WSUS on DMZ for SUP SCCM 2012 R2

 
Hi all,
We are setting up SCCM 2012 r2 environment for production purpose and we would be having one primary . Due to security reason internet connectivity is not allowed for SCCM primary server , however
we have some DMZ servers that has internet connectivity .
My question here is
Is it possible to have WSUS on DMZ server and SUP role in SCCM primary server ?

Thanks for you reply..
You mean we have to install WSUS and SUP in primary site server and also install WSUS in DMZ server, then primary site server WSUS should get Sync from DMZ WSUS. Am I correct ?
My next question is while installing SUP in SCCM primary site
 , do we need give sync from an upstream data sources location as primary site WSUS or DMZ wsus ?

Similar Messages

  • GPO for SUP SCCM 2012 R2 Cu3

    Hello,
    which Settings in a GPU do i have to configure for using SUP
    We are using a WSUS at the moment.

    Technically, none. The ConfigMgr agent will set a local GPO to configure the WUA properly. If you override this, the ConfigMgr agent will detect this and disable software updates functionality.
    Generally, I recommend setting the "Configure Automatic Updates" setting to Disabled also to prevent the WUA from automatically performing any activity on its own.
    Reference:
    http://blog.configmgrftw.com/software-update-management-and-group-policy-for-configmgr-what-else/
    http://blog.configmgrftw.com/software-updates-management-and-group-policy-for-configmgr-cont/
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 IP for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS which is in a different .Domain

    Hi,
    Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 Ip for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS . ?
    Scenario: We are building 1 SCCM 2012 primary site and 2 DPs in one domain . In future this will attach to a CAS server which is in different domain. Can we assign  2 IPs in Primary site server , one IP will use to communicate with its 2 DPs and second
    IP for communicating with the CAS server which is in a different domain.? 
    Details: 
    1)Server : Windows 2012 R2 Std , VM environment .2) SCCM : SCCM 2012 R2 .3)SQL: SQL 2012 Std
    Thanks
    Rajesh Vasudevan

    First, it's not possible. You cannot attach a primary site to an existing CAS.
    Primary sites in 2012 are *not* the same as primary sites in 2007 and a CAS is 2012 is completely different from a central primary site in 2007.
    CASes cannot manage clients. Also, primary sites are *not* used for delegation in 2012. As Torsten points out, multiple primary sites are used for scale-out (in terms of client count) only. Placing primary sites for different organizational units provides
    no functional differences but does add complexity, latency, and additional failure points.
    Thus, as the others have pointed out, your premise for doing this is completely incorrect. What are your actual business goals?
    As for the IP Addressing, that depends upon your networking infrastructure. There is no way to configure ConfigMgr to use different interfaces for different types of traffic. You could potentially manipulate the routing tables in Windows but that's asking
    for trouble IMO.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • WildCard Certificate for IBCM - SCCM 2012

    Hi,
    I have a Primary Site at the DataCenter. There are 2 MP's installed there.
    One MP I would like to publish using ISA/TMG for Internet Based Client Management. Can I use a wild card certificate on ISA Server for the same? The MP would have Local Cert in IIS.
    Does SCCM 2012 support wild card certificate?

    My assumption was that you had purchased a wildcard cert and thus were purchasing your certs as you made no mention of an internal PKI.
    What happens at your ISA box is between the client OS and ISA and really has nothing to do with ConfigMgr. So, although I haven't tried it, it should work. If you have an internal PKI though, why aren't you just issuing a non-wildcard cert to the ISA?
    Jason | http://blog.configmgrftw.com

  • Software metering date not available for selection sccm 2012

    Hi
    I have installed SCCM 2012. 
    While viewing a report for software metering date and year are not available for selection. they are blank. 

    thaks 
    I is showing after restart. 
    Now there is another problem. 
    When I see the software metering report for enabled rule i.e. KasperskyAdminKit I can not understand the figures
    Computers that have run a specific metered software program  
    NetBIOS Name
    Installed Site Code
    Last Usage
    Total Usages
    Average Usages per Day
    Total Duration (min)
    Average Duration of Use (min)
    Average Duration per Day (min)
    WIL-WNR-AV
    PUN
    11/16/2012 5:13:35 PM
    1
    0.03
    7384.27
    7384.27
    246.14
    How to know the the explanations for the underlined items ? 

  • Hardware Requirements for a SCCM 2012 CAS with SQL Server Remote

    The hardware requirements for a CAS server with SQL Server Enterprise locally installed are:
    16 cores (Intel Xeon L5520 or comparable CPU)
    64 GB of RAM
    1.5 TB of disk space for the operating system, Configuration Manager, SQL Server, and all database files.
    Does anyone know what the hardware requirements are if SQL Server Enterprise is remote from the CAS server?  It's not listed.  -Shane

    Even though I am going to be strung up for even saying this, I do agree there is a use for a CAS outside of 100,000 users.  If you do indeed have distinct admins managing their own images and apps in remote
    locations then I see the benefit of a CAS.  A remote ConfigMgr console connecting to a primary site would perform poorly.  Admin A at the primary site would not experience any issues but Admin B would be in for a lot of work and waiting.  Any
    time Admin B needed to add an app or image it would have to be copied up to the remote primary site and then distributed back down.  This is not the best scenario.
    There are scenarios in company merger situations (and others I am sure) where the management of both locations has not been consolidated down to one location yet and is not going to be done as part of the deployment or upgrade.  If you had a 2007 environment
    it is going to be very hard to convince the admin at the remote location that this upgrade is going to be a good thing for him/her.  There is an option for the remote admin to RDP into a server in the primary site but the image and apps still need
    to be distributed down to the remote location.  During testing this can be very time consuming. 
    I do agree that adding a CAS adds additional complexity but in some cases such as the one I described it is the right decision. 
    Thank you for the reply. And i totally agree that in some cases a design like that is a necessary evil (but not by our personal wants). 
    We had that design with 2007 (implemented before my time), and as you predicted EU admins complained about difficulty using the console RDP-ed into a box close to the primary site. The bandwidth to and from different regions is out of scope for me so I do what
    I can with what I have. We too will be moving forward with a CAS hierarchy. 
    Administratively the other IT depts in other regions operate on their own. I dont handle any of the EU computers on a day to day basis whatsoever, etc. We're not merging but our IT shops operate with near independence. 

  • SCCM 2012 SP1 - SUP Error

    Hi guys,
    i upgraded my SCCM 2012 test Environment to SP1. I have only one Primary Site Server which holds all Roles. Everything seems to work fine except the SUP Role. If i try to synchronize the latest Updates it says that it cannot find a WSUS Server
    and i should check WCM.LOG.
    Within WCM.LOG i can find the following Messages:
    Waiting for changes for 58 minutes SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 08:56:44 3620 (0x0E24)
    Trigger event array index 0 ended. SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:07:56 3620 (0x0E24)
    SCF change notification triggered. SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:04 3620 (0x0E24)
    Populating config from SCF SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:04 3620 (0x0E24)
    Setting new configuration state to 1 (WSUS_CONFIG_PENDING) SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:04 3620 (0x0E24)
    Changes in active SUP list detected. New active SUP List is: SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:04 3620 (0x0E24)
        SUP0: CM01.TEST.LOCAL, group = , nlb = SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:05 3620 (0x0E24)
    Updating active SUP groups... SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:05 3620 (0x0E24)
    Bad Configuration, SUPs present but no default SUP SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:05 3620 (0x0E24)
    Default SUP not specified SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:05 3620 (0x0E24)
    Setting new configuration state to 0 (WSUS_CONFIG_NONE) SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:05 3620 (0x0E24)
    Waiting for changes for 47 minutes SMS_WSUS_CONFIGURATION_MANAGER 09.01.2013 09:08:05 3620 (0x0E24)
    So in General this tells me that it can find a SUP but this one is not specified as a DEFAULT SUP. How can i tell SCCM that this is my Default SUP? (I only have this one and it is configured to sync from Microsoft Update site). I have never seen
    this before so i guess this is related to SP1?
    PS: I also installed the 2 necessary WSUS Updates before i upgraded to SCCM SP1.
    Thanks in lot in advance.
    Stefan

    None of your solutions apply to WSUS 4.0 on Server 2012
    None of the specified patches applies or will run on a Windows 2012 Std server. They either report that WSUS 3 SP 2 isn't installed OR that the patch isn't applicable to the server version installed.
    Here is a excerpt of MY WCM.LOG
    I have a fully patched Windows 2012 Standard Server, Fully updated SCCM 2012 SP1 installed, and am connected to a fully patched SQL2012 Server on another fully patched Windows 2012 Std server.
    Ports 8530 and 8531 designated on both the WSUS 4.0 Role and SCCM 2012 SP1 system (both are on same server)
    SUP0: SCCM2012.xxdomainname.ORG, group = , nlb = ~  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 10:54:14.496+420><thread=6052 (0x17A4)>
    Updating active SUP groups...~  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 10:54:14.503+420><thread=6052 (0x17A4)>
    Bad Configuration, SUPs present but no default SUP  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 10:54:14.510+420><thread=6052 (0x17A4)>
    Default SUP not specified  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 10:54:14.525+420><thread=6052 (0x17A4)>
    Setting new configuration state to 0 (WSUS_CONFIG_NONE)~  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 10:54:14.535+420><thread=6052 (0x17A4)>
    Waiting for changes for 11 minutes  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 10:54:14.543+420><thread=6052 (0x17A4)>
    Wait timed out after 11 minutes while waiting for at least one trigger event.  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 11:04:54.569+420><thread=6052 (0x17A4)>
    Timed Out...~  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 11:05:04.577+420><thread=6052 (0x17A4)>
    Default SUP not specified  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 11:05:04.585+420><thread=6052 (0x17A4)>
    Waiting for changes for 60 minutes  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 11:05:04.592+420><thread=6052 (0x17A4)>
    Wait timed out after 60 minutes while waiting for at least one trigger event.  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 12:04:54.714+420><thread=6052 (0x17A4)>
    Timed Out...~  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 12:05:04.721+420><thread=6052 (0x17A4)>
    Default SUP not specified  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 12:05:04.728+420><thread=6052 (0x17A4)>
    Waiting for changes for 60 minutes  $$<SMS_WSUS_CONFIGURATION_MANAGER><03-14-2014 12:05:04.734+420><thread=6052 (0x17A4)>
    Randall

  • Pre-requisites for SCCM 2012 R2

    Hi Experts,
    I want to know is it mandatory to install and configure WDS, WSUS and MDT before deploying SCCM 2012 R2
     Are the Above roles prerequisites....????
    What would be the possible pre-requisites for SCCM 2012 R2..???

    For the pre-requisites, you can refer to the article that Torsten already shared.
    As Torsten already mentioned, the installation of WDS, WSUS and MDT is optional. However, if you are planning to do OS Deployment (OSD) then consider installing WDS and MDT (Of course, you can install MDT if you would like to take advantage of its use).
    As for WSUS, you can consider installing it if you would like to ensure a central management of Software Updates. So, depending on your requirements, you can decide what to do.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Required Ports to connect remote SQL named Instance for SCCM 2012 R2

    Hi,
      I have allowed the TCP 1433,1434,135 and 80 but still unable to connect the remote SQL named instance DB for the SCCM 2012 R2... and getting below error..can you please suggest if any other port required for the same, i have turned off the windows
    firewall and RPC service is running ob Remote SQL and SCCM 2012 R2 server..
    CCMsetuplog
    Shailendra Dev

    During the installation you need more ports. You would also need the (dynamic) RPC ports. See for a complete list (section Site Server --> SQL Server):
    https://technet.microsoft.com/en-us/library/hh427328.aspx
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Applying CU 1 for SCCM 2012 R2

    I am looking to install the CU 1 for our SCCM 2012 R2 environment, as it has a fix for one of the issue that I am having, and I have a few questions:
    1.  We have a CAS -> Primary -> Distribution sites.  I am assuming I need to first run the update on our CAS, then run the install on our Primary site, and and any updates needed to the Distribution sites the Primary site will take care of
    updating?
    2. These servers our running in our VM environment, so the plan was to create a snapshot of both the CAS and Primary, I was not going to take snapshot our SQL box.  As from what I could tell there should be no updates to the DBs, is this wise?
    3. This is my first update to the enviroment since I initially deployed SCCM 2012 R2, is there anything I should be concerned about, or watch for?

    Hi,
    1. that is correct.
    2. The update will update the database as well so you should do a backup in a supported way, either with the builtin task + file backup or SQL backup + file backup. Using Snapshots is not supported and in your scenario I would never use it as your Primary
    and CAS replicates all the time and consistency will be an issue.
    3. The CU1 installation has been running fine for me.
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Is there a way to change an existing SCCM 2012 site server intranet FQDN name to lowercase?

    Does anyone know if there is a way to change the intranet (not internet) FQDN name of an existing SCCM 2012 site server to all lowercase letters?  You used to be able to do this in SCCM 2007.

    I had a problem with WSUS updates not working via SCCM 2012 R2 during an operating system deployment. When examining the c:\Windows\WindowsUpdate.log I found the following errors:
    WARNING: SendRequest failed with hr = 80072ee2. Proxy List used: <****:8080;****:8080> Bypass List used : <(null)> Auth Schemes used : <>
    + Last proxy send request failed with hr = 0x80072EE2, HTTP status code = 0
    WARNING: GetConfig failure, error = 0x80072EE2, soap client error = 5, soap error code = 0, HTTP status code = 200
    After a LONG time researching this error I found it was related to the fact we were using a WPAD proxy implementation and apparently this doesnt cope well with uppercase characters for the WSUS server URL. I changed our GPO to be using lowercase lettering
    but when examining the WindowsUpdate log again it still showed as being in uppercase. In the end I found that despite what your GPO setting says, this can get over written by the SCCM site server's own published WSUS location. You can check this by entering
    the following command:
    wmic /namespace:"\\root\CCM\SoftwareUpdates\WUAHandler" PATH CCM_UpdateSource
    Unfortunatelty in SCCM 2012 there is no GUI way to amend the intranet FQDN used for the WSUS location so I then turned to directly editing the database (which anyone will tell you is not recommended, but by this point i was DESPERATE!).
    In the end it solved all my troubles so if anyone finds themselves in this situation, you can fix it by going to the SCCM database and within the table 'WSUSServerLocations', change the WSUSServerName to be in lowercase letters.

  • Sccm 2012 r2 prerequiremnts download

    Hi all
    Can someone guide me for all the installed media requirements for the SCCM 2012 r2?
    eg
    sql 2012 (hotfix?)
    wsus (version)
    mdt 012?
    adk 8.1 (usmt, wdt, windows preinstall environment winpe)
    one of my customers need to download all the media because his servers don't have access to the internet at this point

    Hi,
    you have all the info here:
    Step by Step installing ConfigMgr 2012/ SCCM 2012 SP1
    SCCM 2012 R2 - Step by Step Installation Guide
    Please click on Propose As Answer or to mark this post as and helpful for other people. This posting is provided AS-IS with no warranties, and confers no rights.

  • Getting "Error: 0x80070654" when trying to install SCCM 2012 R2 Console from Software Center

    What I did:
    Created a Package Source share on the Site Server
    Gave the Package Source Share the following Share permissions: SCCM Admins: Full Control, Domain Computers: Full Control, Local Admins: Full Control.
    Copied the "Program Files\Microsoft Configuration Manager\tools\ConsoleSetup" folder to my package source (Since the Package Source is actually on the site server, I just copied the ConsoleSetup folder to it that is on the same drive)
    Created a package and a Standard Program
    Command line: ConsoleSetup.exe 
    I deploy it to my collection
    Run Machine Policy and Reevaluation on my Right Click Tools 
    Go to one of my clients and open up Software Center and click the Install button
    It fails with ""Error: 0x80070654" 
    I open up execmgr.log on the client using CMTrace and I use the error lookup tool and it shows that the 0x80070654 error is "This installation package could not be opened. Contact the application vendor to verify that this is a valid Windows Installer
    package"
    I also see a red highlighted line in the execmgr.log file with the following entry: "Script for Package:PRI00013, Program: SCCM 2012 R2 Management Console failed with exit code 2147944020"
    I can run ConsoleSetup.exe using a command line to the package source. 
    Execmgr.log Contents
    Policy arrived for parent package PRI00013 program SCCM 2012 R2 Management Console
    execmgr 7/31/2014 2:40:48 AM
    3336 (0x0D08)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 6l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:40:48 AM
    3336 (0x0D08)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistProgramOfferReceivedEvent
    AdvertisementId = "PRI2000A";
    ClientID = "GUID:C83A938E-8BD7-4207-A450-11B3FE063DD6";
    DateTime = "20140731094048.938000+000";
    MachineName = "My Computer";
    ProcessID = 1548;
    SiteCode = "PRI";
    ThreadID = 3336;
    execmgr
    7/31/2014 2:40:48 AM 3336 (0x0D08)
    Raising client SDK event for class NULL, instance NULL, actionType 6l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:40:48 AM
    3568 (0x0DF0)
    Validating chain of dependent programs for package PRI00013 optional program SCCM 2012 R2 Management Console
    execmgr 7/31/2014 2:41:04 AM
    4612 (0x1204)
    Validating package PRI00013 program SCCM 2012 R2 Management Console in the chain. The content request ID is {00000000-0000-0000-0000-000000000000}
    execmgr 7/31/2014 2:41:04 AM
    4612 (0x1204)
    Creating an optional execution request for package PRI00013 program SCCM 2012 R2 Management Console
    execmgr
    7/31/2014 2:41:04 AM 4612 (0x1204)
    Requesting content from CAS for package PRI00013 version 1
    execmgr 7/31/2014 2:41:05 AM
    4612 (0x1204)
    Successfully created a content request handle {CBABEBB0-D019-4421-8B2E-47ABF90A925F} for the package PRI00013 version 1
    execmgr 7/31/2014 2:41:05 AM
    4612 (0x1204)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistWaitingContentEvent
    AdvertisementId = "PRI2000A";
    ClientID = "GUID:C83A938E-8BD7-4207-A450-11B3FE063DD6";
    DateTime = "20140731094105.334000+000";
    MachineName = "My Computer";
    PackageName = "PRI00013";
    PackageVersion = "1";
    ProcessID = 1548;
    ProgramName = "SCCM 2012 R2 Management Console";
    SiteCode = "PRI";
    ThreadID = 4612;
    execmgr
    7/31/2014 2:41:05 AM 4612 (0x1204)
    Successfully raised SoftDistWaitingContentEvent event for program SCCM 2012 R2 Management Console
    execmgr 7/31/2014 2:41:05 AM
    4612 (0x1204)
    Execution Request for advert  package PRI00013 program SCCM 2012 R2 Management Console state change from NotExist to WaitingContent
    execmgr 7/31/2014 2:41:05 AM
    4612 (0x1204)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:05 AM
    4612 (0x1204)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:05 AM
    5072 (0x13D0)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:05 AM
    4260 (0x10A4)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:05 AM
    4756 (0x1294)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:05 AM
    4756 (0x1294)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:05 AM
    5072 (0x13D0)
      Processing [{CBABEBB0-D019-4421-8B2E-47ABF90A925F}, 0]: OnContentAvailable
    execmgr
    7/31/2014 2:41:10 AM 4756 (0x1294)
    [{CBABEBB0-D019-4421-8B2E-47ABF90A925F}]: Content Version 1 is available for advert , pkg: PRI00013, program SCCM 2012 R2 Management Console.
    execmgr 7/31/2014 2:41:10 AM
    4756 (0x1294)
    An existing MTC token was not supplied, using ExecutionRequest's Id as MTC token and this execution request is the owner of resultant MTC task.
    execmgr 7/31/2014 2:41:10 AM
    4756 (0x1294)
    Request a MTC task for execution request of package PRI00013, program SCCM 2012 R2 Management Console with request id: {C9942D47-8A99-4363-AE69-A6F813336239}
    execmgr 7/31/2014 2:41:10 AM
    4756 (0x1294)
    Execution Request for advert  package PRI00013 program SCCM 2012 R2 Management Console state change from WaitingContent to Ready
    execmgr 7/31/2014 2:41:10 AM
    4756 (0x1294)
    MTC task with id {C9942D47-8A99-4363-AE69-A6F813336239}, changed state from 0 to 4
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:10 AM
    4756 (0x1294)
      Processing [{CBABEBB0-D019-4421-8B2E-47ABF90A925F}, 0]: RemoveNotification
    execmgr 7/31/2014 2:41:10 AM
    4756 (0x1294)
    MTC signaled SWD execution request with program id: SCCM 2012 R2 Management Console, package id: PRI00013 for execution.
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Sending ack to MTC for task with id: {C9942D47-8A99-4363-AE69-A6F813336239}
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Executing program ConsoleSetup.exe in Admin context
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Execution Request for advert  package PRI00013 program SCCM 2012 R2 Management Console state change from Ready to NotifyExecution
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Checking content location C:\Windows\ccmcache\eo for use
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Successfully selected content location C:\Windows\ccmcache\eo
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Executing program as a script execmgr
    7/31/2014 2:41:10 AM 4328 (0x10E8)
    Successfully prepared command line "C:\Windows\ccmcache\eo\ConsoleSetup.exe"
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Command line = "C:\Windows\ccmcache\eo\ConsoleSetup.exe", Working Directory = C:\Windows\ccmcache\eo\
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Running "C:\Windows\ccmcache\eo\ConsoleSetup.exe" with 32bitLauncher
    execmgr 7/31/2014 2:41:10 AM
    4328 (0x10E8)
    Created Process for the passed command line
    execmgr 7/31/2014 2:41:11 AM
    4328 (0x10E8)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistProgramStartedEvent
    AdvertisementId = "PRI2000A";
    ClientID = "GUID:C83A938E-8BD7-4207-A450-11B3FE063DD6";
    CommandLine = "\"C:\\Windows\\ccmcache\\eo\\ConsoleSetup.exe\"";
    DateTime = "20140731094111.028000+000";
    MachineName = "My Computer";
    PackageName = "PRI00013";
    ProcessID = 1548;
    ProgramName = "SCCM 2012 R2 Management Console";
    SiteCode = "PRI";
    ThreadID = 4328;
    UserContext = "NT AUTHORITY\\SYSTEM";
    WorkingDirectory = "C:\\Windows\\ccmcache\\eo\\";
    execmgr
    7/31/2014 2:41:11 AM 4328 (0x10E8)
    Raised Program Started Event for Ad:PRI2000A, Package:PRI00013, Program: SCCM 2012 R2 Management Console
    execmgr 7/31/2014 2:41:11 AM
    4328 (0x10E8)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:11 AM
    4328 (0x10E8)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:11 AM
    4328 (0x10E8)
    MTC task with id {C9942D47-8A99-4363-AE69-A6F813336239}, changed state from 4 to 5
    execmgr 7/31/2014 2:41:11 AM
    4612 (0x1204)
    Program exit code -2147023276 execmgr
    7/31/2014 2:41:11 AM 4756 (0x1294)
    Looking for MIF file to get program status execmgr
    7/31/2014 2:41:11 AM 4756 (0x1294)
    Script for Package:PRI00013, Program: SCCM 2012 R2 Management Console failed with exit code 2147944020
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    Raising event:
    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistProgramErrorEvent
    AdvertisementId = "PRI2000A";
    ClientID = "GUID:C83A938E-8BD7-4207-A450-11B3FE063DD6";
    DateTime = "20140731094111.506000+000";
    ExitCode = "-2147023276";
    MachineName = "My Computer";
    PackageName = "PRI00013";
    ProcessID = 1548;
    ProgramName = "SCCM 2012 R2 Management Console";
    SiteCode = "PRI";
    ThreadID = 4756;
    UserContext = "NT AUTHORITY\\SYSTEM";
    execmgr
    7/31/2014 2:41:11 AM 4756 (0x1294)
    Raised Program Error Event for Ad:PRI2000A, Package:PRI00013, Program: SCCM 2012 R2 Management Console
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    Execution is complete for program SCCM 2012 R2 Management Console. The exit code is -2147023276, the execution status is FailureNonRetry
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    Requesting MTC to delete task with id: {C9942D47-8A99-4363-AE69-A6F813336239}
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    MTC task with id: {C9942D47-8A99-4363-AE69-A6F813336239} deleted successfully.
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 10l, value Result:FALSE, user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    Requesting MTC to delete task with id: {C9942D47-8A99-4363-AE69-A6F813336239}
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    This execution request does not have a corresponding task in MTC.
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="PRI00013",ProgramID="SCCM 2012 R2 Management Console", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l
    execmgr 7/31/2014 2:41:11 AM
    4756 (0x1294)
    CServiceWindowEventHandler::Execute - Received SERVICEWINDOWEVENT : END Event
    execmgr 7/31/2014 5:00:00 AM
    2928 (0x0B70)
    Thanks 

    Cool, mate it is then.
    Yeah it either changed or there is a typo. 
    I re-created everything and I still get that same 0x80070654 error.
    This is really frustrating
    Anyway, here is what I see in the AppEnforce.log:
    +++ Starting Install enforcement for App DT "SCCM 2012 R2 Management Console" ApplicationDeliveryType - ScopeId_DF08DF3D-39F7-4840-B17C-92FCAB02F116/DeploymentType_00b14782-2bc3-4c88-bc19-9d12981bc4ef, Revision - 1, ContentPath - C:\Windows\ccmcache\ev,
    Execution Context - System AppEnforce
    7/31/2014 11:27:30 PM 4256 (0x10A0)
        A user is logged on to the system.
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Performing detection of app deployment type SCCM 2012 R2 Management Console(ScopeId_DF08DF3D-39F7-4840-B17C-92FCAB02F116/DeploymentType_00b14782-2bc3-4c88-bc19-9d12981bc4ef, revision 1) for system.
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
    +++ Application not discovered. [AppDT Id: ScopeId_DF08DF3D-39F7-4840-B17C-92FCAB02F116/DeploymentType_00b14782-2bc3-4c88-bc19-9d12981bc4ef, Revision: 1]
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        App enforcement environment: 
    Context: Machine
    Command line: consolesetup.exe /q TargetDir="%ProgramFiles%\ConfigMgr" EnableSQM=0 DefaultSiteServerName=my.site.server
    Allow user interaction: No
    UI mode: 1
    User token: null
    Session Id: 2
    Content path: C:\Windows\ccmcache\ev
    Working directory:
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Prepared working directory: C:\Windows\ccmcache\ev
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Prepared command line: "C:\Windows\ccmcache\ev\ConsoleSetup.exe" /q TargetDir="C:\Program Files\ConfigMgr" EnableSQM=0 DefaultSiteServerName=my.site.server
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Executing Command line: "C:\Windows\ccmcache\ev\ConsoleSetup.exe" /q TargetDir="C:\Program Files\ConfigMgr" EnableSQM=0 DefaultSiteServerName=my.site.server with user context
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Working directory C:\Windows\ccmcache\ev
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Post install behavior is BasedOnExitCode
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Waiting for process 2792 to finish.  Timeout = 120 minutes.
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Process 2792 terminated with exitcode: 2147944020
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Looking for exit code -2147023276 in exit codes table...
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
        Unmatched exit code (2147944020) is considered an execution failure.
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)
    ++++++ App enforcement completed (0 seconds) for App DT "SCCM 2012 R2 Management Console" [ScopeId_DF08DF3D-39F7-4840-B17C-92FCAB02F116/DeploymentType_00b14782-2bc3-4c88-bc19-9d12981bc4ef], Revision: 1, User SID: ] ++++++
    AppEnforce 7/31/2014 11:27:30 PM
    4256 (0x10A0)

  • SMS Provider Locations Do Not Match - Problem installing SCCM 2012 R2 CU4

    I have an SCCM 2012R2 CU1 site that has been upgraded from SCCM 2012 non-SP1, so I have gone from 2012 to 2012SP1 through CU5 and then to R2 and then to CU1.
    Over the course of the life of this site, which has more than 10k clients and 10 Site Systems, we have installed roles, removed roles, moved roles and removed Site Systems.
    I have also installed and removed SMS providers . . . which is where my issues begin.
    The site properties in the console list 6 SMS Providers and even lists an SMS provider on a server that was retired and is no longer a Site System.  When I query WMI using the following VBS script it only returns the *ACTUAL* SMS Provider locations,
    2 of the 6 listed in the GUI.
    On Error Resume Next
    Const ForReading = 1, ForWriting = 2, ForAppending = 8
    strComputer = "." 
    Set oFS = CreateObject("Scripting.FileSystemObject")
    Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\sms")
    If Err.Number <> 0 Then
    WScript.Echo "Cannot connect to WMI"
    WScript.Echo vbTab & "Error " & Err.Number & " - " & Err.Description
    End If
    Set oLog = oFS.OpenTextFile("C:\Temp\SMS_ProvList.log",ForAppending, True)
    If Err.Number <> 0 Then
    WScript.Echo "Could not create output file"
    WScript.Echo vbTab & "Error " & Err.Number & " - " & Err.Description
    End If
    Set colItems = objWMIService.ExecQuery("SELECT * FROM SMS_ProviderLocation",,48)
    count = 0
    For Each objItem in colItems
        count = count + 1
        oLog.WriteLine "-----------------------------------"
        oLog.WriteLine Now()
        oLog.WriteLine "Provider instance " & count &  " : " & objItem.Machine
        oLog.WriteLine "NamespacePath : " & objItem.NamespacePath     
        oLog.WriteLine ""
    Next
    I have a test environment which has also gone through some growth over its lifetime and has had the same changes to SMS Providers made.  When I first attempted to install SCCM 2012 R2 CU4 in this test environment the installer continually failed the
    prerequisite checker when querying the CU level of the SMS Providers.  The only way that I could get past that issue was by running a site maintenance task via the CM installer and installing an SMS Provider at the location that had previously been an
    SMS Provider but I had uninstalled that role.
    I do not want to have to do that in my production environment, and would not even be able to do so if I wanted as I have retired one of the servers listed and cannot re-provision that machine.
    Any CM12 gurus out there with suggestions?  This strikes me as a standard MS problem when having multiple development teams working on a product/update and not having a standard location to check for configuration information (This is exactly the problem
    when configuring DNS suffixes via GPO and not manually setting the GUI to match).
    Thanks!
    Josh Gerner
    Cornell University.

    The issue I have is that I cannot find the WMI class that holds the SMS Providers that are returned by the GUI.
    I actually engaged MS Premier for a SCCM 2012 RAAS about 2 years ago and that was when the discrepancy first reared it's head.  The support person that I worked with couldn't give me a way of cleaning those entries at that point which is when I started
    logging the locations to be sure that my maintenance task was really installing or removing the SMS Providers.
    Josh Gerner

  • User attributes checked by Delta Discovery in SCCM 2012

    Hi All,
    Since I simply cannot find an answer to my question using google, will ask it here and hope you can help me.
    Which EXACT User attributes does Delta Discovery check for in SCCM 2012? Is it possible to manipulate this, and add one more attribute?
    Microsoft's answer to this question is a simple: Basic User Information, but that not an exact answer.
    Here is the deal. We updated the extensionAttribute12 with computernames, so that we know what the primary device for a User is (I know this feature is present in CM12, but we will not use it for reasons). This information will be collected by User Discovery
    and by using a nested query in the device collection, the Primary device will be added to it. This works like a charm, the only issue is time. We need that value to be checked by delta discovery if it has been changed, however this only works with FULL discovery
    which is set to 1 week. If I lower this value that might cause serious backlogs, as the jobs get piled up in the inboxes due to the large amount of DDR files. Is there anything we can do? Powershell script, a configuration file in CM12 for delta discovery
    or something. We really don't what to set the User discovery to run a FULL scan every 4 hours or so, as I don't know what would happen when checking for 24k Users.
    Thank you in advance for any sort of feedback!
    Regards,

    Hi,
    Well, I checked the attribute if its replicated to the GC and according to this line isMemberOfPartialAttributeSet: TRUE it does. Will run a test again with delta discovery, and if that failes, will try to change the SystemFlag on it.
    dn:CN=ms-Exch-Extension-Attribute-12,CN=Schema,CN=Configuration
    >objectClass: top
    >objectClass: attributeSchema
    >cn: ms-Exch-Extension-Attribute-12
    >distinguishedName: CN=ms-Exch-Extension-Attribute-12,CN=Schema,CN=Configuration
    >instanceType: 4
    >whenCreated: 20050715092317.0Z
    >whenChanged: 20110528160036.0Z
    >uSNCreated: 6155
    >attributeID: 1.2.840.113556.1.2.600
    >attributeSyntax: 2.5.5.12
    >isSingleValued: TRUE
    >rangeLower: 1
    >rangeUpper: 2048
    >mAPIID: 35928
    >uSNChanged: 6155
    >showInAdvancedViewOnly: TRUE
    >adminDisplayName: ms-Exch-Extension-Attribute-12
    >adminDescription: ms-Exch-Extension-Attribute-12
    >oMSyntax: 64
    >searchFlags: 16
    >lDAPDisplayName: extensionAttribute12
    >name: ms-Exch-Extension-Attribute-12
    >objectGUID: {5AC9437E-18AE-4EE6-909B-94CC1B6EF1C5}
    >schemaIDGUID: {167757F7-47F3-11D1-A9C3-0000F80367C1}
    >attributeSecurityGUID: {E48D0154-BCF8-11D1-8702-00C04FB96050}
    >isMemberOfPartialAttributeSet: TRUE
    >objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration
    >dSCorePropagationData: 16010101000000.0Z
    >msDS-IntId: -1992421057

Maybe you are looking for

  • Best OS9-capable Mac to purchase in 2008?

    I have $1032 credit at Gain Saver because the optical drive on a used PB15 purchased earlier this year died. Since I opted for the 3-yr warranty, I can spend the credit and transfer the warranty to any of their current offerings. Instead of another P

  • Flash Player Vulnerabilities

    I need an official announcement from Adobe that they have all of the vulnerabilites fixed in the Flash Player. I will NOT allow it's use on my credit union's network until I can be assured that all of the past and future vulnerabilites have been fixe

  • What can I use since I can't use flash player?

    What can I use since I'm unable download flash player?

  • SDO invocation errors after re-deploying composites

    Hi, We have an application with EJB exposing SDO web services and composites calling those services. The wsdl and xsd files for those services are pushed in MDS by our build. The problem is every time we re-deploy the application (EJBs, wsdl/xsd to M

  • HD/folders in disarray....How do I fix?

    About a month ago, my HD failed but I was able to recover everything by firewiring everything to my iBook. I ended up having to zero out the HD. It works fine now after reloading the OS. My primary problem is with iPhoto. I had to drag the photos fro