I am trying to distribute the sccm client to computers in my secondary sites. Using WSUS the installation files are always pulled from the primary MP, which is bad, using client push it works correctly from the secondary MP. why? Using WSUS: I have published the client via “Software Update Point Client Installation” on the primary site server to WSUS. I have not published them to the secondary site WSUS servers, as this is not necessary according to documentation. The client receives the update through wsus, starts the installation, but downloads the installation files from the primary site management point (through WAN) instead of the onsite (secondary) management point (through LAN). Also, it does not see the status fallback point according to the log. <![LOG[==========[ ccmsetup started in process 4252 ]==========]LOG]!><time="14:15:10.216+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:9010"> <![LOG[Version: 4.0.6487.2000]LOG]!><time="14:15:10.217+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:2068"> <![LOG[GetAdaptersAddressess entry point is supported.]LOG]!><time="14:15:10.217+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="ccmiputil.cpp:118"> <![LOG[DhcpGetOriginalSubnetMask entry point is supported.]LOG]!><time="14:15:10.224+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="ccmiputil.cpp:181"> <![LOG[Adapter {BEB4A6C4-3E35-4BD3-87AE-61F6B734C9E1} is DHCP enabled. Checking quarantine status.]LOG]!><time="14:15:10.225+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="ccmiputil.cpp:509"> <![LOG[Current AD site of machine is HUDU]LOG]!><time="14:15:10.336+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="lsad.cpp:457"> <![LOG[Attempting to query AD for assigned site code]LOG]!><time="14:15:10.336+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="lsad.cpp:1766"> <![LOG[Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=172101392)(MSSMSRangedIPHigh>=172101392))))]LOG]!><time="14:15:10.507+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="lsad.cpp:1801"> <![LOG[Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.66.15.0)(mSSMSRoamingBoundaries=HUDU)))]LOG]!><time="14:15:10.523+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="lsad.cpp:1862"> <![LOG[LSGetAssignedSiteFromAD : Trying to Assign to the Site <EGL>]LOG]!><time="14:15:10.659+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="lsad.cpp:1922"> <![LOG[The MP name retrieved is 'PRIMARY.MYDOMAIN.COM' with version '6487l' and capabilities '<Capabilities SchemaVersion="1.0"> </Capabilities>']LOG]!><time="14:15:10.694+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="lsad.cpp:2869"> <![LOG[Retrieving client operational settings from AD.]LOG]!><time="14:15:10.695+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="lsad.cpp:4931"> <![LOG[ClientOperationalSettings search filter is '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=EGL))']LOG]!><time="14:15:10.698+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="lsad.cpp:4673"> <![LOG[Command line: "C:\Windows\SoftwareDistribution\Download\Install\ccmsetup.exe" ]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4102"> <![LOG[CCMHTTPPORT: 80]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:8008"> <![LOG[CCMHTTPSPORT: 443]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:8023"> <![LOG[CCMHTTPSSTATE: 0]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:8041"> <![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:8069"> <![LOG[FSP: ]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:8084"> <![LOG[CCMFIRSTCERT: 0]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:8126"> <![LOG[Config file: ]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4497"> <![LOG[Retry time: 10 minute(s)]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4498"> <![LOG[MSI log file: ]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4499"> <![LOG[MSI properties: SMSSITECODE=AUTO CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0" CCMFIRSTCERT="0"]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4500"> <![LOG[Source List:]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4508"> <![LOG[MPs:]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4527"> <![LOG[ PRIMARY.MYDOMAIN.COM]LOG]!><time="14:15:10.700+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:4542"> <![LOG[Updated security on object C:\Windows\ccmsetup\.]LOG]!><time="14:15:10.701+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="4108" file="ccmsetup.cpp:8849"> <![LOG[A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.]LOG]!><time="14:15:10.701+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="4108" file="ccmsetup.cpp:9330"> When I check the list of management points on a client in the secondary site with this url: http://secondary/sms_mp/.sms_aut?mplist I see a list of all management points in my environment, the secondary site included: - <MP Name="SECONDARY" FQDN="SECONDARY.mydomain.com"> <Version>6487</Version> <Capabilities SchemaVersion="1.0" /> </MP> Using Client Push Parameters in client push configuration on secondary site: SMSSITECODE=EGL RESETKEYINFORMATION=TRUE Using client push installation upon active directory system discovery the correct management point is retrieved and the client installs from the secondary site management point –also the FSP is correctly discovered. <![LOG[==========[ ccmsetup started in process 3500 ]==========]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:9010"> <![LOG[Version: 4.0.6487.2000]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:2068"> <![LOG[Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4093"> <![LOG[Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4102"> <![LOG[CCMHTTPPORT: 80]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:8008"> <![LOG[CCMHTTPSPORT: 443]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:8023"> <![LOG[CCMHTTPSSTATE: 0]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:8041"> <![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:8069"> <![LOG[FSP: SECONDARY.MYDOMAIN.COM]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:8084"> <![LOG[CCMFIRSTCERT: 0]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:8126"> <![LOG[Config file: C:\Windows\ccmsetup\MobileClient.tcf]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4497"> <![LOG[Retry time: 10 minute(s)]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4498"> <![LOG[MSI log file: ]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4499"> <![LOG[MSI properties: INSTALL="ALL" SMSSITECODE="EGL" RESETKEYINFORMATION="TRUE" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="0" FSP="SECONDARY.mydomain.com" CCMFIRSTCERT="0"]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4500"> <![LOG[Source List:]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4508"> <![LOG[ \\SECONDARY.mydomain.com\SMSClient]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4515"> <![LOG[ \\SECONDARY\SMSClient]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4524"> <![LOG[MPs:]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4527"> <![LOG[ SECONDARY.mydomain.com]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:4542"> <![LOG[Updated security on object C:\Windows\ccmsetup\.]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="0" thread="988" file="ccmsetup.cpp:8849"> <![LOG[Sending Fallback Status Point message, STATEID='100'.]LOG]!><time="14:27:31.808+-120" date="07-29-2010" component="ccmsetup" context="" type="1" thread="988" file="ccmsetup.cpp:9326"> now the question: i am under the impression that both installation methods utilize the active directory to find the onsite management point and then install from there. in case of the WSUS installation this does not seem to be true, or i have incorrectly configured something. what can i do to make it work correctly through wsus?

When you use client push it will pull from the MP at the site where the push was initiated. I've never actually like that but that's how it works. So I am assuming you had enabled client push at the secondary site and that's why it was using that MP. I've never used WSUS install method so I can't help you with how that one finds a MP. Sorry. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

yes, i have enabled client push on all my secondary sites, and the sccm client installs automatically when a computer is discovered by AD System Discovery in one of the secondary sites. When this happens, the installation files get pulled from the secondary MP which is exactly what i want and how it should be - nothing wrong with that. ... now i need that to work through the WSUS push too.

This is a good question and one I've never seen before. I assume since wsus is likely running at the primary site that's sorta like running client push from the primary site in where the files are downloaded from the primary site. I'd like to see a reply from someone who has tested this as I personally have not done WSUS installs. I'm totally guessing that if you added SUP to the secondary sites and did SUP installations you'd get the results you seek. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

each of my secondary sites has a software update point (on the same server as the secondary site server) as they are all in different countries connected through a WAN. my clients update correctly from their site WSUS servers (this is defined through a GPO). it's just the SCCM client installation that always downloads from the primary :(

So you followed the steps here to setup for WSUS/SUP client push and it not working. http://technet.microsoft.com/en-us/library/bb633194.aspx I haven't done it vis SUP as I want more control over the push but from what I read I see this as your problem "This server must be the active software update point in a primary site. For more information..." I assume when they say primary site they mean you can't push the client from a secondary. But the instruction state that as long as you set the GPO for your settings then it should be pushed from your SUP. So that should be the secondary. http://www.sccm-tools.com http://sms-hints-tricks.blogspot.com

Actually the docs around what SUP needs to be active are confusing. I have never been able to find a reason you would want any SUP to not be active. Clients will not use a SUP that is not active therefore IMO all SUP's should be marked as active. I also do not use SUP's at secondary site though. Tried it and it caused too many headaches and sleepless nights. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

all my secondary SUP are set to "active software update point on site server" as there is a WSUS installed on each secondary site server. [quote]I also do not use SUP's at secondary site though. Tried it and it caused too many headaches and sleepless nights[/quote] this i do not understand. if i do not install a WSUS in each of my secondary sites, how would i have the computers in these sites update correctly? i definitely do not want them to update from the primary WSUS in the primary site. its really confusing, the clients in the secondary sites correctly get software packages and WSUS updates from their secondary site servers. only the SCCM client installation itself behaves differently. could this be a bug? or a missing "feature" ?

The SUP/WSUS is only used for scanning. The actual installation (downloading the binaries) is taken from DPs.

As Torsten said the amount of data coming from WSUS is small, the actual packages come from your DP's. I was servicing about 15,000 clients in 200 locations spread over 20 countries from 4 SUP's which worked well until Forefront got thrown into the mix. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

Back to your original question... I would think that the client install files should come from the local secondary site in your scenario. If you can't get help here it's sadly because not to many of us are using that install method so I would have to say your next best bet is to call CSS. John Marcum | http://myitforum.com/cs2/blogs/jmarcum |