Deployment of Configuration Baseline fails with Error 0x87D00329

Hello

We are a hosting company and we are using sccm 2012.
Yesterday we replaced an old application from a customer with a new one.

For that, we deployed the new software and tried to remove the old one with a configuration baseline + remedy script.

The detection script does nothing else than a simple test-path in powershell.
test-path -Path "C:\Program Files (x86)\..."
If test-path returns false it is compliant (boolean).

The remedy script forces the deletion of that folder.
Remove-Item "C:\Program Files (x86)\..." -Recurse -Force

I tried to deploy the Baseline and executed the script manually and both worked perfectly fine at my testcomputer (same domain as the SCCM server), but it fails at the customer computers with the error 0x87D00329. Application requirement evaluation or detection failed, Error Category: Discovery.

In my customers active directory, only signed powershell scripts are allowed. The powershellscripts are signed and they work perfecly fine if I execute them manually on the computers.

How does the deployment of these scripts exactly work? 
I'm able to import a script, but i seem to import the sourcecode but not the file itself. might it be, that the signature doesn't work properly?

I've read about interactive commands, but i assume, that test-path and remove-item work interactively, so this should not be the cause.

In the Logs DCAgent i could not find much.

Thanks for your help

September 4th, 2015 2:52am

what does DCMReporting.log says..

You may please Check this as well:

http://blogs.msdn.com/b/fei_xias_blog/archive/2013/10/21/system-center-2012-configmgr-using-vbs-to-extend-the-dcm-script-execution-timeout-value.aspx

Free Windows Admin Tool Kit Click here and download it now
September 4th, 2015 6:18am

Hi,

Please try to run the scripts under system account.

You could also check CIAgent.log and DCMAgent.log on the client.

September 7th, 2015 3:05am

Hello Raman

Thanks for your advice, I've done this modification and I'm still waiting for the results.
I deployed the Baseline to another Collection, where the specified Programm is not installed, I have 66 times Appliaction requirement evaluation or detection failed and 1 Success. This means it might be something like this timeout value.

Free Windows Admin Tool Kit Click here and download it now
September 8th, 2015 3:52am

Hello Joyce

It's difficult for me to catch a Testsystem, because I'm not at the same location as the customer.
But i assume test-path and remove-item should work fine if you run the scripts as system.

At the Logs i have no idea what i should look for.
For both logs (CIAgent and DCMAgent) is one name.log and one with name-date.log, which one should i look at? and what are the keyword i have to look for?

Thanks for your answer.

September 8th, 2015 3:58am

Hello,

You may need to check all of them as we don't know which one records the related information.

Free Windows Admin Tool Kit Click here and download it now
September 8th, 2015 5:48am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics