Quantcast
Channel: Configuration Manager 2012 - Security, Updates and Compliance forum
Viewing all 6382 articles
Browse latest View live

Clients not receiving updates

$
0
0

I'm having a problem deploying updates via SCCM 2012.  Environment is Server 2012, SQL 2012, SCCM 2012 SP1 CU1. 

I created a software update group and deployed it to a collection with a mandatory end date/time.  If I check the clients manually, the majority of the updates in the group need to be installed on the clients, so the deployment "should" work.  Software distribution works, but not updates; even though they worked up until a couple of weeks ago.  If I check the status of the deployment, all devices are in the "Unknown" category.

I've tested both the mplist and mpcert and both are successful.

In the WUAhandler.log file I see:

CWuaHandler::SetCategoriesForStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B;E0789628-CE08-4437-BE74-2495B842F43B,A38C835C-2950-4E87-86CC-6911A52C34A3; for leaves and E0789628-CE08-4437-BE74-2495B842F43B,A38C835C-2950-4E87-86CC-6911A52C34A3; for bundles]LOG]!><time="08:26:07.069+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="7732" file="cwuahandler.cpp:2527">
<![LOG[Its a WSUS Update Source type ({E856A4D1-98EE-4FEB-94C7-81BFB719296B}), adding it.]LOG]!><time="15:12:08.689+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="11648" file="sourcemanager.cpp:1232">
<![LOG[Existing WUA Managed server was already set (http://SITENAME.COM:8530), skipping Group Policy registration.]LOG]!><time="15:12:08.829+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="11648" file="sourcemanager.cpp:936">
<![LOG[Added Update Source ({E856A4D1-98EE-4FEB-94C7-81BFB719296B}) of content type: 2]LOG]!><time="15:12:08.839+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="11648" file="sourcemanager.cpp:1265">
<![LOG[Scan results will include all superseded updates.]LOG]!><time="15:12:08.859+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="11648" file="cwuahandler.cpp:2913">
<![LOG[Search Criteria is (DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')]LOG]!><time="15:12:08.859+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="11648" file="cwuahandler.cpp:2916">
<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="15:12:08.859+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="11648" file="cwuahandler.cpp:579">
<![LOG[Async searching completed.]LOG]!><time="15:12:19.584+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="9128" file="cwuahandler.cpp:2068">
<![LOG[Successfully completed scan.]LOG]!><time="15:12:21.253+240" date="06-05-2013" component="WUAHandler" context="" type="1" thread="6976" file="cwuahandler.cpp:3557">

In the UpdatesDeployment.log

<![LOG[Failed to create UpdatesDeployment, error 80070005]LOG]!><time="08:22:34.523+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="3" thread="11652" file="sdkinterfaces.cpp:829">
<![LOG[Failed to create UpdatesDeployment, error 80070005]LOG]!><time="08:22:34.812+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="3" thread="11652" file="sdkinterfaces.cpp:829">
<![LOG[Service startup system task]LOG]!><time="08:26:07.942+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="systemtasks.cpp:30">
<![LOG[Software Updates feature is enabled]LOG]!><time="08:26:07.958+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="cdeploymentagent.cpp:56">
<![LOG[Assignment {E55832ED-0D86-46F5-88F6-532DC874BDC3} has total CI = 139]LOG]!><time="08:26:08.036+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:161">
<![LOG[Assignment ({E55832ED-0D86-46F5-88F6-532DC874BDC3}) reconnected to the existing job ({C1E9C07E-E840-4379-877B-A1CB346E0C0C}) successfully.]LOG]!><time="08:26:08.036+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:542">
<![LOG[Assignment {1de18626-fecb-47a8-86ef-40fe1c979ae0} has total CI = 6]LOG]!><time="08:26:08.036+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:161">
<![LOG[Assignment ({1de18626-fecb-47a8-86ef-40fe1c979ae0}) reconnected to the existing job ({24274C01-0B20-4D85-AD46-D4A353D0C6A4}) successfully.]LOG]!><time="08:26:08.036+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="updatesassignment.cpp:542">
<![LOG[No current service window available to run updates assignment with time required = 1]LOG]!><time="08:26:08.036+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="deploymentutils.cpp:580">
<![LOG[Startup task completed]LOG]!><time="08:26:08.051+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7732" file="cdeploymentagent.cpp:104">
<![LOG[User logon system task]LOG]!><time="08:26:19.533+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="8556" file="systemtasks.cpp:90">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="08:26:29.095+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="8416" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="08:30:48.177+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7752" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="08:30:48.399+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="7752" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="09:17:33.159+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="6904" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="09:17:33.471+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="6904" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="09:17:33.752+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="6904" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="09:18:29.212+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11288" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="09:18:29.411+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11288" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="14:17:21.191+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11628" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="14:17:21.511+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11628" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="14:19:00.414+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="5452" file="updatesmanager.cpp:940">
<![LOG[EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0]LOG]!><time="14:19:00.667+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="5452" file="updatesmanager.cpp:940">
<![LOG[Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>False</UseCachedResults></SoftwareUpdatesMessage>']LOG]!><time="15:12:04.618+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11648" file="cdeploymentagent.cpp:189">
<![LOG[Removing scan history to force non cached results]LOG]!><time="15:12:04.618+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11648" file="assignmentsmanager.cpp:1214">
<![LOG[Assignment({E55832ED-0D86-46F5-88F6-532DC874BDC3}) already in progress state (AssignmentStateDetecting). No need to evaluate]LOG]!><time="15:12:04.734+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11648" file="updatesassignment.cpp:839">
<![LOG[Assignment({1de18626-fecb-47a8-86ef-40fe1c979ae0}) already in progress state (AssignmentStateDetecting). No need to evaluate]LOG]!><time="15:12:04.744+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11648" file="updatesassignment.cpp:839">
<![LOG[Evaluation initiated for (0) assignments.]LOG]!><time="15:12:04.744+240" date="06-05-2013" component="UpdatesDeploymentAgent" context="" type="1" thread="11648" file="assignmentsmanager.cpp:1105">

In WCM.log:

Checking for supported version of WSUS (min WSUS 3.0 SP2 + KB2720211 + KB2734608)~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.056+240><thread=6732 (0x1A4C)>
Checking runtime v2.0.50727...~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.056+240><thread=6732 (0x1A4C)>
Did not find supported version of assembly Microsoft.UpdateServices.Administration.~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.057+240><thread=6732 (0x1A4C)>
Checking runtime v4.0.30319...~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.057+240><thread=6732 (0x1A4C)>
Found supported assembly Microsoft.UpdateServices.Administration version 4.0.0.0, file version 6.2.9200.16384~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.058+240><thread=6732 (0x1A4C)>
Found supported assembly Microsoft.UpdateServices.BaseApi version 4.0.0.0, file version 6.2.9200.16384~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.060+240><thread=6732 (0x1A4C)>
Supported WSUS version found~  $$<SMS_WSUS_CONFIGURATION_MANAGER><06-05-2013 15:01:16.060+240><thread=6732 (0x1A4C)>


MBAM 2.0 Integration With SCCM 2012 SP1.

$
0
0

html,body{padding:0;margin:0;font-family:Verdana,Geneva,sans-serif;background:#fff;}html{font-size:100%}body{font-size:.75em;line-height:1.5;padding-top:1px;margin-top:-1px;}h1{font-size:2em;margin:.67em 0}h2{font-size:1.5em}h3{font-size:1.16em}h4{font-size:1em}h5{font-size:.83em}h6{font-size:.7em}p{margin:0 0 1em;padding:0 .2em}.t-marker{display:none;}.t-paste-container{;left:-10000px;width:1px;height:1px;overflow:hidden}ul,ol{padding-left:2.5em}a{color:#00a}code, pre{font-size:1.23em}
Hi All,

I am planning to Integrate MBAM 2.0 with SCCM 2012 SP1.

One SCCM Primary Site Server with Reporting Services point enabled. I need to view MBAM Compliance, Audit and other BitLocker reports from SCCM reports.

Should I configure Single SSRS (Instance and Database) for Both SCCM and MBAM. Or only Modifying the SMS_def and Configuration MOF file will complete the integration of MBAM 2.0 with SCCM with having a separate instance and DB for SCCM and MBAM. Please provide the steps to proceed further

 


Rajkumar

Windows Updates Reboot

$
0
0

I have SCCM 2012 SP1,   I increased our restart on the client to 120 mins,  20 count down.     I see there is no postpone option.  My Workstation SUGs  ,  under User Experience,  I have  "system restart (if necessary),  & commit changes at deadline or during a maintence window (requires restarts)...   

I am unclear, how I configure it, so users don't get a reboot ,  during critical parts of the day, and not postpone the restart.

thank you.

WSUS location request results

$
0
0

I have an interesting issue with ISA2006 and WSUS on secondary site not letting clients to scan for updates properly.

My config is Primary site CEN with main WSUS and secondary site SEC with WSUS role installed. There were already some threads stating that CAPITAL letters in WSUS server's DNS suffix causing ISA not to pass requests even with "direct" configuration, please check these posts to understand what is going on in that case exactly: http://social.technet.microsoft.com/Forums/en-US/configmgrsum/thread/95aa4832-ab89-45fd-b444-9f68a0ee2e44 and http://social.technet.microsoft.com/Forums/en/configmgrsum/thread/0abd07d9-875a-4f0f-8d34-346fa66d2ca7 . The solution for ConfigMgr2007 cannot be applied as you can't change site server's FQDN after the install.

When you install the secondary by using low-case letters in FQDN you get the following situation:

In the table dbo.SysResList on CEN site ServerRemoteName for secondary site's roles are all lower-case.
In the table dbo.SysResList on SEC site ServerRemoteName for secondary site's roles are lower-case for DP,MP and SUS, but they are upper-case for other roles, including 'SMS Site System'.

As i know MP uses stored procedure called dbo.MP_GetWSUSServerLocations for feeding results on client's request. If you inspect its code (actually I tried to run it providing necessary parameters) - it uses such rules that finally give us address of 'SMS Site System' on which WSUS is located, and it seems to always be upper-case in secondary site's DB.

So if the client queries for WSUS location on secondary site he gets something like:

WSUS Path='http://SEC.DOMAIN.LOCAL:80', Server='SEC.DOMAIN.LOCAL', Version='8' LocationServices 5/4/2012 2:37:28 PM 2260 (0x08D4)
WSUS Path='http://cen.domain.local:8530', Server='CEN.DOMAIN.LOCAL', Version='8' LocationServices 5/4/2012 2:37:28 PM 2260 (0x08D4)

On the primary site:

WSUS Path='http://sec.domain.local:80', Server='SEC.DOMAIN.LOCAL', Version='8' LocationServices 5/4/2012 2:37:28 PM 2260 (0x08D4)
WSUS Path='http://cen.domain.local:8530', Server='CEN.DOMAIN.LOCAL', Version='8' LocationServices 5/4/2012 2:37:28 PM 2260 (0x08D4)

As all clients in my hierarchy are using their proxy MP's they get capital-lettered WSUS location, which causes problems with update scan (if i force them to get policy from central with small-letter address the scan immediately works).

Having such a situation I want to modify dbo.MP_GetWSUSServerLocations procedure and change a line
ENDAS WSUSURL,
to
ENDAS LOWER(WSUSURL),
so that I avoid upper-cases in URL's completely.

Can such a modification cause any potential problems in future somehow? Share your mind please.

sccm client inactive

$
0
0

hi Team, I have some issue for sccm 2012 client. thanks for advice!

I have a primary site server sccm1 and installed SUP/MP/DP role for sccm2, I pushed client to a collection with three servers. server-a shows the sccm server is sccm1 and it's status is active, but from the client itself I couldn't see the client at all. no ccm service at all. For the other 2 servers, they point to sccm2, which is what I want. They are all at DR site and they suppose to be managed by the DR's sccm server, server2. but the sccm client both shows inactive. I could see the ccm client appliet from the client. but when I tried to push software update this collection ,they failed receive any. status stopped at "unknown". any advice for troubleshooting? Many thanks!

KF


Thanks and best regards, -- KF

SCEP Definitions Always One Day Old

$
0
0

Greetings!

I'm having a problem where my SCEP definitions are updating...but they're always at least one day old.

As far as I can tell, I have everything set to run at least daily, and the clients do eventually get updated...just not the current definition.

For example, my client currently has 1.153.222.0 and per the Microsoft malware portal the latest is 1.153.258.0.  Also, when I look in the SCEP client it shows the correct policy, but says, "Policy Applied: 6/19/2013 at 9:40pm" which is last night.

Here are some of the pertinent settings:

EP Policy, Definition updates: Check for EP definitions at specific interval: 6 hrs, Check for EP definitions daily at: 6am, Sources: SCCM, WSUS, MS Update, MS Malware Center (in that order...)

ADR: General: Add to existing is selected, Software Updates: Product: ForeFront EP 2010, Superceded: No, Update Class: Definition Updates, Eval Schedule: Every 6 hrs starting @7:15am, Deployment Schedule: Specific time 1 hr (8:15am), Installation deadline: ASAP, User Exp: Deadline behavior Software Install is checked, Download Settings: Download from DP and install (both cases)

Deployment Package: Last refresh time: 6/20/2013 @7:16am, Show Members: There are 10, latest is 1.153.222.0

SUP syncs every 6hrs starting @3:15am

The ADR is configured to re-use the same deployment, and I see the "Date Created" on the DP is current.

I have GPO's, the only WSUS setting I'm pushing is:  Configure Automatic Updates: Disabled

(I've read numerous posts and books that have conflicting information on GPO's and WSUS, this was the nearest I could figure to keep the clients from hitting the Internet and not interfering with the SCCM client's local policies...correct me if I'm wrong on this setting.)

Checking the server, under All software updates and search for "endpoint protection" I see the current definition (1.153.258.0).  Which leads me to another thing I can't figure out.  Per numerous "how-to" posts, and multiple books, such as Agerlund's "SCCM Mastering the Fundamentals" if I perform the query as explained on page 226, "Date Released or Revised: Last 1 Month, Product: Forefront EP 2010, Update Classification: Definition Updates", I get nothing listed...but if I dump the "Date Released" criteria and add "Superceded: No"...the latest def shows up.  Also, if I change the date released criteria to "is greater than or equal to" and "Last 1 day"...the last four defs show up...this makes no sense to me.

As you have probably figured out, I'm new to this. I have searched many forums for answers but haven't figured this out, so if I've missed something obvious or posted this in the wrong forum, I apologize in advance...

Thank you in advance for your help, if you need any logs or anything that would help, please let me know.

Thanks,

-Rob 

Remove Superseded Causes Changes Deployment Status

$
0
0

So this has happened the past two months:

I have removed superseded patches from software update groups via searching for all method and unchecking the associated collections.  Shortly after doing so I notice that when monitoring the deployments that were previously at 95-100%, they drop to crazy numbers like 9% or 24% randomly.  The issue is that the majority of the systems show as "Unknown" status.  I have ran reports and all the systems properly show the have received the updates.  Its just this one area that "cosmetically" displays incorrectly.  After many days it will correct itself.  I have also removed the deployment and recreated it so which will quickly show the correct info.

I have narrowed it down to being involved the removal of the superseded because it has happened twice now.  So I am wondering if maybe either this is a known issue or maybe I need to do something differently.  I just don't like the shock of seeing my percentages take a dive.

thanks,
Jason

SCEP 2012 Quick Scan or Full Scan on a single system

$
0
0

Hi:

I have deployed SCEP 2012 along side the SCCM 2012 Client.  The deployments and antimalware updates are going well.  But I have discovered a problem ...

When I right click on a system with SCEP 2012 installed and click Endpoint Protection > Full Scan or Quick Scan nothing happens on the client and nothing appears in Monitoring > Deployments.

Where can I check the status or why this Full/Quick Scan is not happening on the system?

Thanks.

Mark


software updates available to install but not installing, deadlline passed

$
0
0

I have diployed windows updates via sccm 2007, client received that updates but after the deadline passed still they are not installed.

Ignore maintenance windows and install immediately at deadline selected but still nothing happing.

Regards

SCCM 2012 client server communication error

$
0
0

i have sccm 2012 installed, everything was working fine but suddenly one week ago all communications between server and clients stopped updates deployments stopped and also client now all apperas inactive. i had a 800 active client last week and suddenly that number decreased every day now i have only 2 active clients and 798 inactive clients. i check the network and everything fine.

PLZ i need help 

thanks

 

Sameh Ismail System Administrator

SCEP Viewing Real Time Scanning stats

$
0
0

With Symantec Endpoint Protection , I can view what is being scanned in real time. comes in handy for troubleshooting. Is this possible in SCEP. 

Thanks

Pat

SCEP SP1 questions

$
0
0

So I already have SCCM SP1 rolled out everywhere and I have just found out there is a SCEP SP1 which we dont have installed yet.

http://blogs.technet.com/b/configmgrteam/archive/2013/04/05/announcement-microsoft-anti-malware-platform-update.aspx

Is it only available as a windows update?

are there any server side changes?

is it applicable to an SCCM sp1 managed client? the above link seems to suggest its only applicable to standalone clients

My workstations are detecting it as applicable when I run windows update however my SCCM SP1 infrastructure servers are not is that weird?

Thanks

SCCM 2007 USMT 4.0 HardLink - Error

$
0
0

I'm getting the error while deploy while I'm deploying the windows 7 using the "HardLink" approach

Please advise what I missed in the procedure

Error :

* There are no more volumes available for use.
* The requested target could not be resolved to a valid volume on this computer. Check your task sequence to ensure this drive is correct and that it is being created
The parameter is incorrect. (Error: 80070057; Source: Windows)
*Failed to run the action: Apply Data Image 1.
Unspecified error (Error: 80004005; Source: Windows) TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
*Send a task execution status message SMS_TSExecution_ActionFailError TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)

More Error info:

Command line for extension .exe is "%1" %* TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Set command line: OSDApplyOS.exe /data:RIY002E6,%OSDDataImageIndex% TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Start executing the command line: OSDApplyOS.exe /data:RIY002E6,%OSDDataImageIndex% TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
!--------------------------------------------------------------------------------------------! TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Expand a string: WinPE TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Executing command line: OSDApplyOS.exe /data:RIY002E6,%OSDDataImageIndex% TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Command line for extension .exe is "%1" %* ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
Set command line: "OSDApplyOS.exe" /data:RIY002E6,1 ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
Searching for next available volume: ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
  Volume C:\ has already used. ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
  Volume D:\ is not a local hard drive. ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
  Volume X:\ is not a local hard drive. ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
it != volumes.end(), HRESULT=80004005 (e:\nts_sms_fre\sms\client\osdeployment\applyos\installcommon.cpp,513) ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
There are no more volumes available for use. ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
GetNextAvailableVolume(allowFAT, volume), HRESULT=80004005 (e:\nts_sms_fre\sms\client\osdeployment\applyos\installcommon.cpp,637) ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
The requested target could not be resolved to a valid volume on this computer. Check your task sequence to ensure this drive is correct and that it is being created
The parameter is incorrect. (Error: 80070057; Source: Windows) ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
ResolveTarget( g_Target, g_InstallType == InstallType_DataImage, targetVolume ), HRESULT=80004005 (e:\nts_sms_fre\sms\client\osdeployment\applyos\applyos.cpp,359) ApplyOperatingSystem 27/06/2013 3:45:10 PM 1696 (0x06A0)
Process completed with exit code 2147500037 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
!--------------------------------------------------------------------------------------------! TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Failed to run the action: Apply Data Image 1.
Unspecified error (Error: 80004005; Source: Windows) TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Sending status message . . . TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Send a task execution status message SMS_TSExecution_ActionFailError TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
MP server sccmpririy.shbca.shb.bank and port 80. SSL=false. CRL=false. TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Site code: RIY TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Client machine name: SCCMTEST005 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Client Identity: GUID:7363EDED-009C-4F77-AFE1-A565E52B96A7 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Advertisement ID: RIY208FA TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Package ID: RIY0031A TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Sending StatusMessage TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Formatted header: TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
<Msg SchemaVersion="1.1" ReplyCompression="zlib"><ID/><SourceID>9effd4ff-3da0-4760-a59d-a2a2a6f52b16</SourceID><SourceHost/><TargetAddress>mp:[http]MP_StatusManager</TargetAddress><ReplyTo>direct:OSD</ReplyTo><Priority>3</Priority><Timeout>3600</Timeout><SentTime>2013-06-27T12:45:10Z</SentTime><Protocol>http</Protocol><Body Type="ByteRange" Offset="0" Length="4066"/><Hooks/><Payload Type="inline"/><TargetHost/><TargetEndpoint>StatusReceiver</TargetEndpoint><ReplyMode>Sync</ReplyMode><CorrelationID/></Msg>
 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
CLibSMSMessageWinHttpTransport::Send: URL: sccmpririy.shbca.shb.bank:80  CCM_POST /ccm_system/request TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
The request has succeeded. 200 OK TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Set a global environment variable _SMSTSLastActionRetCode=-2147467259 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Clear local default environment TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Let the parent group (Install Operating System) decides whether to continue execution TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
The execution of the group (Install Operating System) has failed and the execution has been aborted. An action failed.
Operation aborted (Error: 80004004; Source: Windows) TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Failed to run the last action: Apply Data Image 1. Execution of task sequence failed.
Unspecified error (Error: 80004005; Source: Windows) TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Sending status message . . . TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Send a task execution status message SMS_TSExecution_TaskSequenceFailError TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
MP server sccmpririy.shbca.shb.bank and port 80. SSL=false. CRL=false. TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Site code: RIY TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Client machine name: SCCMTEST005 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Client Identity: GUID:7363EDED-009C-4F77-AFE1-A565E52B96A7 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Advertisement ID: RIY208FA TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Package ID: RIY0031A TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Sending StatusMessage TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Formatted header: TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
<Msg SchemaVersion="1.1" ReplyCompression="zlib"><ID/><SourceID>9effd4ff-3da0-4760-a59d-a2a2a6f52b16</SourceID><SourceHost/><TargetAddress>mp:[http]MP_StatusManager</TargetAddress><ReplyTo>direct:OSD</ReplyTo><Priority>3</Priority><Timeout>3600</Timeout><SentTime>2013-06-27T12:45:10Z</SentTime><Protocol>http</Protocol><Body Type="ByteRange" Offset="0" Length="2134"/><Hooks/><Payload Type="inline"/><TargetHost/><TargetEndpoint>StatusReceiver</TargetEndpoint><ReplyMode>Sync</ReplyMode><CorrelationID/></Msg>
 TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
CLibSMSMessageWinHttpTransport::Send: URL: sccmpririy.shbca.shb.bank:80  CCM_POST /ccm_system/request TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
The request has succeeded. 200 OK TSManager 27/06/2013 3:45:10 PM 1944 (0x0798)
Execution::enExecutionFail != m_eExecutionResult, HRESULT=80004005 (e:\nts_sms_fre\sms\client\tasksequence\tsmanager\tsmanager.cpp,767) TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Task Sequence Engine failed! Code: enExecutionFail TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
**************************************************************************** TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Task sequence execution failed with error code 80004005 TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Cleaning Up. Removing Authenticator TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Cleaning up task sequence folder TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
DeleteFileW(sVolumeIDFile.c_str()), HRESULT=80070002 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,508) TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Successfully unregistered Task Sequencing Environment COM Interface. TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Command line for extension .exe is "%1" %* TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Set command line: "X:\sms\bin\i386\TsProgressUI.exe" /Unregister TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Executing command line: "X:\sms\bin\i386\TsProgressUI.exe" /Unregister TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
==========[ TsProgressUI started in process 1620 ]========== TsProgressUI 27/06/2013 3:46:02 PM 1636 (0x0664)
Command line: "X:\sms\bin\i386\TsProgressUI.exe" /Unregister TsProgressUI 27/06/2013 3:46:02 PM 1636 (0x0664)
Unregistering COM classes TsProgressUI 27/06/2013 3:46:02 PM 1636 (0x0664)
Unregistering class objects TsProgressUI 27/06/2013 3:46:02 PM 1636 (0x0664)
Shutdown complete. TsProgressUI 27/06/2013 3:46:02 PM 1636 (0x0664)
Process completed with exit code 0 TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Successfully unregistered TS Progress UI. TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
g_TSManager.Run(), HRESULT=80004005 (e:\nts_sms_fre\sms\client\tasksequence\tsmanager\tsmanager.cpp,657) TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Error Task Sequence Manager failed to execute task sequence. Code 0x80004005 TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Sending error status message TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Sending StatusMessage TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Formatted header: TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
<Msg SchemaVersion="1.1" ReplyCompression="zlib"><ID/><SourceID>9effd4ff-3da0-4760-a59d-a2a2a6f52b16</SourceID><SourceHost/><TargetAddress>mp:[http]MP_StatusManager</TargetAddress><ReplyTo>direct:OSD</ReplyTo><Priority>3</Priority><Timeout>3600</Timeout><SentTime>2013-06-27T12:46:02Z</SentTime><Protocol>http</Protocol><Body Type="ByteRange" Offset="0" Length="1170"/><Hooks/><Payload Type="inline"/><TargetHost/><TargetEndpoint>StatusReceiver</TargetEndpoint><ReplyMode>Sync</ReplyMode><CorrelationID/></Msg>
 TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
CLibSMSMessageWinHttpTransport::Send: URL: sccmpririy.shbca.shb.bank:80  CCM_POST /ccm_system/request TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
The request has succeeded. 200 OK TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Finalize logging request ignored from process 1940 TSManager 27/06/2013 3:46:02 PM 1944 (0x0798)
Process completed with exit code 2147500037 TSPxe 27/06/2013 3:46:02 PM 1896 (0x0768)
Task Sequence Manager returned code 0x80004005 TSPxe 27/06/2013 3:46:02 PM 1896 (0x0768)
ThreadToResolveAndExecuteTaskSequence returned code 0x00000000 TSPxe 27/06/2013 3:46:02 PM 1308 (0x051C)
ResolveProgressPage::OnWizardNext() TSPxe 27/06/2013 3:46:02 PM 1308 (0x051C)
Activating Finish Page. TSPxe 27/06/2013 3:46:02 PM 1308 (0x051C)
Exiting with return code 0x00000000 TSPxe 27/06/2013 3:46:02 PM 1308 (0x051C)
Execution complete. TSBootShell 27/06/2013 3:46:02 PM 844 (0x034C)
Finalizing logging from process 820 TSBootShell 27/06/2013 3:46:02 PM 844 (0x034C)
Finalizing logs to root of first available drive TSBootShell 27/06/2013 3:46:02 PM 844 (0x034C)
Successfully finalized logs to C:\SMSTSLog TSBootShell 27/06/2013 3:46:02 PM 844 (0x034C)
Cleaning up task sequencing logging configuration. TSBootShell 27/06/2013 3:46:02 PM 844 (0x034C)

Schedule windows updates deployment and installation

$
0
0

Hi all,

We would like to deploy automatically Windows Updates to servers as following : 

- Group Server 1 => Deploy current month windows Updates ( Ex : April Bulletin ) 

- After 7 days, we want to deploy April Bulletin Updates to Group Server 2 

- After 1 month , we want to deploy April Bulletin Updates to Group Server 3 

You have to know that all server reboot automatically every week-end .

How we can do that with SCCM 2012 or other systems ? and we would like to have a full automatic process.

THe only process that we have to do manually is the decline updates.

Thanks for your help,

My SUP stopped working - IIS Settings Help

$
0
0

Hey Guys,

Recently my SCCM 2012 SUP broke, it stopped dishing out updates. I've nailed it down to IIS settings. I have zero errors in the SCCM logs but I am getting 404 errors in my IIS:

2013-06-19 18:21:27 xx.xx.xxx.xx PROPFIND /SMS_DP_SMSPKG$/6b8510bb-c4ee-4f27-8956-2a7bcb36e88a - 80 DOMAIN\WORKSTATION xx.xx.xxx.xx SMS+CCM+5.0 - 404 0 0 18

I cannot browse to say: http://localhost/SMS_DP_SMSPKG$/901989c5-6e12-432f-bcdd-d62c88b6912c
I just get a 404 error.

On the test client my updates are stuck at "Downloading (0% Complete)"

Anyone?

Edit: Pusing out applications and OSD work just fine.


sccm2012 software update and sites design issues

$
0
0

Customer has constraint on the database server and security for below proposal.
Hi Team, I am deploying sccm2012 to my customer and facing some issues of design, any advice please?

Customer requirement for patch management:
a. No database server in DR,DMZ1 and DMZ2 for SCCM server due to database compatibility and security issue.
b. Do not open port between SCCM client server to intranet site server and database server
c. DMZ1 sccm client server get patch from DMZ1 site server
d. DMZ2 sccm client server get patch from DMZ2 site server
e. DR sccm client server get patch from DR site server


I proposed the below to customer to fit customer environment, I hope to get your advice whether it workable:

1. Install one site server as Site01 in intranet with most roles (MP,DP,SUP,WSUS)
2. Deployed one site server in DR site with (MP,DP,SUP,WSUS)
3. Deployed one site server in DMZ1 site with (MP,DP,SUP,WSUS)
4. Deployed one site server in DMZ2 site with (MP,DP,SUP,WSUS)

For the DR sites, I have installed only sccm admin console,and full WSUS. configuring group policy for the client computers to get software update from the DR's site server. I am wondering if it works and how to verify if the patch can be downloaded from the DR site's DP/SUP instead of the primary site.

thanks for advice !!

KF


Thanks and best regards, -- KF

sccm2012 client not able to get the windows update

$
0
0
hi team, I have some issuea with sccm 2012 , please help. the primary sccm2012 server is in site A, I have some clients in site a and b. site B has a server for sccm too, I installed the MP/Dp/SUP role for the sccm2. single site code. sccm1 console shows the 3 test clients in site b , client-a is inactive status,client-b and client-c status both active. they are in test collection. I have wsus installed on sccm1 and trying to push windows update to this collection. but none of the 3 client are able to receive the patches. console shows the patches content delivered to the DP successfully. But in client \windows\ccmcache it's empty. the sccm1 console show client-a's  MP is sccm1, client b and c's MP is sccm2. it seems they change mp by themselves. the clients were pointing to a old wsus before and I have manually changed the registry on them to point to sccm1 or sccm2 but both not working. any advice please? Thanks!

Thanks and best regards, -- KF

No new updates but all servers in a pending status?

$
0
0

Checked my updates this morning and my deployment status lists all servers as "pending".  I checked my software update group and there does not seem to be any updates this week.  What could cause them all to be non compliant?

ScanAgent.log error "[FATAL ERROR] Invalid params exception was raised"

$
0
0

Hi,

I am seeing error in my ScanAgent.log file as mentioned in the subject line... No more details reported in the log except that..anyone seen the same error and knows the fix?

thanks,

PowerShell Script fails in Configuration Item

$
0
0

I am setting up a Configuration Item that checks the Screen Saver Timeout settings, and have cosen to use a Powershell script for Discovery and Remediation.  When I run the Configuration Baseline, the discovery script works correctly but the Remediation script fails.  When I run either script from the Powershell console, on a test computer, the Timeout value is read and set correctly.  The call to the "User32.dll" library for setting the screen saver value returns a value of 203 (ERROR_ENVVAR_NOT_FOUND).  I assume this is good as the MSDN states that a nonzero value indicates success, Zero indicates failure.  When the Remediation script is ran from the Configuration Item it returns a value of 0.

I have tried checking and unchecking the following properties but it fails no matter how they are set.

  • running the configuration item using the 32-bit scripting host on 64-bit devices
  • run scripts by using the logged on user credentials

The DcmWmiProvider log returns the following information:

ScriptProvider::ReadDiscoveryInformation - reading remediation script definition

ScriptProvider::ReadDiscoveryInformation - ScriptType: 0

ScriptProvider::PutInstanceAsync - Script Execution Returned : 1, Error Message:(null)

Failed to process CScriptProvider::PutInstanceAsync.

Application requirement evaluation or detection failed (Error: 87D00329; Source: CCM)

I am hoping someone can provide some ideas as to why the Remediation script would fail only when run from within a Configuration Item.

$signature = @"
[DllImport("user32.dll", SetLastError = true)]
public static extern bool SystemParametersInfo(int uAction, int uParam, ref int lpvParam, int flags );"@
$systemParamInfo = Add-Type -memberDefinition  $signature -Name ScreenSaver -passThru
Function Get-ScreenSaverTimeout
{
  [Int32]$value = 0
  $systemParamInfo::SystemParametersInfo(14, 0, [REF]$value, 0)
  $($value/60)
}
Function Set-ScreenSaverTimeout
{
  Param ([Int32]$value)
  $seconds = $value * 60 
  [Int32]$nullVar = 0
  $systemParamInfo::SystemParametersInfo(15, $seconds, [REF]$nullVar, 2)
  $F = [System.Runtime.InteropServices.Marshal]::GetLastWin32Error()
  write-eventlog -logname Application -source WSH -eventID 0 -entrytype Information -message ("User32.dll returned $F")  -category 0
} 
Set-ScreenSaverTimeout 10
write-eventlog -logname Application -source WSH -eventID 0 -entrytype Information -message ("error value is $error") -category 0
$TimeoutValue = Get-ScreenSaverTimeout | select -Last 1
write-eventlog -logname Application -source WSH -eventID 0 -entrytype Information -message ("Screen Saver Timeout value set to " +  $TimeoutValue)  -category 0
If (($TimeoutValue -gt 10) -or ( $TimeoutValue -eq 0))
   {
     write-eventlog -logname Application -source WSH -eventID 0 -entrytype Information -message ("Screen Saver Timeout value failed Remediation")  -category 0
     exit 1
   }
Else
   {
     write-eventlog -logname Application -source WSH -eventID 0 -entrytype Information -message ("Screen Saver Timeout value was Remediated")  -category 0
     exit 0
   }

Viewing all 6382 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>