    1. Update (Missing): Definition Update for Microsoft Endpoint Protection - KB2461484 (Definition 1.173.933.0) (0a156122-d4f8-4215-9e63-8f0f1e32c9c6, 200)    WUAHandler    4/30/2014 6:49:33 AM    11080 (0x2B48)
    Async installation of updates started.    WUAHandler    4/30/2014 6:49:34 AM    11080 (0x2B48)
    Update 1 (0a156122-d4f8-4215-9e63-8f0f1e32c9c6) finished installing (0x00000000), Reboot Required? No    WUAHandler    4/30/2014 6:50:23 AM    8664 (0x21D8)
    Async install completed.    WUAHandler    4/30/2014 6:50:23 AM    8664 (0x21D8)
    Installation of updates completed.    WUAHandler    4/30/2014 6:50:23 AM    11032 (0x2B18)
    It sounds like if you set "Check for Endpoint Protection definitions at a specific interval" to 0 then it would prevent the WindowsUpdate.log activity you're seeing when the EP client tries to reach out for updates.

  • Client not receiving the software update FROM SCCM 2012 R2

    We have SCCM 2012 R2 installed and configured for SUP.and i have synchonice the SUP with WSUS server in the same which is there in the same machine.
    Now i can able to deploy the software update from SCCM 2012 R2 without any erro to the windows 7clients, but client side when i check there is no update installed in the clients , but seems there is no error in the client logs

    Hi,
    I'd start with running a "Software Updates Scan Cycle" from the configuration manager control panel applet and check the log file Windowsupdate.log, WUAhandler.log.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Why client is downloading update from server while installing sccm client.

    Dear team,
    Can anybody give answer to my question?
    I am new to sccm so when I am installing any client software the ccmsetup.log file is showing connecting to the server for downloading updates and it's taking long time to downloading because the office network is very slow 512kbps.But my setup file size
    is 111MB then what updates are downloading from server and is it possible to put that updates in the offline setup.

    You can copy the installer from the SCCM client installers from the SCCM server to the local machine.
    Refer to the below for the switches for installation.
    Use the switch /source:<Path>
    to specify the location of the folder for the installers you copied earlir.
    http://technet.microsoft.com/en-us/library/bb680980.aspx
    Blog: http://theinfraguys.com
    Follow me at Facebook
    The Infra Guys Facebook Page
    Please remember to click Mark as Answer on the answer if it helps you in anyway

  • Locked SCCM Client Package waiting for prestaged content, Cant use Client Push

    Hi there,
    I am having an issue with client push. When initiated the client is unable to find the client install package on the DP. The CCMSETUP log file on the client  reads "MP xxxxx.xxx.com didnt return DP locations for client package with the expected
    version". This could be caused by a boundry issue but the boundry information is set up correctly, and published into AD.
    The SCCM Client on the site server is not getting replicated properly to the DP's that we have setup and I think that this is causing the issue. The reason why its not gettiog to the DP is due to this error: "Distribution Manager is waiting for Package SG100001
    content to be prestaged on the distribution point" when we look at the content status of the SCCM client Package.
    We are unable to change the prestaged distribution point settings "automatic" as the package is the locked as its the SCCM client installation package and its waiting for us to prestage it on the DP. I have tried prestaging it, but it didnt
    work
    Any ideas as I have been stuck for two days on this now...
    Thanks in advanced.
    George

    Torsten you were right, The solution was as follows for anyone else having the same issue.
    As soon as you create a DP it appears that the client installation package automatically tries to distribute to the DP. If you created the DP as "Enabled for Prestage" while doing the setup then the SCCM client package will just wait for you to
    copy it manually. To reslove this I had to remove the "Enabled for Prestage Content" from the DP then go into the SCCM client Package, content location tab, select the DP and redistribute the package to the DP.
    Checking the Distribution Manager and PkgXferMgr.log assisted me in monitoring the content transfer to the new location.
    Thanks for your assistance.
    George
    George, I too concur that this fixed the issue.
    I had the same problem with my SCCM 2012 R2 CU4, where i updated the distribution point for the Configuration Manager Client Package. Thanks a million!

Maybe you are looking for