CCM.log produces the following errors: ======>Begin Processing request: "SKYNET_EECS_KU_EDU.EECS", machine name: "SKYNET" $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Trying the account stored in the CCR (index = 0x0)~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Attempting to connect to administrative share '\\skynet.eecs.ku.edu\admin$' using account 'eecs\administrator'~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account eecs\administrator (000004b3) $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> WNetAddConnection2 failed (LOGON32_LOGON_INTERACTIVE) using account eecs\administrator (000004b3) $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Trying each entry in the SMS Client Remote Installation account list~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Attempting to connect to administrative share '\\skynet.eecs.ku.edu\admin$' using machine account.~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Failed to get token for current process (5) $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> ERROR: Failed to connect to the \\skynet.eecs.ku.edu\admin$ share using account 'Machine Account' $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.504 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Trying the account stored in the CCR (index = 0x0)~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.520 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Attempting to connect to administrative share '\\SKYNET\admin$' using account 'eecs\administrator'~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.520 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Connected to administrative share on machine SKYNET using account 'eecs\administrator'~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.536 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Attempting to make IPC connection to share <\\SKYNET\IPC$> ~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.536 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Searching for SMSClientInstall.* under '\\SKYNET\admin$\'~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.536 2010 Central Daylight Time><thread=17204 (0x4334)> ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account eecs\administrator (000004b3) $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.536 2010 Central Daylight Time><thread=20044 (0x4E4C)> CWmi::Connect(): ConnectServer(Namespace) failed. - 0x800706ba~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Unable to connect to WMI on remote machine "SKYNET", error = 0x800706ba. $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=17204 (0x4334)> ---> Deleting SMS Client Install Lock File '\\SKYNET\admin$\SMSClientInstall.ECS'~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=17204 (0x4334)> ---> WNetAddConnection2 failed (LOGON32_LOGON_INTERACTIVE) using account eecs\administrator (000004b3) $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=20044 (0x4E4C)> ---> Attempting to connect to administrative share '\\129.237.81.50\admin$' using machine account.~ $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=20044 (0x4E4C)> ---> Failed to get token for current process (5) $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=20044 (0x4E4C)> ---> ERROR: Failed to connect to the \\129.237.81.50\admin$ share using account 'Machine Account' $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=20044 (0x4E4C)> ---> ERROR: Unable to access target machine for request: "3003-10_EECS_KU_EDU.EECS", machine name: "3003-10", access denied or invalid network path. $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=20044 (0x4E4C)> Stored request "SKYNET_EECS_KU_EDU.EECS", machine name "SKYNET", in queue "Retry". $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=17204 (0x4334)> Stored request "3003-10_EECS_KU_EDU.EECS", machine name "3003-10", in queue "Retry". $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=20044 (0x4E4C)> <======End request: "SKYNET_EECS_KU_EDU.EECS", machine name: "SKYNET". $$<SMS_CLIENT_CONFIG_MANAGER><Mon Aug 23 10:26:34.551 2010 Central Daylight Time><thread=17204 (0x4334)> I believe this is a WMI issue; I ran wbemtest.exe from our site server and received the following error when I attempted to connect to the same machine: Number: 0x800706ba Facility: Win32 Description: The RPC server is unavailable. Finally I ran wmidiag on the machine and found the following errors: 23305 10:43:02 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED. 23306 10:43:02 (1) !! ERROR: Default trustee 'BUILTIN\ADMINISTRATORS' has been REMOVED! 23307 10:43:02 (0) ** - REMOVED ACE: 23308 10:43:02 (0) ** ACEType: &h0 23309 10:43:02 (0) ** ACCESS_ALLOWED_ACE_TYPE 23310 10:43:02 (0) ** ACEFlags: &h0 23311 10:43:02 (0) ** ACEMask: &h1 23312 10:43:02 (0) ** DCOM_RIGHT_EXECUTE 23313 10:43:02 (0) ** 23314 10:43:02 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee. 23315 10:43:02 (0) ** Removing default security will cause some operations to fail! 23316 10:43:02 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE. 23317 10:43:02 (0) ** For DCOM objects, this can be done with 'DCOMCNFG.EXE'. 23318 10:43:02 (0) ** 23319 10:43:02 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED. 23320 10:43:02 (1) !! ERROR: Default trustee 'NT AUTHORITY\INTERACTIVE' has been REMOVED! 23321 10:43:02 (0) ** - REMOVED ACE: 23322 10:43:02 (0) ** ACEType: &h0 23323 10:43:02 (0) ** ACCESS_ALLOWED_ACE_TYPE 23324 10:43:02 (0) ** ACEFlags: &h0 23325 10:43:02 (0) ** ACEMask: &h1 23326 10:43:02 (0) ** DCOM_RIGHT_EXECUTE 23327 10:43:02 (0) ** 23328 10:43:02 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee. 23329 10:43:02 (0) ** Removing default security will cause some operations to fail! 23330 10:43:02 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE. 23331 10:43:02 (0) ** For DCOM objects, this can be done with 'DCOMCNFG.EXE'. 23332 10:43:02 (0) ** 23333 10:43:02 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED. 23334 10:43:02 (1) !! ERROR: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED! 23335 10:43:02 (0) ** - REMOVED ACE: 23336 10:43:02 (0) ** ACEType: &h0 23337 10:43:02 (0) ** ACCESS_ALLOWED_ACE_TYPE 23338 10:43:02 (0) ** ACEFlags: &h0 23339 10:43:02 (0) ** ACEMask: &h1 23340 10:43:02 (0) ** DCOM_RIGHT_EXECUTE 23341 10:43:02 (0) ** 23342 10:43:02 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee. 23343 10:43:02 (0) ** Removing default security will cause some operations to fail! 23344 10:43:02 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE. 23345 10:43:02 (0) ** For DCOM objects, this can be done with 'DCOMCNFG.EXE'. 23346 10:43:02 (0) ** 23347 10:43:02 (0) ** WMI namespace security for 'ROOT/SECURITY': ......................................................................... MODIFIED. 23348 10:43:02 (1) !! ERROR: Actual trustee 'NT AUTHORITY\LOCAL SERVICE' DOES NOT match corresponding expected trustee rights (Actual->Default) 23349 10:43:02 (0) ** - ACTUAL ACE: 23350 10:43:02 (0) ** ACEType: &h0 23351 10:43:02 (0) ** ACCESS_ALLOWED_ACE_TYPE 23352 10:43:02 (0) ** ACEFlags: &h12 23353 10:43:02 (0) ** CONTAINER_INHERIT_ACE 23354 10:43:02 (0) ** INHERITED_ACE 23355 10:43:02 (0) ** ACEMask: &h3 23356 10:43:02 (0) ** WBEM_ENABLE 23357 10:43:02 (0) ** WBEM_METHOD_EXECUTE 23358 10:43:02 (0) ** - EXPECTED ACE: 23359 10:43:02 (0) ** ACEType: &h0 23360 10:43:02 (0) ** ACCESS_ALLOWED_ACE_TYPE 23361 10:43:02 (0) ** ACEFlags: &h12 23362 10:43:02 (0) ** CONTAINER_INHERIT_ACE 23363 10:43:02 (0) ** INHERITED_ACE 23364 10:43:02 (0) ** ACEMask: &h13 23365 10:43:02 (0) ** WBEM_ENABLE 23366 10:43:02 (0) ** WBEM_METHOD_EXECUTE 23367 10:43:02 (0) ** WBEM_WRITE_PROVIDER 23368 10:43:02 (0) ** Where is 'Microsoft WBEM Unsecured Apartment' in the Component Services menu? I cannot find it? 'Microsoft WBEM UnSecured Apartment'

Do you have the windows firewalll enabled or is there a network firewall between the clients and the server? John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

Windows firewall is disabled via group policy and there is no firewall between the clients and server. They are on different subnets, though our site boundaries are specified via AD.

What if you blow away WMI and rebuild the repository? John Marcum | http://myitforum.com/cs2/blogs/jmarcum |

Hi, On the server, start wbemtest.exe Click Connect Enter \\client\root\cimv2 If that fails, then we can't connect remotely to push either. I'd try to do: netsh firewall set service remoteadmin enablePlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.