Client deployment to a Win 7 workstation issue

I'm trying to client-push from the SCCM 2012 SP1 console to my computer that's on the domain. No firewall enabled and no anti-virus programs running. 

I think the client is getting installed, but just a little bit. It shows in my control panel on the client, but says "No" in the Console for the "Client installed" value. 

When I open the "Configuration Manager" applet on the client workstation from Control Panel, the only two options showing up under the "Actions" tab are

Machine Policy Retrieval & Evaluation Cycle
User Policy Retrieval & Evaluation Cycle
Those are the only actions that show, no matter how many times I reboot and how many days I wait. 

Does anyone have any suggestions for me on what to try next? I've tried deleting the folders, files, uninstalling, re-installing, etc., but the issue persists no matter what it seems. 

I believe this is the entire log in ccm.log during the client-push attempt to my system. There is one error, but nothing I can seem to reference to translate what it means. 

____________________________________________________________________

Execute query exec [sp_CP_GetNewPushMachines] N'PHX' SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152662, 1 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Execute query exec [sp_CP_GetPushRequestMachine] 2097152662 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Successfully retrieved information for machine DFW-LP-6FFSRM1 from DB SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Execute query exec [sp_CP_GetPushRequestMachineIP] 2097152662 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Execute query exec [sp_CP_GetPushRequestMachineResource] 2097152662 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Execute query exec [sp_CP_GetPushMachineName] 2097152662 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Received request: "2097152662" for machine name: "DFW-LP-6FFSRM1" on queue: "Incoming". SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Stored request "2097152662", machine name "DFW-LP-6FFSRM1", in queue "Processing". SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152662, 1 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:54 AM 3968 (0x0F80)
----- Started a new CCR processing thread. Thread ID is 0x5aa24. There are now 1 processing threads SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:56 AM 3968 (0x0F80)
Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:56 AM 3968 (0x0F80)
Getting a new request from queue "Incoming" after 100 millisecond delay. SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:56 AM 3968 (0x0F80)
Waiting for change in directory "D:\Microsoft Configuration Manager\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout). SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:56 AM 3968 (0x0F80)
======>Begin Processing request: "2097152662", machine name: "DFW-LP-6FFSRM1" SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:56 AM 371236 (0x5AA24)
Execute query exec [sp_IsMPAvailable] N'PHX' SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> Attempting to connect to administrative share '\\DFW-LP-6FFSRM1\admin$' using account 'serenity\svc_sccm' SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> The 'best-shot' account has now succeeded 12 times and failed 0 times. SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> Connected to administrative share on machine DFW-LP-6FFSRM1 using account 'serenity\svc_sccm' SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> Attempting to make IPC connection to share <\\DFW-LP-6FFSRM1\IPC$> SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> Searching for SMSClientInstall.* under '\\DFW-LP-6FFSRM1\admin$\' SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:57 AM 371236 (0x5AA24)
---> System OS version string "6.1.7601" converted to 6.10 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:59 AM 371236 (0x5AA24)
---> Mobile client on the target machine has the same version, and 'forced' flag is turned on. SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:59 AM 371236 (0x5AA24)
---> Creating \ VerifyingCopying exsistance of destination directory \\DFW-LP-6FFSRM1\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:17:59 AM 371236 (0x5AA24)
---> Copying client files to \\DFW-LP-6FFSRM1\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:02 AM 371236 (0x5AA24)
---> Copying file "D:\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "MobileClient.tcf" SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:02 AM 371236 (0x5AA24)
---> Copying file "D:\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "ccmsetup.exe" SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:06 AM 371236 (0x5AA24)
---> Created service "ccmsetup" on machine "DFW-LP-6FFSRM1". SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:09 AM 371236 (0x5AA24)
---> Started service "ccmsetup" on machine "DFW-LP-6FFSRM1". SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
---> Deleting SMS Client Install Lock File '\\DFW-LP-6FFSRM1\admin$\SMSClientInstall.PHX' SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
Execute query exec [sp_CP_SetLastErrorCode] 2097152662, 0 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
---> Completed request "2097152662", machine name "DFW-LP-6FFSRM1". SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
Deleted request "2097152662", machine name "DFW-LP-6FFSRM1" SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152662, 4 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
Execute query exec [sp_CP_SetLatest] 2097152662, N'01/22/2014 19:18:10', 15 SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)
<======End request: "2097152662", machine name: "DFW-LP-6FFSRM1". SMS_CLIENT_CONFIG_MANAGER 1/22/2014 11:18:10 AM 371236 (0x5AA24)

____________________________________________________________________


January 22nd, 2014 2:33pm

The red line in the screenshot is not an error. It's just highlighted in red because the line contains the word 'error'. The error code is set to "0" in that example.
Seems as if the client got installed so examine locationservices.log, clientlocation.log, ccmmessaging.log and clientidmanagerstartup.log
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 2:39pm

What command you ran to install the client? You need to supply the Sitecode and management point details..

Please check if that missed..

CCMSetup.exe /mp:SMSMP01 /logon SMSSITECODE=AUTO FSP=SMSFP01,

For more help

http://technet.microsoft.com/en-us/library/bb693546.aspx

January 22nd, 2014 2:45pm

What command you ran to install the client? You need to supply the Sitecode and management point details..

Please check if that missed..

CCMSetup.exe /mp:SMSMP01 /logon SMSSITECODE=AUTO FSP=SMSFP01,

For more help

http://technet.microsoft.com/en-us/library/bb69354

Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 3:08pm

Ok thanks, didn't know what to think of that red line. As for the log files (on my client, right?):

The other log files point to MP/server just fine and indicate no errors.

It's the log file clientidmanagerstartup.log that appears to be throwing a server-rejection error: 

[RegTask] - Server rejected registration request: 3       ClientIDManagerStartup        1/22/2014 2:37:37 PM       11840 (0x2E40) Sleeping for 282 seconds before refreshing location services. ClientIDManagerStartup        1/22/2014 2:37:54 PM       11840 (0x2E40) GetSystemEnclosureChassisInfo: IsFixed=TRUE, IsLaptop=TRUE        ClientIDManagerStartup     1/22/2014 2:42:37 PM       11840 (0x2E40) Computed HardwareID=2:6BDC2BB6196E001F7F24DA6A53DBD7D8449BCC53         Win32_SystemEnclosure.SerialNumber=6FFSRM1         Win32_SystemEnclosure.SMBIOSAssetTag=SER2083         Win32_BaseBoard.SerialNumber=/6FFSRM1/CN1296106S07D7/         Win32_BIOS.SerialNumber=6FFSRM1         Win32_NetworkAdapterConfiguration.MACAddress=<Not used on laptop>        ClientIDManagerStartup     1/22/2014 2:42:37 PM       11840 (0x2E40) [RegTask] - Client is not registered. Sending registration request for GUID:4563F344-9803-4093-A29B-2307549D4D8F ...   ClientIDManagerStartup     1/22/2014 2:42:37 PM    11840 (0x2E40) [RegTask] - Server rejected registration request: 3       ClientIDManagerStartup        1/22/2014 2:42:37 PM       11840 (0x2E40) Sleeping for 281 seconds before refreshing location services. ClientIDManagerStartup        1/22/2014 2:42:55 PM       11840 (0x2E40) GetSystemEnclosureChassisInfo: IsFixed=TRUE, IsLaptop=TRUE        ClientIDManagerStartup     1/22/2014 2:47:37 PM       11840 (0x2E40) Computed HardwareID=2:6BDC2BB6196E001F7F24DA6A53DBD7D8449BCC53         Win32_SystemEnclosure.SerialNumber=6FFSRM1         Win32_SystemEnclosure.SMBIOSAssetTag=SER2083         Win32_BaseBoard.SerialNumber=/6FFSRM1/CN1296106S07D7/         Win32_BIOS.SerialNumber=6FFSRM1         Win32_NetworkAdapterConfiguration.MACAddress=<Not used on laptop>        ClientIDManagerStartup     1/22/2014 2:47:37 PM       11840 (0x2E40) [RegTask] - Client is not registered. Sending registration request for GUID:4563F344-9803-4093-A29B-2307549D4D8F ...   ClientIDManagerStartup     1/22/2014 2:47:37 PM    11840 (0x2E40) [RegTask] - Server rejected registration request: 3       ClientIDManagerStartup        1/22/2014 2:47:37 PM       11840 (0x2E40) Sleeping for 280 seconds before refreshing location services. ClientIDManagerStartup        1/22/2014 2:47:56 PM       11840 (0x2E40)


January 22nd, 2014 3:57pm

Can you check ccmsetup.log and notify us if you find any error ?
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 3:57pm

is the problem with all computers or only few computers ?
January 22nd, 2014 4:00pm

Is the resource corresponding to the system in the console approved?
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 4:03pm

Also, would the SMS certificate expiration date being different end date on the server than on my client be causing the issue?

SMS Certificate on the console server is 7/22/2112 

SMS Certificate on my workstation is 9/21/2113.

January 22nd, 2014 4:22pm

Those are local certs and have no relationship to each other. As long as they are valid, then they're fine.
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 5:13pm

Well in MP_RegistrationManager.log I'm showing some yellow notifications.

MP Reg: Client in-band certificate is not valid due to failures in certificate chain validation, Raising status event. Failure HR = 0x800b010a, In-band Cert SubjectName = DFW-LP-6FFSRM1 MP_RegistrationManager 1/22/2014 2:15:41 PM 374636 (0x5B76C)

Raising event:
[SMS_CodePage(437), SMS_LocaleID(1033)]
instance of MpEvent_CertInvalidChain
{
ClientID = "GUID:61CBB7A7-C28B-43BD-8F71-299C78834CFA";
DateTime = "20140122221541.130000+000";
MachineName = "MP.domainname.com";
ProcessID = 2168;
SiteCode = "PHX";
SubjectName = "DFW-LP-6FFSRM1";
ThreadID = 374636;
Win32ErrorCode = 2148204810;
};
MP_RegistrationManager 1/22/2014 2:15:41 PM 374636 (0x5B76C)

MP Reg: Registration request body is invalid. MP_RegistrationManager 1/22/2014 2:15:41 PM 374636 (0x5B76C)

MP Reg: Registration failed. MP_RegistrationManager 1/22/2014 2:15:41 PM 374636 (0x5B76C)


January 22nd, 2014 5:33pm

How about answering my question above: "Is the resource corresponding to the system in the console approved?"

Is your MP set to use HTTPS communication? If so, have you issued the proper PKI certs (to the Mp and the clients)?

Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 5:49pm

The Site Settings Properties is set to Automatically approve computers in trusted domains

The Client Computer Communication settings are:

HTTPS or HTTP

Checked: Use PKI client certificate when available"

Checked: Clients check the certificate revocation list (CRL) for site systems. 

January 22nd, 2014 5:57pm

That's for the site, not the MP.

Do you actually have the required PKI certs deployed? If not, why select the "Use PKI" option?Also, just because you have the auto-approve setting enabled doesn't mean the resource is actually approved.

Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 6:00pm

The Management Point component role is on the same server. Same hostname. 

I don't know much about the PKI certs. Some other company deployed this product and I'm just trying to get to a point where I can deploy Windows Updates. 

I've already done so successfully with a dozen other 3rd party programs with no challenges. Unfortunately I'm having to explore the features and options with SCCM and it seems to be taking way too long and is too complicated by today's standards, imho. 

January 22nd, 2014 6:05pm

And MP client connection is set to HTTP 
Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 6:26pm

For Site Settings, I unchecked "Use PKI client certificate" in Client Computer Settings, and unchecked "Clients check the certificate revocation list (CRL) for site systems". 

After that, it appears the MP Reg says the DDR was written.

However, a minute later I'm getting these two messages now:

Encountered database error while verifying headers for client 'GUID:4563F344-9803-4093-A29B-2307549D4D8F' (0x87d00238).    MP_RegistrationManager            1/22/2014 3:31:01 PM     4716 (0x126C)

CCMValidateAuthHeaders failed (0x87d00238) to validate headers for client 'GUID:4563F344-9803-4093-A29B-2307549D4D8F'.                MP_RegistrationManager            1/22/2014 3:31:01 PM     4716 (0x126C)

Authenticator is expired.             MP_RegistrationManager            1/22/2014 3:32:05 PM     4716 (0x126C)

CCMValidateAuthHeaders failed (0x87d0029b) to validate headers for client 'GUID:F6A321C8-83BE-41F1-A332-D909D43D676A'.               MP_RegistrationManager            1/22/2014 3:32:05 PM     4716 (0x126C)

However, my Configuration Manager client on my workstations does now have all the options like Actions. 

  • Edited by JGQ85 12 hours 48 minutes ago
January 22nd, 2014 6:36pm

Found the client based on GUID and am not sure what to look for, I guess I'll open a different thread for that. Marking answer regarding certs as solution since that's what helped. 

Still not sure I want to continue using this product though! heh. 

Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 7:07pm

For Site Settings, I unchecked "Use PKI client certificate" in Client Computer Settings, and unchecked "Clients check the certificate revocation list (CRL) for site systems". 

After that, it appears the MP Reg says the DDR was written.

However, a minute later I'm getting these two messages now:

Encountered database error while verifying headers for client 'GUID:4563F344-9803-4093-A29B-2307549D4D8F' (0x87d00238).    MP_RegistrationManager            1/22/2014 3:31:01 PM     4716 (0x126C)

CCMValidateAuthHeaders failed (0x87d00238) to validate headers for client 'GUID:4563F344-9803-4093-A29B-2307549D4D8F'.                MP_RegistrationManager            1/22/2014 3:31:01 PM     4716 (0x126C)

Authenticator is expired.             MP_RegistrationManager            1/22/2014 3:32:05 PM     4716 (0x126C)

CCMValidateAuthHeaders failed (0x87d0029b) to validate headers for client 'GUID:F6A321C8-83BE-41F1-A332-D909D43D676A'.               MP_RegistrationManager            1/22/2014 3:32:05 PM     4716 (0x126C)

However, my Configuration Manager client on my workstations does now have all the options like Actions. 

  • Edited by JGQ85 Wednesday, January 22, 2014 11:34 PM
January 23rd, 2014 2:33am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics