Machine changing sites by themselves!!!

Hello,

I have a lot of machines (1,000+ for now) which were on Site A last month (July) and are reporting now on Site B 08/30/2015.

Their IPs are not in the boundaries of site B.

Their OUs are not in the Active Directory System Discoveries Method on Site B...

Any clue on this?

1. If a machine got the client installed by Site A...

2. the setup is run without parameter again pointing to Site B...

Do the machines skip the boundary check on Site B? Could the machine change sites without boundary, OU checks?

Thanks,
Dom 

August 31st, 2015 7:58pm

That is not possible, someone or something force them to change sites.
Free Windows Admin Tool Kit Click here and download it now
August 31st, 2015 8:10pm

Concur with Garth. Client agents never ever change sites on their own.

Have you verified that there is no GPO in place doing this?

August 31st, 2015 11:53pm

Checking the GPOs and also I found out one added boundary was set

IP Address range

10.2.233.110 20.2.233.110

This might one cause but definitely I am checking the GPOs as well...

Thanks,

DOm

Free Windows Admin Tool Kit Click here and download it now
September 1st, 2015 9:21am

the GPO for desktops is set to DTS and for Server to SRV these GPOs looks okay..

but locally on the desktops I have the registry (Microsoft > SMS) set to DTS and the GUI (Control Panel > Confuguration 32-bits set to SRV)

Strange

Thanks,

September 1st, 2015 4:21pm

I have no idea why you are looking at the registry, but cm07 using wmi for this type of information.
Free Windows Admin Tool Kit Click here and download it now
September 1st, 2015 5:40pm

Hello,

Any clue where to start as they are still coming back again even after uninstalling the agent and installing them manually to  be sure they were on the sit code DTS they are showing again on SRV!!

Any trace of the installation? Does the ccmsetup will help? I do not see much in it...

Thanks,

Dom

September 2nd, 2015 1:04pm

Look for overlapping boundaries.

Check to see if your site server has auto client push enabled.

Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2015 1:16pm

If the site code is tattoo in the registry, a client uninstall or reinstall will *not* get rid of it. You need to delete it from the registry similar to what Nick describes at

https://t3chn1ck.wordpress.com/2012/10/05/configmgr-client-gpo-assignment-removal/

September 2nd, 2015 1:51pm

Hello,

I might have got something:

in the ccmsetup I am getting this:

==========[ ccmsetup started in process 2908 ]==========	ccmsetup	8/4/2015 11:27:39 AM	2912 (0x0B60)
Version: 4.0.6487.2000	
GetAdaptersAddressess entry point is supported.	
DhcpGetOriginalSubnetMask entry point is supported.	
Adapter {118196C6-DFC3-4CBB-A709-6E19060ACDD1} is DHCP enabled. Checking quarantine status.	
Adapter {CCD0C557-1AA9-455A-927F-806317742FD0} is DHCP enabled. Checking quarantine status.	
Current AD site of machine is RRH	
Attempting to query AD for assigned site code	
Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=174742319)(MSSMSRangedIPHigh>=174742319))))	
Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.106.80.0)(mSSMSRoamingBoundaries=RRH)(mSSMSSiteCode=SRV)))	
LSGetAssignedSiteFromAD : Trying to Assign to the Site <SRV>	
The MP name retrieved is 'configmgrsrv.ad' with version '6487l' and capabilities '<Capabilities SchemaVersion="1.0">
</Capabilities>'	
Retrieving client operational settings from AD.	
ClientOperationalSettings search filter is '(&(ObjectCategory=mSSMSManagementPoint)(mSSMSDefaultMP=TRUE)(mSSMSSiteCode=SRV))'	
Command line: "C:\windows\CCMSetup\ccmsetup.exe"	
CCMHTTPPORT:    80	
CCMHTTPSPORT:    443	
CCMHTTPSSTATE:    0	
CCMHTTPSCERTNAME:    	
FSP:    	
CCMFIRSTCERT:    0	

the SMSSITECODE is incorrect:

Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.106.80.0)(mSSMSRoamingBoundaries=RRH)(mSSMSSiteCode=SRV)))

Any idea where it is coming from as the GPO is set to DTS but something is overwriting it apparently!!

Even some CCMSetup shows:

This client might be within the boundaries of more than one site - AD SiteCode search matched 2 entries ccmsetup 7/31/2015 4:51:40 PM 384 (0x0180)

Thanks,

Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2015 1:56pm

Hello,

Trying to list the sms links in the Active Directory Schema which are actives. Apparently some of them have changed recently creating issues...

What will be the command to list those classes, sites, etc...

Thanks,

Dom

September 6th, 2015 3:44pm

Hello,

After more investigation there was a schema upgrade by the Active Directory team recently...

Are we supposed to loose or change schema extension during an upgrade?

Thanks,

Dom

Free Windows Admin Tool Kit Click here and download it now
September 9th, 2015 12:02pm

There is no schema change between CM07 and CM12.

However make sure that you (MC12/CM07 servers) have full rights to the System Management container.

September 9th, 2015 12:09pm

Schema changes in AD cannot be undone in any way without reverting your entire directory (which is very difficult to do). The most you can do is disable them, but this is something that must be manually done.

If however you are talking about the Systems Management container (which has *nothing* to do with the schema), then Garth's reply is spot on.

Free Windows Admin Tool Kit Click here and download it now
September 9th, 2015 12:14pm

let me rephrase my question:

Does an Active Directory Schema change will impact the CM07 schema extension?

These are the two changes made recently:

Extend Exchange schema with Exchange 2013 CU9 attribute to allow introduction of Active Directory Federation Services (ADFS) and Office 365

Extend AD schema with Windows 2012 R2 attribute to allow introduction of Active Directory Federation Services (ADFS) and Office 365

Still in progress...

Thanks,

Dom

September 9th, 2015 12:59pm

Same answer, they cannot be undone or changed in any way (expect a manual disable as mentioned).

This would have absolutely nothing to do with clients being (re-)assigned to a new site however. The info stored in AD by ConfigMgr is simply service lookup data. "Something" *must* initiate a client site assignment. Initial client install is the only time a client will ever change its own site code.

Free Windows Admin Tool Kit Click here and download it now
September 9th, 2015 1:19pm

Hello,

So it could be only the GPO which is launching a CCMSETUP but as there was is a parameter for the sitecode  DTS in the command line within the GPO how the CCMSETUP.log is getting the following information?

Double GPO? checking for this?

...

Current AD site of machine is RRH
Attempting to query AD for assigned site code Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=174742319)(MSSMSRangedIPHigh>=174742319))))
Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.106.80.0)(mSSMSRoamingBoundaries=RRH)(mSSMSSiteCode=SRV)))
LSGetAssignedSiteFromAD : Trying to Assign to the Site <SRV>

 ....

Thanks,

Dom

September 9th, 2015 1:36pm

It could be other things also, just not anything automatically initiated by the client itself.

Other possibilities include (this list is not exhaustive):

- A startup script

- Client push (automatic or manual)

- Script (run via a variety of methods including psexec, PowerShell Remoting, ConfigMgr itself, etc.)

Free Windows Admin Tool Kit Click here and download it now
September 9th, 2015 1:58pm

It may be irrelevant or stupid i just think on the client side only instead of boundary overlap and AD , Is the client get repaired or something by a manual action by someone to a collection or something triggering the client site re-assignment like right click tools and which may trigger the client site reassignment ?

Because when everything was OK month back and if there isn't any change on the site or AD.

September 9th, 2015 5:28pm

Still checking...
Free Windows Admin Tool Kit Click here and download it now
September 14th, 2015 10:16am

some of these clients have been repaired ... but apparently they are all in the same site ... common subnet, !!!
September 14th, 2015 10:17am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics