X1 Carbon SCCM OSD "Incorrect Hash" Issues

Hi there,
I was wondering if anyone else has come across any problems with Operating System Deployment via SCCM with the X1 Carbon. In particular a reoccouring "Incorrect Hash" problem on various packages (which work fine with other models).
I've tried the old "Update Distribution Point" fix which is then allowing the OSD to move to another package which it then fails on again.
I changed the DP behaviour to access directly rather than cache the packages first and this seemed to allow the OSD to progress further but now I'm getting failures on the "Gather" from the MDT Toolkit.
I'm just having a bit of a head+wall moment with this one and of course it's for the IT Director so I need it to be perfect.
All help appreciated...
Chris.
Solved!
Go to Solution.

Thank you very much for posting this. We were seeing a lot of issues with the X1 Carbon when the USB Ethernet Dongle was plugged into the right side USB 3.0 port. Not oly the "incorrect Hash" issue, but also problems with OSD task sequence steps failing for all sorts of strange reasons.
After reading your post we too switched to using the dongle on the left side USB 2.0 port, and the problems have cleared up.
Great fix, thanks!
Current Laptop: X1 Carbon

Similar Messages

[svn] 3457: Accepting patch SDK-17038 by Brian Telintelo to fix an incorrect validation issue in ComboBox .

Revision: 3457
Author: [email protected]
Date: 2008-10-02 13:45:35 -0700 (Thu, 02 Oct 2008)
Log Message:
Accepting patch SDK-17038 by Brian Telintelo to fix an incorrect validation issue in ComboBox.
Checkintests: Pass
Ticket Links:
http://bugs.adobe.com/jira/browse/SDK-17038
Modified Paths:
flex/sdk/branches/3.0.x/frameworks/projects/framework/src/mx/controls/ComboBox.as

Certificate Authority certificate issued with incorrect hash algorithm

Hi all,
We have a certificate authority which was migrated from Server 2003 to 2008R2, the issue is that after running this command:
certutil -setreg ca\csp\CNGHashAlgorithm sha256
to upgrade the CA to SHA256, we renewed the CA certificate but the certificate still renewed using SHA1. The cryptographic settings in the CA properties dialog box says SHA256 however the certificate is issued using SHA1. Here is the image:
Any pointers to how we can reissue CA certificate with SHA256 algorithm?
Thanks,
Ojas

[Puneet Singh] What i feel is that your initial key which was generated was CAPI based that might be the reason you might be facing the problem.
Try to do the things in below sequence.
certification authority’s system, you will need to run the following commands from an elevated command line window:
certutil -setreg ca\csp\CNGHashAlgorithm SHA256
net stop certsvc
net start certsvc
Make sure you are using a Key Storage Provider that supports SHA256 – for example the Microsoft Key Storage Provider -
and then renew the certification authority’s certificate.
if you have the CAPI provider or you are CAPI based key then you have to convert it to CNG key and use certutil
repair so that it does start using the CNG key.
Puneet Singh

SCCM 2012 R2 Reporting issue updating SQL Reporting permissions

I am in the process of setting up SCCM 2012 R2. I am having an issue with the SCCM reporting. If I set the permissions in the SCCM console, the permissions do not propagate to the SQL reporting... I get this... This is from SRSRP.log...
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_DIT $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.384+300><thread=5432 (0x1538)>
(!) Error retrieving folders - [A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.)]. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.438+300><thread=5432 (0x1538)>
No folder configuration information found. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.441+300><thread=5432 (0x1538)>
Does anyone know how to fix?
I tried removing and re-installing the reporting point, changing the permissions in SQL Server... and a dozen other things.

I am in the process of setting up SCCM 2012 R2. I am having an issue with the SCCM reporting. If I set the permissions in the SCCM console, the permissions do not propagate to the SQL reporting... I get this... This is from SRSRP.log...
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_DIT $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.384+300><thread=5432 (0x1538)>
(!) Error retrieving folders - [A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.)]. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.438+300><thread=5432 (0x1538)>
No folder configuration information found. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.441+300><thread=5432 (0x1538)>
Does anyone know how to fix?
I tried removing and re-installing the reporting point, changing the permissions in SQL Server... and a dozen other things.

Installing 5.1 via SCCM OSD

We're looking to deploy Illustrator CS5.1 via Microsoft SCCM 2007 and we're running into an odd issue. Typically we use VBScript wrappers around all our installers so that we can do advanced tasks and checks. Previously we packaged all the CS 5 apps just fine and had no major hiccups. Well, we're now working on 5.1 and running into hiccups. Right now, if we install it manually using the custom package we created with the Adobe Application Manager toolkit, everything is just peachy. However, if we try to install it during the Operating System Deployment (OSD) portion of SCCM, it hangs (we have to manualyl power off the machine and then power it back on to get things to pick back up). After digging through the Adobe log files, the culprit seems to be:
WARNING: DW065: Display requirements not met for {23767F5D-A80C-4264-B8EA-ED4085FC332A}
WARNING: DW065: Display requirements not met for {DDBDE7B0-6FC4-40B1-B673-66EEE8CB60CF}
While we've got our "Unattend.xml" file for Windows 7 setting the resolution to 1024x768 (which is listed as being OK in the Tech Specs for Illustrator), this doesn't seem to do anything to fix the above error. And what happens is that our OS dpeloyment process just hangs and doesn't proceed. But once we power cycle the machine everything is just fine and Illustrator is installed and working.
So has anyone run across this and know how to fix it so we can use Illustrator 5.1?
Thanks!

Further digging into the log files turned up this error:
Error: MV operation returned: An unexpected Win32 error of 5. File: "C:\Program Files\Adobe\Adobe Illustrator CS5.1\Support Files\Required\Plug-ins\FWServer.aip".
And I had a script output all the running processes after the installation finished, but I didn't see anything out of whack. Can anyone help shed some light on this, or point me in a direction?

SCCM OSD using MDT task sequence

Hi all,
Is it right if I capture an image from a Windows 7 machine using SCCM capture media, then deploy it to an existing Windows XP(for migration) using "Create a new
Microsoft Deployment task sequence" wizard (this option appears after integrating MDT with SCCM)? I have this scenario but the targeted machine is not getting joined to domain, I suspect the issue is with sysprep as image that we get using sccm capture
media does not sysprep the reference machine.
What do you think?

I checked the logs and I believe the issue is with sysprep, I found the below in the netsetup.log:
12/15/2014 20:18:54:823 NetpChangeMachineName: from 'OSD-PC' to 'OSD-PC' using 'ssc.gov.jo\majmajali' [0x1000]
12/15/2014 20:18:54:823 NetpDsGetDcName: trying to find DC in domain 'SSC', flags: 0x1010
12/15/2014 20:18:54:823 NetpDsGetDcName: found DC '\\DC5' in the specified domain
12/15/2014 20:18:54:823 NetpGetLsaPrimaryDomain: status: 0x0
12/15/2014 20:18:54:823 NetpGetDnsHostName: Read NV Domain: ssc.gov.jo
12/15/2014 20:18:54:838 NetpGetComputerObjectDn: Cracking account name SSC\OSD-PC$ on
\\DC5
12/15/2014 20:18:54:838 NetpGetComputerObjectDn: Crack results: (Account already exists) DN = CN=OSD-PC,CN=Computers,DC=ssc,DC=gov,DC=jo
12/15/2014 20:18:54:838 NetpModifyComputerObjectInDs: Initial attribute values:
12/15/2014 20:18:54:838   DnsHostName = OSD-PC.ssc.gov.jo
12/15/2014 20:18:54:838   ServicePrincipalName = HOST/OSD-PC.ssc.gov.jo RestrictedKrbHost/OSD-PC.ssc.gov.jo HOST/OSD-PC RestrictedKrbHost/OSD-PC
12/15/2014 20:18:54:838 NetpModifyComputerObjectInDs: Computer Object already exists in OU:
12/15/2014 20:18:54:838   DnsHostName = OSD-PC.ssc.gov.jo
12/15/2014 20:18:54:838   ServicePrincipalName = TERMSRV/OSD-PC.ssc.gov.jo RestrictedKrbHost/OSD-PC.ssc.gov.jo HOST/OSD-PC.ssc.gov.jo TERMSRV/OSD-PC RestrictedKrbHost/OSD-PC HOST/OSD-PC
12/15/2014 20:18:54:838 NetpModifyComputerObjectInDs: There are _NO_ modifications to do
12/15/2014 20:18:54:838 ldap_unbind status: 0x0
12/15/2014 20:18:54:838 NetpChangeMachineName: status of setting DnsHostName and SPN: 0x0
The windows XP machine name to be migrated is OSD-Test, but the task sequence is making computer name the same as the reference (OSD-PC) despite task sequence is already configured to migrate that XP machine network and windows configuration (including
hostname).
I believe you are right, I should create build and capture task sequence in MDT, and in the reference machine I run the below command to capture an image:
cscript “\\MDT server\Deploymentshar1$\scripts\litetouch.vbs. After this capture is done the machine will get into oobe (if all is ok). What do you
think?

Creative Cloud: "Build" MSI Hangs During SCCM OSD Task Sequence Installation

I wanted to share problem and solution I found when deploying Creative Cloud Packager-created packages/application using SCCM 2012 R2. I encountered this problem packaging this as both a Package and as an Application in SCCM.
When installing the software through SCCM Software Center onto a client, Software Center would close right as the installation of the "Build" folder MSI completed. This is abnormal behavior.
When installing the application as part of an OSD Task Sequence, the software would get installed (as shown by logs) but SCCM would hang forever at the "Installing Application" step.
I tried all sorts of different settings in SCCM and with the MSIEXEC command line and eventually traced it to the Reboot Manager functionality in MSIEXEC that will close and attempt to restart processes using files that the installer needs. Reboot Manager clobbered part of SCCM and in the Task Sequence, the connection between SCCM and the installer was broken.
The solution is to pass the property "MSIRESTARTMANAGERCONTROL=Disable" along the command line when calling MSIEXEC on the Build folder MSI file. This setting disabled Restart Manager so it didn't mess up SCCM. Once I did this, my Software Center installs and OSD Task Sequences ran as intended.
For reference, I used the REBOOT=ReallySuppress property for reboots and let SCCM determine what to do with reboots based on the return code. My testing was done with Windows 8.1 Enterprise x64.

Like said, did you configure my proposal: "Configuration Manager client will force a mandatory device
restart" ? After you've configured that, update your deployment type manually and remove the old revisions of the application and try running the TS again. I'm guessing you're a little bit too fast on your doings so the ConfigMgr doesn't play a long very
nicely...
The TS stops because of your Hard Reboot (exit code 1641), I've seen this before and I configured my application so that ConfigMgr client will force device restart and that fixed my problem. Although, also my application is the last one in the TS, but still,
the TS continues after the reboot.
Btw. have you tried changing your command line to:
msiexec.exe /i cd-ord.msi TRANSFORMS=sv-se.mst MVLICENSE_KEY=xxxxxxxxxxxxxxxxx /L*V "%temp%\cdord.log" /qn
/norestart

X1 Carbon (20AX series) wifi connectivity issues

Dear Lenovo Support and all others,
I am posting this in hope that someone can help with my problem and also to share my unpleasant experience with a new Lenovo product.
Lenovo Thinkpad X1 Carbon
Model: 20A8A00VSG
OS: Windows 7 Pro 64bit
Purchase date: 27th February 2014
Since the first day I purchased the system, I have been having an issue with my wireless connection:
1. I am unable to reliably get a wireless connection to wireless access points (e.g. free wifi coffee outlets or malls) and personal mobile hotspots (mobile phone hotspots). It constantly says "LIMITED CONNECTIVITY". In other words, I cannot get internet access. Even when it does connect to the network and get internet access, there is a tendency for the connection to drop back to "LIMITED CONNECTIVITY".
The only time I can get a reliable connection is when I am connected to my home wireless router. The system does not seem to have problems on home wifi networks. Since the problem seems limited to wireless access points and hotspots, I believe its a hardware/software problem.
Please note that I have other wireless devices (laptops and mobile phones) that can connect to the same networks that I am trying to connect to and have no issues.
I have tested the networks with my friends' wireless devices as well and they have no issues accessing the internet so I am fairly certain that there is no issue with the networks themselves.
2. I have already called in twice and been given advice on both occasions but the problem still persist. I have updated all drivers, uninstalled and reinstalled and updated the BIOS for the system and also performed a system recovery but nothing has worked so far.
I have also tried disabling and/or deleting any anti-virus software and firewalls but it does not fix the problem.
I have also been advised that I need to go down to the Lenovo service center to have my laptop checked out by the technicians and that there MIGHT be a firmware upgrade for the wireless card itself.
NOTE: MIGHT? The support staff doesn't even know for sure whether there is an upgrade available.
3. Rebooting my computer, the wireless card or the hotspots does not solve the problem. It might work for a shortwhile before it reverts back to it's non working state or stops working again once I reboot the system.
I am really unhappy with the purchase so far. It's actually a good laptop per se when all is working, but without internet access, it is pretty much like a dead fish. And thats 90% of the time.
Like I said, this problem has been happening since day one and I've tolerated it long enough.
I hope someone can help me with this problem.
Thanks all.
UPDATE - 3/24/2014
I borrowed an ASUS Wireless USB adapter from a friend and installed it on the laptop. Lo and behold there are no connectivity issues to my iPhone wireless hotspot.
INTEL DUAL BAND WIRELESS AC 7260 - NO CONNECTION/LIMITED ACCESS
ASUS USB N10 WIRELESS ADAPTOR - CONNECTIVITY AND INTERNET ACCESS
I think this narrows it down to the software/hardware in the computer....

Hi, all
there is an issue bugged driver or even card firmware related. Intel confirmed that. Wait some time for the new release.
For the test purpose only disable 2,4 ghz band support and switch to 5 ghz. N-band seems unstable so switch to G-band. As the Linux users report the same issue it's firmware bug basically.
x220 | i5-2520m | Intel ssd 320 series | Gobi 2000 3G GPS | WiFi
x220 | i5-2520m | hdd 320 | Intel msata ssd 310 series | 3G GPS | WiFi
Do it well, worse becomes itself
Русскоязычное Сообщество English Community Deutsche Community Comunidad en Español

SCCM OSD for Windows 8.1 - TPM Owner Password not found

Hello,
I have been actively using these forums and the TechNet Guidance for the MBAM 2.5 client deployment, however I am still seeing some issues and looking for appropriate steps to troubleshoot.
I have a MDT Integrated Task Sequence to deploy Windows 8.1 to various machines. The Windows 8.1 Image has been created via a MDT 2013 Build & Capture Task Sequence on a VM and then imported into SCCM 2012 R2. In the MDT Image creation I am disabling
TPM Auto Provisioning by adding the Registry Key as per link below.
http://msdn.microsoft.com/en-us/library/windows/hardware/dn260276.aspx
The MDT Task Sequence has had the built-in Pre-Provision Bitlocker and Enable Bitlocker Steps disabled. I have included a step that runs the Clear-TPM powershell command before the Setup Windows and ConfigMgr and I have to confirm the TPM clearance at the
first reboot.
To begin the MBAM encryption I have scripts as supplied from the blog, firstly prepares the drive, reboots, installs MBAM 2.0 SP1, then encrypts.
http://blogs.technet.com/b/deploymentguys/archive/2012/02/20/using-mbam-to-start-bitlocker-encryption-in-a-task-sequence.aspx
The machine encrypts every time and the Recovery Key is escrowed, however I have not been able to get the TPM Owner Password
Any troubleshooting steps for the TPM Owner Password would be greatly appreciated
Regards
LeeB
Lee Bowman MCITP MCTS

Hello, Hope this helps get you a bit further. And would love any updates for suggestions to more logging etc
Image
Use MDT to generate Image and apply the following registry keys. Must be done in Image via MDT or DISM
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tpm\WMI: NoAutoProvision      dword:1
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tpm\WMI: NoDisableOwnerClear    dword:1
Task Sequence Steps
Set TS Variables
IsBDE - True
OSDBitlockerMode - TPM
Pre-provision Bitlocker (Standard TS Step)
Clear TPM - Create Powershell Script and use "Run Powershell Script" with Bypass.
            $tpm=get-wmiobject -class Win32_Tpm -namespace root\cimv2\security\microsofttpm
            $tpm. SetPhysicalPresenceRequest(22)
Check TPM Endorsement Key Pair Status
http://myitforum.com/myitforumwp/2011/11/14/bitlockermbamendorsement-keys-and-tpm-ownership/
Install MBAM 2.0 SP1 Agent - Standard MSI Install
Start MBAM Encryption
cscript.exe Win8StartMBAMEncryption.wsf /MBAMServiceEndPoint:https://*****************
Many versions of this script, but I used this one.
http://blog.coretech.dk/hra/deploying-windows-8-with-mbam-used-space-only-encryption/
Follow the Steps from LanceCr to comment out the TPM Owner Password.
https://social.technet.microsoft.com/Forums/en-US/95e1a7af-d273-44e1-92de-fd9915cc0e50/tpm-password-not-found-in-mbam-database?forum=mdopmbamGood
Luck :)
Lee Bowman MCITP MCTS

SCCM 2012 pxe boot issue

My test machines cannot PXE boot.
My lab environment is very simple:
10.10.0.0/24 subnet
10.10.0.5 = Server2012, DHCP, DNS, SQL Server 2008 R2 Sp2
10.10.0.7 = Server2012, SCCM2012
All machines are Oracle VM Box virtual machines connecting through the same virtual network.
Setup the PXE service from DP properties. I let SCCM install WDS. WDS in Server
Manager does not have a server node, but the WDS service is running. DP PXE tab is configured as follows:
"Enable PXE support for clients" is checked
"Allow this distribution point to respond to incoming PXE requests" is checked
"Enable unknown computer support" is checked
"Require a password when computers use PXE" is not checked
"User device affinity" is set to "Allow user device affinity with automatic approval"
PXE is configured to respond on all network interfaces
The PXE server response delay is 0 seconds
The DHCP server has options configured as follows:
Option 66: 10.10.0.7
Option 67: smsboot\x86\wdsnbp.com
Both DP and MP on SCCM server are configured for HTTP.
Both x86 and x64 boot images have been distributed to DP. The media was updated after
PXE was enabled on the DP.
Both x86 and x64 boot images have "Deploy this image from the PXE service point" enabled on the Data Source tab of their properties
SMSPXE.Log
<![LOG[Client boot action reply: <ClientIDReply><Identification Unknown="0" ItemKey="16777219" ServerName=""><Machine><ClientID/><NetbiosName/></Machine></Identification><PXEBootAction
LastPXEAdvertisementID="" LastPXEAdvertisementTime="" OfferID="" OfferIDTime="" PkgID="" PackageVersion="" PackagePath="" BootImageID="" Mandatory=""/></ClientIDReply>
]LOG]!><time="15:05:09.346-330" date="07-07-2014" component="SMSPXE" context="" type="1" thread="13592" file="libsmsmessaging.cpp:6544">
<![LOG[08:00:27:61:59:79, BF2ACCDD-1455-E149-963C-9A845B9C111E: no advertisements found]LOG]!><time="15:05:09.346-330" date="07-07-2014" component="SMSPXE" context="" type="1" thread="13592"
file="database.cpp:483">
<![LOG[08:00:27:61:59:79, BF2ACCDD-1455-E149-963C-9A845B9C111E: No boot action. Aborted.]LOG]!><time="15:05:09.441-330" date="07-07-2014" component="SMSPXE" context="" type="1" thread="13592"
file="database.cpp:483">
<![LOG[08:00:27:61:59:79, BF2ACCDD-1455-E149-963C-9A845B9C111E: Not serviced.]LOG]!><time="15:05:09.441-330" date="07-07-2014" component="SMSPXE" context="" type="1" thread="13592" file="database.cpp:483">
<![LOG[Client boot action reply: <ClientIDReply><Identification Unknown="0" ItemKey="16777219" ServerName=""><Machine><ClientID/><NetbiosName/></Machine></Identification><PXEBootAction
LastPXEAdvertisementID="" LastPXEAdvertisementTime="" OfferID="" OfferIDTime="" PkgID="" PackageVersion="" PackagePath="" BootImageID="" Mandatory=""/></ClientIDReply>
]LOG]!><time="15:05:09.705-330" date="07-07-2014" component="SMSPXE" context="" type="1" thread="13592" file="libsmsmessaging.cpp:6544">
<![LOG[08:00:27:61:59:79, BF2ACCDD-1455-E149-963C-9A845B9C111E: no advertisements found]LOG]!><time="15:05:09.705-330" date="07-07-2014" component="SMSPXE" context="" type="1" thread="13592"
file="database.cpp:483">

Resource ID is already present in the Unknown Computer (Windows 7) Properties please look into it and
OSD Task Sequences is there :(.

SCCM 2012 R2 PXE Issue to Hyper-V VM Windows 7 and 8.1

Good day
I've looked for solutions and there are very similar cases to mine but none of the solutions worked... unless I missed something...
I'm running out of ideas.
I had an issue with my boot image drivers not wanting to distribute and I got an error every time I try to update the boot image.
So I removed all of the drivers, distributed and the error went away. Then I reloaded my network drivers and lo and behold, I can't PXE to VMs anymore!
Deploying to physical hardware works 100%, its just my virtual machines. When I deploy, it loads up my WIM file, gets to the stage
where it says preparing network connections and then it restarts without an error (basically bombs out at the part where it is supposed to start formatting the disks).
I've confirmed network connectivity by using the F8 command window. Here is my SMSTS log file. Any help is appreciated.
Hyper-V storage drivers maybe? Yes... before anyone asks, I am using a legacy NIC on the VM and I'm on a subnet that
is setup in SCCM boundaries.
Logs are from x:\windows\temp\smstslog for anyone from the future reading this and having the same issue as me.
Help would be greatly appreciated!
<![LOG[Parsing Policy Body.]LOG]!><time="09:10:20.852-480" date="07-15-2014"
component="TSPxe" context="" type="0" thread="416" file="tspolicy.cpp:2141"> <![LOG[Getting local network information.]LOG]!><time="09:10:20.852-480" date="07-15-2014"
component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1968"> <![LOG[DhcpGetOriginalSubnetMask entry point is supported.]LOG]!><time="09:10:20.852-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmiputil.cpp:117"> <![LOG[Begin checking Alternate Network Configuration]LOG]!><time="09:10:20.852-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmiputil.cpp:1095"> <![LOG[spNamespace.Open(sNamespacePath), HRESULT=8004100e (e:\nts_sccm_release\sms\framework\ccmutillib\ccmiputil.cpp,1109)]LOG]!><time="09:10:20.867-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmiputil.cpp:1109"> <![LOG[Finished checking Alternate Network Configuration]LOG]!><time="09:10:20.867-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmiputil.cpp:1172"> <![LOG[Adapter {AB445F6E-1085-44C1-98A7-2AEC2ECF752F} is DHCP enabled.
Checking quarantine status.]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmiputil.cpp:436"> <![LOG[Content
location request:]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1973"> <![LOG[
Package : AU000001.2]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1974"> <![LOG[
Client : GUID:22BBA366-B85B-4109-A4B2-9D79F9930C94]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1975"> <![LOG[
Local : 1]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1976"> <![LOG[
Remote : 0]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1977"> <![LOG[
Internet: 0]LOG]!><time="09:10:20.867-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:1978"> <![LOG[Sending
RequestContentLocations for AU000001]LOG]!><time="09:10:20.883-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3462"> <![LOG[Setting
message signatures.]LOG]!><time="09:10:20.899-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="libsmsmessaging.cpp:1295"> <![LOG[Setting
the authenticator.]LOG]!><time="09:10:20.899-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="libsmsmessaging.cpp:1325"> <![LOG[CLibSMSMessageWinHttpTransport::Send:
URL: VS-AU000-030.kentzgroup.local:80 CCM_POST /ccm_system/request]LOG]!><time="09:10:20.899-480" date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:8604"> <![LOG[Request
was successful.]LOG]!><time="09:10:20.977-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="libsmsmessaging.cpp:8939"> <![LOG[::DecompressBuffer(65536)]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmzlib.cpp:739"> <![LOG[Decompression (zlib) succeeded: original size 684, uncompressed
size 5042.]LOG]!><time="09:10:20.977-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="ccmzlib.cpp:651"> <![LOG[Location
Reply: <ContentLocationReply SchemaVersion="1.00"><ContentInfo PackageFlags="0"><ContentHashValues/></ContentInfo><Sites><Site><MPSite SiteCode="AU0" MasterSiteCode="AU0" SiteLocality="FALLBACK"
IISPreferedPort="80" IISSSLPreferedPort="443"/><LocationRecords><LocationRecord><URL Name="http://SR-AU008-002.kentzgroup.local/SMS_DP_SMSPKG$/AU000001" Signature="http://SR-AU008-002.kentzgroup.local/SMS_DP_SMSSIG$/AU000001"/><ADSite
Name="AU-Brisbane"/><IPSubnets><IPSubnet Address="10.72.8.0"/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SR-AU008-002.kentzgroup.local</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="0"/><Locality>FALLBACK</Locality></LocationRecord><LocationRecord><URL
Name="http://SR-AU066-001.kentzgroup.local/SMS_DP_SMSPKG$/AU000001" Signature="http://SR-AU066-001.kentzgroup.local/SMS_DP_SMSSIG$/AU000001"/><ADSite Name="AU-Perth"/><IPSubnets><IPSubnet Address="10.72.66.0"/><IPSubnet
Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SR-AU066-001.kentzgroup.local</ServerRemoteName><DPType>SERVER</DPType><Windows
Trust="0"/><Locality>FALLBACK</Locality></LocationRecord><LocationRecord><URL Name="http://SVRHEND04.kentzgroup.local/SMS_DP_SMSPKG$/AU000001" Signature="http://SVRHEND04.kentzgroup.local/SMS_DP_SMSSIG$/AU000001"/><ADSite
Name="AU-Perth"/><IPSubnets><IPSubnet Address="10.72.12.0"/><IPSubnet Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property
Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>SVRHEND04.kentzgroup.local</ServerRemoteName><DPType>SERVER</DPType><Windows Trust="0"/><Locality>FALLBACK</Locality></LocationRecord><LocationRecord><URL
Name="http://VS-AU020-003.kentzgroup.local/SMS_DP_SMSPKG$/AU000001" Signature="http://VS-AU020-003.kentzgroup.local/SMS_DP_SMSSIG$/AU000001"/><ADSite Name="AU-Darwin-BlaydinPt"/><IPSubnets><IPSubnet Address="10.72.20.0"/><IPSubnet
Address=""/></IPSubnets><Metric Value=""/><Version>7958</Version><Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities><ServerRemoteName>VS-AU020-003.kentzgroup.local</ServerRemoteName><DPType>SERVER</DPType><Windows
Trust="0"/><Locality>FALLBACK</Locality></LocationRecord></LocationRecords></Site></Sites><RelatedContentIDs/></ContentLocationReply>]LOG]!><time="09:10:20.977-480" date="07-15-2014"
component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3489"> <![LOG[MCS server: ]LOG]!><time="09:10:20.977-480" date="07-15-2014"
component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3676"> <![LOG[Found location: http://SR-AU008-002.kentzgroup.local/SMS_DP_SMSPKG$/AU000001]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3764"> <![LOG[Local=0]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3801"> <![LOG[MCS server: ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3676"> <![LOG[Found location: http://SR-AU066-001.kentzgroup.local/SMS_DP_SMSPKG$/AU000001]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3764"> <![LOG[Local=0]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3801"> <![LOG[MCS server: ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3676"> <![LOG[Found location: http://SVRHEND04.kentzgroup.local/SMS_DP_SMSPKG$/AU000001]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3764"> <![LOG[Local=0]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3801"> <![LOG[MCS server: ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3676"> <![LOG[Found location: http://VS-AU020-003.kentzgroup.local/SMS_DP_SMSPKG$/AU000001]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3764"> <![LOG[Local=0]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="libsmsmessaging.cpp:3801"> <![LOG[Processing 4 locations.]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2009"> <![LOG[Not processing remote location:]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2054"> <![LOG[ Flags: 00000000]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2055"> <![LOG[ URLs : 1]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2056"> <![LOG[ SMB : ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2057"> <![LOG[ MCS : ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2058"> <![LOG[Not processing remote location:]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2054"> <![LOG[ Flags: 00000000]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2055"> <![LOG[ URLs : 1]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2056"> <![LOG[ SMB : ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2057"> <![LOG[ MCS : ]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2058"> <![LOG[Not processing remote location:]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2054"> <![LOG[ Flags: 00000000]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2055"> <![LOG[ URLs : 1]LOG]!><time="09:10:20.977-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2056"> <![LOG[ SMB : ]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2057"> <![LOG[ MCS : ]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2058"> <![LOG[Not processing remote location:]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2054"> <![LOG[ Flags: 00000000]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2055"> <![LOG[ URLs : 1]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2056"> <![LOG[ SMB : ]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2057"> <![LOG[ MCS : ]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2058"> <![LOG[No static content server.]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="resolvesource.cpp:2135"> <![LOG[LocationsList.size() > 0, HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\resolvesource.cpp,2138)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="resolvesource.cpp:2138"> <![LOG[FALSE, HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\tspolicy.cpp,1930)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="tspolicy.cpp:1930"> <![LOG[Content location request for AU000001:2 failed. (Code 0x80040102)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="3" thread="416" file="tspolicy.cpp:1930"> <![LOG[hr, HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\tspolicy.cpp,2702)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="tspolicy.cpp:2702"> <![LOG[Failed to resolve PackageID=⢈ƿ]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="3" thread="416" file="tspolicy.cpp:2702"> <![LOG[(*iTSReference)->Resolve(
pTSPolicyManager, dwResolveFlags ), HRESULT=80040102 (e:\qfe\nts\sms\framework\tscore\tspolicy.cpp,3488)]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416"
file="tspolicy.cpp:3488"> <![LOG[m_pSelectedTaskSequence->Resolve( m_pPolicyManager, TS::Policy::TaskSequence::ResolvePolicy | TS::Policy::TaskSequence::ResolveSource, fpCallbackProc, pv, hCancelEvent), HRESULT=80040102
(e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,1564)]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="tsmediawizardcontrol.cpp:1564"> <![LOG[Failed
to resolve selected task sequence dependencies. Code(0x80040102)]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSPxe" context="" type="3" thread="416" file="tsmediawizardcontrol.cpp:1564"> <![LOG[ResolveAndExecuteSelectedTaskSequence(
0, 0, 0 ), HRESULT=80040102 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,2533)]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSPxe" context="" type="0"
thread="416" file="tsmediawizardcontrol.cpp:2533"> <![LOG[RunWizardForPXE(), HRESULT=80040102 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmediawizardcontrol.cpp,2834)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="tsmediawizardcontrol.cpp:2834"> <![LOG[oTSMediaWizardControl.Run( sMediaRoot, true, sTSLaunchMode
), HRESULT=80040102 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmbootstrap.cpp,1078)]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSPxe" context="" type="0" thread="416"
file="tsmbootstrap.cpp:1078"> <![LOG[Execute( eExecutionEnv, sConfigPath, sTSXMLFile, uBootCount, &uExitCode ), HRESULT=80040102 (e:\nts_sccm_release\sms\client\tasksequence\tsmbootstrap\tsmbootstrap.cpp,1226)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="0" thread="416" file="tsmbootstrap.cpp:1226"> <![LOG[Exiting with return code 0x80040102]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSPxe" context="" type="1" thread="416" file="tsmbootstrap.cpp:1238"> <![LOG[Execution complete.]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSBootShell" context="" type="1" thread="796" file="bootshell.cpp:693"> <![LOG[hMap != 0, HRESULT=80070002 (e:\nts_sccm_release\sms\framework\tscore\environmentscope.cpp,493)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSBootShell" context="" type="0" thread="796" file="environmentscope.cpp:493"> <![LOG[m_pGlobalScope->open(), HRESULT=80070002 (e:\nts_sccm_release\sms\framework\tscore\environmentlib.cpp,335)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSBootShell" context="" type="0" thread="796" file="environmentlib.cpp:335"> <![LOG[this->open(), HRESULT=80070002 (e:\nts_sccm_release\sms\framework\tscore\environmentlib.cpp,553)]LOG]!><time="09:10:20.992-480"
date="07-15-2014" component="TSBootShell" context="" type="0" thread="796" file="environmentlib.cpp:553"> <![LOG[::RegOpenKeyExW (HKEY_LOCAL_MACHINE, sKey.c_str(),
0, KEY_READ, &hSubKey), HRESULT=80070002 (e:\nts_sccm_release\sms\framework\tscore\utils.cpp,809)]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSBootShell" context="" type="0" thread="796"
file="utils.cpp:809"> <![LOG[RegOpenKeyExW is unsuccessful for Software\Microsoft\SMS\Task Sequence]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSBootShell" context=""
type="2" thread="796" file="utils.cpp:809"> <![LOG[GetTsRegValue() is unsuccessful. 0x80070002.]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSBootShell"
context="" type="2" thread="796" file="utils.cpp:842"> <![LOG[End program: ]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSBootShell"
context="" type="1" thread="796" file="bootshell.cpp:725"> <![LOG[Finalizing logging from process 788]LOG]!><time="09:10:20.992-480" date="07-15-2014" component="TSBootShell"
context="" type="1" thread="796" file="tslogging.cpp:1741"> <![LOG[Finalizing logs to root of first available drive]LOG]!><time="09:10:20.992-480" date="07-15-2014"
component="TSBootShell" context="" type="1" thread="796" file="tslogging.cpp:1583"> <![LOG[LOGGING: Setting log directory to "D:\SMSTSLog".]LOG]!><time="09:10:21.039-480"
date="07-15-2014" component="TSBootShell" context="" type="1" thread="796" file="tslogging.cpp:1808">

I found the answer! FINALLY! Solution!
So, only a couple of things you have to do:
Go to Administration in the console and go to Boundary Groups.
Right click on the item and go to properties.
Go to the Reference tab.
And enable “Use this boundary group for site assignment” and choose for the correct site.
Also add the content location. Choose for your distribution point.
I was on a subnet that was set up in boundaries, BUT I did not assign the boundary group :-/
I hope this helps someone one day.

Office 365 Pro Plus install failures during SCCM OSD

Hi All,
I'm in the process of deploying Office 365Pro Plus using SCCM 2012 r2 and have found some very weird behaviour. I have already downloaded the source and the Office folder exists in the same folder as setup.exe and my install xml looks like this:
<Configuration>
<Add SourcePath="" OfficeClientEdition="32" >
    <Product ID="O365ProPlusRetail">
      <Language ID="en-us" />
    </Product>
</Add>
<Updates Enabled="TRUE" UpdatePath="" />
<Display Level="None" AcceptEULA="TRUE" />
<Logging Name="OfficeSetup.txt" Path="%temp%" />
</Configuration>
The install starts but completes after 5 seconds and OfficeSetup.txt shows Products configured successfully. Looking at other logs that are generated I can see a number of interesting entries:
The call to OfficeClickToRun.exe:
Calling {C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe} with parameter {scenario=unknown baseurl="C:\Windows\ccmcache\b\Office\Data\15.0.4623.1003" version="15.0.4623.1003" platform="x86" displaylevel="False"
culture="en-us" updatesenabled="True" firstrun="root\office15\firstrun.exe" productstoadd="O365ProPlusRetail_en-us_x-none"}
A error code that does not seem to have been passed back to the main log:
Click-To-Run   ap11d   Medium   StandaloneStartupBehavior::Start - Exit with error code 17002
A fatal error of FileNotFound:
Click-To-Run   amcq9   Unexpected   CCS::IsReachable. Source (C:\Windows\ccmcache\b\Office\Data\15.0.4623.1003\Office\Data\15.0.4623.1003\stream.x86.en-us.dat) not reachable. Exception FileNotFound (Source
not reachable.)
I believe this last error is the root cause of the failures at the source directory seems to have been added to the file path twice. The streamfile is located in C:\Windows\ccmcache\b\Office\Data\15.0.4623.1003 but something is adding and additional \Office\Data\15.0.4623.1003
to the path which does not exist.
This is a massive issue for us which is preventing deployment so any help is greatly appreciated.
Simon.

Hello Simon,
What's the entire SoucePath that you entered in your Confirguration.XML file? Please try to remove "Office\Data\15.0.4623.1003" from it and have a try again.
Feel free to post back with any findings.
Thanks,
Ethan Hua CHN
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

OSD Image Distribution Issue

We are running SCCM 2012 SP1 with CU4. When I add/import an OSD image into SCCM, it automatically copies the entire 10GB image into the "SCCMContentLib" folder on the main site server which I do not want.
This causes us to then essentially have two copies of this large WIM file on the main site server (once in the "Data Source" location and again in the "SCCMContentLib" folder). Since the main site server is NOT used to pull down
the images, I don't want to store it twice like this.
Is there any way to have it NOT store the WIM file in the "SCCMContentLib" folder on the main site server?
Thanks in advance!

What structure do you have? CAS, primary sites, secondary sites etc.
Assuming a single primary site then short answer - no. I don't believe this to be possible, you will always have a copy on your 'main' site server as well as on your DP. If they are the same server then you're stuck with 2 copies.
However depending on your OS level, if you've server 2012 then you could check out using de-duplication to bring down your disk utilisation. Check out this blog post from Rob Marshall - http://wmug.co.uk/wmug/b/r0b/archive/2014/02/21/windows-2012-server-deduplication-and-configmgr-2012.aspx

SCCM 2012 R2 ADR issue with proxy authentication

Hi,
We're migrating SCCM 2007 to SCCM 2012 R2.
In SCCM 2007, the proxy server is configured with user authentication, and this works.
In SCCM 2012 R2, the Software Update Point is installed locally and connected with a local WSUS 4.0 (Server 2012)
We use a proxy with user authentication for Update Deployment. (This user is the same as configured in SCCM 2007.)
The Proxy Server is Blue Coat SG.
The proxy account is used for:
The Synchronization works, but Automatic Deployment Rule (ADR) doesn't work.
When an Automatic Deployment Rule is started, it tries to authenticate 3 times.
The Patchdownloader.log shows:
Trying to connect to the root\SMS namespace on the <servername> machine.        Software Updates Patch Downloader        11/8/2013
12:19:06        3608 (0x0E18)
Connected to
\\<servername>\root\SMS        Software Updates Patch Downloader        11/8/2013 12:19:06        3608
(0x0E18)
Trying to connect to the
\\<servername.domain>\root\sms\site_ECM namespace on the <servername.domain> machine.        Software Updates Patch Downloader        11/8/2013
12:19:06        3608 (0x0E18)
Connected to
\\<servername.domain>\root\sms\site_ECM        Software Updates Patch Downloader        11/8/2013 12:19:06        3608
(0x0E18)
Download destination =
\\<servername.domain>\dp_wks_ms_updates$\3208bb5e-bcd9-4389-a0c9-02ef33ccb998.1\XPSEPSC-x86-en-US.exe .        Software Updates Patch Downloader        11/8/2013 12:19:07        3608
(0x0E18)
Contentsource =
http://wsus.ds.www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/xpsepsc-x86-en-us_7ae70ca1330a099080c6c41c4d5b7f19b30dc0cd.exe .        Software Updates Patch Downloader        11/8/2013
12:19:07        3608 (0x0E18)
Downloading content for ContentID = 16819067,
FileName = XPSEPSC-x86-en-US.exe.        Software Updates Patch Downloader        11/8/2013 12:19:07        3608 (0x0E18)
Try username <domain\ProxyAccount>        Software Updates Patch Downloader        11/8/2013 12:19:07        8364
(0x20AC)
Proxy enabled proxy server <proxyserver>:8080        Software Updates Patch Downloader        11/8/2013
12:19:07        8364 (0x20AC)
HttpSendRequest failed HTTP_STATUS_PROXY_AUTH_REQ        Software Updates Patch Downloader        11/8/2013
12:19:07        8364 (0x20AC)
Download
http://wsus.ds.www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/xpsepsc-x86-en-us_7ae70ca1330a099080c6c41c4d5b7f19b30dc0cd.exe to C:\Windows\TEMP\CAB6FD2.tmp returns 407        Software Updates
Patch Downloader        11/8/2013 12:19:07        8364 (0x20AC)
ERROR: DownloadContentFiles() failed with hr=0x80070197        Software Updates Patch Downloader        11/8/2013
12:19:07        3608 (0x0E18)
Then the proxy user account is locked:
Trying to connect to the root\SMS namespace on the <servername> machine.        Software Updates Patch Downloader        11/8/2013
12:20:11        3608 (0x0E18)
Connected to \\ <servername>\root\SMS        Software Updates Patch Downloader        11/8/2013
12:20:11        3608 (0x0E18)
Trying to connect to the
\\<servername.domain>\root\sms\site_ECM namespace on the <servername.domain> machine.        Software Updates Patch Downloader        11/8/2013
12:20:11        3608 (0x0E18)
Connected to
\\<servername.domain>\root\sms\site_ECM        Software Updates Patch Downloader        11/8/2013 12:20:11        3608
(0x0E18)
Download destination =
\\<servername.domain>\dp_wks_ms_updates$\e0a54221-3ff2-4129-b7cf-89bf5cd1f726.1\Windows-KB943729-x86-ENU.exe .        Software Updates Patch Downloader        11/8/2013
12:20:12        3608 (0x0E18)
Contentsource =
http://wsus.ds.download.windowsupdate.com/msdownload/update/software/updt/2009/10/windows-kb943729-x86-enu_e174c41ce3dcbd5c8922d6d1c39df1be425a70e0.exe .        Software Updates Patch Downloader        11/8/2013
12:20:12        3608 (0x0E18)
Downloading content for ContentID = 16824262,
FileName = Windows-KB943729-x86-ENU.exe.        Software Updates Patch Downloader        11/8/2013 12:20:12        3608 (0x0E18)
Try username <domain\ProxyAccount>        Software Updates Patch Downloader        11/8/2013 12:20:12        12480
(0x30C0)
Proxy enabled proxy server <proxyserver>:8080        Software Updates Patch Downloader        11/8/2013
12:20:12        12480 (0x30C0)
HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED        Software Updates Patch Downloader        11/8/2013
12:20:12        12480 (0x30C0)
Download
http://wsus.ds.download.windowsupdate.com/msdownload/update/software/updt/2009/10/windows-kb943729-x86-enu_e174c41ce3dcbd5c8922d6d1c39df1be425a70e0.exe to C:\Windows\TEMP\CAB6E4B.tmp returns 403        Software Updates
Patch Downloader        11/8/2013 12:20:12        12480 (0x30C0)
ERROR: DownloadContentFiles() failed with hr=0x80070193        Software Updates Patch Downloader        11/8/2013
12:20:12        3608 (0x0E18)
The RuleEngine.log shows:
Failed to download the update from internet. Error = 403 SMS_RULE_ENGINE 11/8/2013 16:18:25 3608 (0x0E18)
Failed to download ContentID 16824467 for UpdateID 16819978. Error code = 403 SMS_RULE_ENGINE 11/8/2013 16:18:25 3608 (0x0E18)
It seems that the ADR uses a wrong password when authenticating with the proxy, but this same user works when synchronizing with WSUS.
We performed the following actions with no result:
run the ADR manually and automatic,
reinstalled WSUS and SUP,
changed proxy user account.
Regards,
Matthias

Currently, the command shows:
Current WinHTTP proxy settings:
    Direct access (no proxy server).
We've been testing with:
upddwnldcfg.exe /s:<proxyserver>:<port> /u:<user> /allusers
psexec -i -s iexplore.exe, set Internet Explorer proxy manually
All with same result, proxy user getting locked when ADR runs.
(These settings have been removed after the test.)
I think dekac99 would suggest netsh winhttp set proxy or import proxy.
then turn off proxy use on the role SUP (this way not SCCM will send auth but all winhttp will use proxy)
the problems with that for me are:
- if MS implemented role-based proxy usage, why set at http layer - of course this might work as a workaround for the time being so it might be a good idea but I'm just not sure what unwanted issues it may cause
- the other thing is where I'm not sure, with set proxy you cannot define authentication account. if you use import from IE and the IE prompted for proxy auth, the stored credential will be used on winhttp layer (though I'm not 100% sure of that) - so this
is just too uncontrolled for me
- upddwnldcfg.exe will need to run in the name of system account (it stores credentials under HKCU so far I know it will be a per user based setting)
--> what confuses me, the catalog synch works which should use the same configured proxy and account(?), only ADR does not work. shouldn't they both use the same process for sending account auth info?

MBAM 2.5 integrated with SCCM 2012 SP1 compliance issue

Hi,
I have installed MBAM 2.5 in a SCCM integrated topology. GPO for encryption on the OS drive only have been deployed and encryption completed using the MBAM client. When running the compliance report and evaluating using the SCCM client the compliance comes
back as non-compliant. I have tried several tweaks to the GPO but had no luck getting it to report as compliant. Using the dashboard report to try and pin point why it is non-compliant shows as non-compliant but using the reasons in the top right corner all
have 0 instances.
Is there a log file on the local system that can tell me what aspect is causing the status?

In the Event Viewer, there is MBAM node, you will find all MBAM client events there.
Also, review your GPO and see what encryption types are allowed and which are required. Maybe one reason would be, that your GPO requires something, which your client hasn´t done yet, like PIN code.
I´ve seen issues with not being compliant to policy before, and there was some explanations of this, if you google around. I´m also intrested to get knowing this, because I couldn´t solve this compliance issue.
For customer reporting, I just did query in SCCM where I listed ecrypted status and drive letters, that was a "customized report method" to tell customer, are all their Computers encrypted or not.

X1 Carbon SCCM OSD "Incorrect Hash" Issues

Similar Messages

Maybe you are looking for