I am configuring a new primary site and migrating clients from another sccm environment. I am able to get clients to install, but all clients are "Not Approved" including the client on the site server itself. Site is mixed mode, with Automatically approve computers in trusted domains selected. Checkbox for "This site contains only ConfigMgr 2007 clients" is unchecked. There is an intranet FQDN specified for the management point system. Clients are able to communicate with the management point, I don't see any obvious errors in the logs, although possibly I am not looking in the right ones. I see many 5447 messages in the MP_Control_Manager status, but I believe this is the result of the unapproved clients, rather than the cause. Any ideas for why this might be happening or what else I should check?

This should help to start troubleshooting: http://blogs.technet.com/b/configurationmgr/archive/2010/01/20/how-it-works-automatic-client-approval-in-configuration-manager-2007.aspxTorsten Meringer | http://www.mssccmfaq.de

Thanks, Torsten. I had actually already read that posting. I don't think it could be a duplicate GUID issue because it is every client, not just a subset. There is no HTTP SPN registered for my management point server, so that seems ok. All of my clients are in the same forest, so not an external trust issue. I turned up kerberos logging on my server, I see a first a KDC_ERR_PREAUTH_REQUIRED event, followedd by a DCOM event ID 10009 for the client computer, then a KDC_ERR_BADOPTION event for the SCCM server.

Hi, Please see the following blog to check if it helps: Troubleshooting issues where clients are not reporting Regards, Sabrina This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.