Hi, I'm running an OSD TS which has failed part way through downloading the files for an install software package. I get this error in the SMSTS.log: WinHttpQueryHeaders() returns status code 401 (Unauthorized) Seems strange that it would fail with this erro part way through a download? Here is part of the log with the errors: Downloaded file from http://CRWNAPP1.STAFF.STAFFS.AC.UK:80/SMS_DP_SMSPKGE%24/SU10002D/Bas.cab to C:\_SMSTaskSequence\Packages\SU10002D\Bas.cab InstallSoftware 30/06/2011 11:38:58 1872 (0x0750) Downloaded file from http://CRWNAPP1.STAFF.STAFFS.AC.UK:80/SMS_DP_SMSPKGE%24/SU10002D/Client.cab to C:\_SMSTaskSequence\Packages\SU10002D\Client.cab InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) dwStatusCode>=200 && dwStatusCode<=299, HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,1090) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) WinHttpQueryHeaders() returns status code 401 (Unauthorized) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) Download() failed with 0x80004005 InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) DownloadFile(sSourceFile, sDestinationFile, ulTotalSizeRequired, ulDownLoaded), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,1175) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) Error downloading file from http://CRWNAPP1.STAFF.STAFFS.AC.UK:80/SMS_DP_SMSPKGE%24/SU10002D/ClientAc.cab to C:\_SMSTaskSequence\Packages\SU10002D\ClientAc.cab InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) DownloadFiles(sSource, setDirs, setFiles, sDestination), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,2434) InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) Retrying download... InstallSoftware 30/06/2011 11:39:08 1872 (0x0750) GetDirectoryListing() entered InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) Initializing HTTP transport. InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) Setting URL = http://CRWNAPP1.STAFF.STAFFS.AC.UK/SMS_DP_SMSPKGE$/SU10002D/. InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) Address = CRWNAPP1.STAFF.STAFFS.AC.UK, Object = /SMS_DP_SMSPKGE$/SU10002D/, Port = 80. InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) WinHttp credentials set InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) CLibSMSMessageWinHttpTransport::Send: URL: CRWNAPP1.STAFF.STAFFS.AC.UK:80 PROPFIND /SMS_DP_SMSPKGE$/SU10002D/ InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) The request requires user authentication. 401 Unauthorized InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) dwHttpResultCode>=200 && dwHttpResultCode<=299, HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,590) InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) Http result: 401 InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) SendResourceRequest() failed with 0x80004005 InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) SendResourceRequest(), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\downloadcontent.cpp,371) InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) oDavRequest.GetDirectoryListing(setDirs, setFiles), HRESULT=80004005 (e:\nts_sms_fre\sms\framework\tscore\resolvesource.cpp,2421) InstallSoftware 30/06/2011 11:39:11 1872 (0x0750) Any ideas? Thanks, Jay

See http://blogs.technet.com/b/configmgrteam/archive/2010/01/14/troubleshooting-client-content-download-in-configuration-manager-2007.aspx. Particularily Step 6. IIS blocks many things by default; you often have to relax this security on your DP depedning on the content you are distributing.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

See http://blogs.technet.com/b/configmgrteam/archive/2010/01/14/troubleshooting-client-content-download-in-configuration-manager-2007.aspx. Particularily Step 6. IIS blocks many things by default; you often have to relax this security on your DP depedning on the content you are distributing. Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys Thank you for the reply but none of the symptoms mentioned in the article seem to be relevant or refer to a 401 error. There is nothing unusual about the content that is being downloaded. This 401 error seems to have cropped up all of a sudden since yesterday afternoon and I can't seem to troubleshoot why it is happening. I have re-tried the OSD TS and it has failed on a different file from a different package but with the same error. This also seems to happen when I advertise a package to a PC and specify to download the content locally.

Given that this is an HTTP error code, have you reviewed the IIS logs on the DP?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

Given that this is an HTTP error code, have you reviewed the IIS logs on the DP? Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys Yes - details a 401 2 5 0 error? 2011-06-30 14:35:16 10.15.26.242 GET /SMS_DP_SMSPKGE$/SU100029/Amos19Shortcuts.mst - 80 - 10.54.1.77 SMS+TS 401 2 5 0

Is that only happening for this one file? Is that the only file in this package? Have you tried recreating the package and the source folder copying a new instance of the file? Here's a general guide for troubleshooting 401 errors in IIS: http://support.microsoft.com/kb/907273.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys

Is that only happening for this one file? Is that the only file in this package? Have you tried recreating the package and the source folder copying a new instance of the file? Here's a general guide for troubleshooting 401 errors in IIS: http://support.microsoft.com/kb/907273. Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys No. There are lots of files and lots of packages. This seems to be happening completely randomly on different files from different packages.

See http://blogs.technet.com/b/configmgrteam/archive/2010/01/14/troubleshooting-client-content-download-in-configuration-manager-2007.aspx. Particularily Step 6. IIS blocks many things by default; you often have to relax this security on your DP depedning on the content you are distributing. Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys Hi Jason, I've been examining the IIS Logs in more detail and it turns out that I have 2 seperate problem - one was an IIS error 404.8 when advertising a package to a client. By following your link I was able to identify that this was due to the package having a BIN folder which was being filtered by the applicationHost.config file. I have now been able to resolve this issue. But... I still have the same problem with 2 seperate packages which fail within my OSD Task Sequence - althought they DO succeed when advertised individually to clients. They will be downloading files fine during the OSD TS but then both fail on one particular file with a 401 2 5 0 error. 2011-06-30 10:39:08 10.15.26.242 GET /SMS_DP_SMSPKGE$/SU10002D/ClientAc.cab - 80 - 10.54.1.77 SMS+TS 401 2 5 0 2011-06-30 14:35:16 10.15.26.242 GET /SMS_DP_SMSPKGE$/SU100029/Amos19Shortcuts.mst - 80 - 10.54.1.77 SMS+TS 401 2 5 0 Any more ideas how I can troubleshoot this? Kind regards, Jay

Hi Jay, You may see the information about the HTTP 401.2 error in the following KB article: Troubleshooting HTTP 401 errors in IIS HTTP 401.2: Denied by server configuration Description The client browser and IIS could not agree on an authentication protocol. Common reasons No authentication protocol (including anonymous) is selected in IIS. At least one authentication type must be selected. For more information, click the following article number to view the article in the Microsoft Knowledge Base: 253667 (http://support.microsoft.com/kb/253667/ ) Error message: HTTP 401.2 - Unauthorized: Logon failed due to server configuration with no authentication Only Integrated authentication is enabled, and an older, non-Internet Explorer client browser tries to access the site. This happens because the client browser cannot perform Integrated authentication. To resolve this problem, use one of the following methods: Configure IIS to accept Basic authentication. This should only occur over SSL for security purposes. Use a client browser that can perform Integrated authentication. Internet Explorer and new versions of Netscape Navigator and Mozilla Firefox can perform Integrated authentication. Integrated authentication is through a proxy. This happens because the proxy doesn't maintain the NTLM-authenticated connection and thus sends an anonymous request from the client to the server. Options to resolve this problem are as follows: Configure IIS to accept Basic authentication. This should only occur over SSL for security purposes. Don't use a proxy. Please go to the following suggestions to troubleshoot: a. check the permission for the folder and the specific file. b. Follow the Error message when you try to visit a Web page that is hosted on IIS 7.0: "HTTP Error 401.2 - Unauthorized" for a checking. Regards, Sabrina This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.