Hy guys ... I'm listing some computers with SCCM Agent installed, but not approved. The computer is a member of the domain like the others ... and when I force the approval in SCCM console, the status Approved=N/A doesn't change. What's wrong? Is there any log that can help me? PS: The company don't use image application to install client operational system, so I think that is not problem with duplicate SID.

Sorry for asking the obvious, but did you refresh the collection? Serge

Very likely it is an issue with the client not being able to authenticate with Integrated Windows Authentication, and is not a Configuration Manager issue. The client must be authenticated with Integrated Windows Authentication, or we can't approve automatically. The below came from the client deployment team when someone internally asked about this earlier this week: Can you check the IIS logs on the MP? Look for requests to /ccm_request_windowsauth. Approval is mostly a function of if the machine account that the client is on can authenticate with the secured VDIR on the MP, and if this fails, we dont trust the client. Nearly every approval issue Ive ever run into has been because of a misconfiguration or external environment issue.

It might be of help but I have fixed a few by doing this 1) Stop the ccmexec service (SMS Agent Host) on the machine you have an issue with 2) browse/locate and delete the following file "SMSCFG.INI" (should be located in c:\windows\) 3) Start the ccmexec (SMS Agent Host) service again on the machine and check that the new logs populate c:\windows\system32\ccm\logs (if thats your path) 4) Check SCCM Console for the machine and check if its registered and approved or you can use the "trace" to check the machines log files 5) Check your config mgr client to see if its populated the rest of the services other than the two you mentionedXohaib