Machine changing sites by themselves!!!
Hello,
I have a lot of machines (1,000+ for now) which were on Site A last month (July) and are reporting now on Site B 08/30/2015.
Their IPs are not in the boundaries of site B.
Their OUs are not in the Active Directory System Discoveries Method on Site B...
Any clue on this?
1. If a machine got the client installed by Site A...
2. the setup is run without parameter again pointing to Site B...
Do the machines skip the boundary check on Site B? Could the machine change sites without boundary, OU checks?
Thanks,
Dom
August 31st, 2015 7:58pm
That is not possible, someone or something force them to change sites.
August 31st, 2015 8:10pm
Concur with Garth. Client agents never ever change sites on their own.
Have you verified that there is no GPO in place doing this?
August 31st, 2015 11:53pm
Checking the GPOs and also I found out one added boundary was set
IP Address range
10.2.233.110 20.2.233.110
This might one cause but definitely I am checking the GPOs as well...
Thanks,
DOm
September 1st, 2015 9:21am
the GPO for desktops is set to DTS and for Server to SRV these GPOs looks okay..
but locally on the desktops I have the registry (Microsoft > SMS) set to DTS and the GUI (Control Panel > Confuguration 32-bits set to SRV)
Strange
Thanks,
September 1st, 2015 4:21pm
I have no idea why you are looking at the registry, but cm07 using wmi for this type of information.
September 1st, 2015 5:40pm
Hello,
Any clue where to start as they are still coming back again even after uninstalling the agent and installing them manually to be sure they were on the sit code DTS they are showing again on SRV!!
Any trace of the installation? Does the ccmsetup will help? I do not see much in it...
Thanks,
Dom
September 2nd, 2015 1:04pm
Look for overlapping boundaries.
Check to see if your site server has auto client push enabled.
September 2nd, 2015 1:16pm
If the site code is tattoo in the registry, a client uninstall or reinstall will *not* get rid of it. You need to delete it from the registry similar to what Nick describes at
https://t3chn1ck.wordpress.com/2012/10/05/configmgr-client-gpo-assignment-removal/
September 2nd, 2015 1:51pm
Hello,
I might have got something:
in the ccmsetup I am getting this:
==========[ ccmsetup started in process 2908 ]========== ccmsetup 8/4/2015 11:27:39 AM 2912 (0x0B60)
Version: 4.0.6487.2000
GetAdaptersAddressess entry point is supported.
DhcpGetOriginalSubnetMask entry point is supported.
Adapter {118196C6-DFC3-4CBB-A709-6E19060ACDD1} is DHCP enabled. Checking quarantine status.
Adapter {CCD0C557-1AA9-455A-927F-806317742FD0} is DHCP enabled. Checking quarantine status.
Current AD site of machine is RRH
Attempting to query AD for assigned site code
Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=174742319)(MSSMSRangedIPHigh>=174742319))))
Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.106.80.0)(mSSMSRoamingBoundaries=RRH)(mSSMSSiteCode=SRV)))
LSGetAssignedSiteFromAD : Trying to Assign to the Site <SRV>
The MP name retrieved is 'configmgrsrv.ad' with version '6487l' and capabilities '<Capabilities SchemaVersion="1.0">
</Capabilities>'
Retrieving client operational settings from AD.
ClientOperationalSettings search filter is '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=SRV))'
Command line: "C:\windows\CCMSetup\ccmsetup.exe"
CCMHTTPPORT: 80
CCMHTTPSPORT: 443
CCMHTTPSSTATE: 0
CCMHTTPSCERTNAME:
FSP:
CCMFIRSTCERT: 0
the SMSSITECODE is incorrect:
Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.106.80.0)(mSSMSRoamingBoundaries=RRH)(mSSMSSiteCode=SRV)))
Any idea where it is coming from as the GPO is set to DTS but something is overwriting it apparently!!
Even some CCMSetup shows:
This client might be within the boundaries of more than one site - AD SiteCode search matched 2 entries ccmsetup 7/31/2015 4:51:40 PM 384 (0x0180)
Thanks,
September 3rd, 2015 1:56pm
Hello,
Trying to list the sms links in the Active Directory Schema which are actives. Apparently some of them have changed recently creating issues...
What will be the command to list those classes, sites, etc...
Thanks,
Dom
September 6th, 2015 3:44pm
Hello,
After more investigation there was a schema upgrade by the Active Directory team recently...
Are we supposed to loose or change schema extension during an upgrade?
Thanks,
Dom
September 9th, 2015 12:02pm
There is no schema change between CM07 and CM12.
However make sure that you (MC12/CM07 servers) have full rights to the
System Management container.
September 9th, 2015 12:09pm
Schema changes in AD cannot be undone in any way without reverting your entire directory (which is very difficult to do). The most you can do is disable them, but this is something that must be manually done.
If however you are talking about the Systems Management container (which has *nothing* to do with the schema), then Garth's reply is spot on.
September 9th, 2015 12:14pm
let me rephrase my question:
Does an Active Directory Schema change will impact the CM07 schema extension?
These are the two changes made recently:
Extend Exchange schema with Exchange 2013 CU9 attribute to allow introduction of Active Directory Federation Services (ADFS) and Office 365
Extend AD schema with Windows 2012 R2 attribute to allow introduction of Active Directory Federation Services (ADFS) and Office 365
Still in progress...
Thanks,
Dom
September 9th, 2015 12:59pm
Same answer, they cannot be undone or changed in any way (expect a manual disable as mentioned).
This would have absolutely nothing to do with clients being (re-)assigned to a new site however. The info stored in AD by ConfigMgr is simply service lookup data. "Something" *must* initiate a client site assignment. Initial client install is the
only time a client will ever change its own site code.
September 9th, 2015 1:19pm
Hello,
So it could be only the GPO which is launching a CCMSETUP but as there was is a parameter for the sitecode DTS in the command line within the GPO how the CCMSETUP.log is getting the following information?
Double GPO? checking for this?
...
Current AD site of machine is RRH
Attempting to query AD for assigned site code
Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=174742319)(MSSMSRangedIPHigh>=174742319))))
Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.106.80.0)(mSSMSRoamingBoundaries=RRH)(mSSMSSiteCode=SRV)))
LSGetAssignedSiteFromAD :
Trying to Assign to the Site
<SRV>
....
Thanks,
Dom
September 9th, 2015 1:36pm
It could be other things also, just not anything automatically initiated by the client itself.
Other possibilities include (this list is not exhaustive):
- A startup script
- Client push (automatic or manual)
- Script (run via a variety of methods including psexec, PowerShell Remoting, ConfigMgr itself, etc.)
September 9th, 2015 1:58pm
It may be irrelevant or stupid i just think on the client side only instead of boundary overlap and AD , Is the client get repaired or something by a manual action by someone to a collection or something triggering the client site re-assignment like right
click tools and which may trigger the client site reassignment ?
Because when everything was OK month back and if there isn't any change on the site or AD.
September 9th, 2015 5:28pm
Still checking...
September 14th, 2015 10:16am
some of these clients have been repaired ... but apparently they are all in the same site ... common subnet, !!!
September 14th, 2015 10:17am