Some clients showing as No in console - SCCM
I've recently re-installed our SCCM server. It has a new server name and now it is in Native mode. Stupidly I didn't remove the client from all the machines however I did use the same site code. Certificates all created and working OK, AD Schema extended etc etc. We have about 350/400 clients and all show up in the console as Assigned - Yes and all except about 80 show up as Client - Yes. I cannot however get the remaining 80 to show up as Yes under client for love nor money. I have tried everything in all other posts, I've removed and recreated MP, I've uninstalled client on local machine and reinstalled both manually and via push, both ways install successfully but still show as No in the console. I've removed and re-requested the certificate, you name it I've tried it and am now at the end of my tether. Any help would be immensely appreciated. Logs below: CcmExec.log The 'Certificate Store' is empty in the registry, using default store name 'MY'. CCMEXEC 08/11/2011 09:31:28 3252 (0x0CB4) Raising event:instance of CCM_ServiceHost_CertRetrieval_Status{DateTime = "20111108093128.982000+000";HRESULT = "0x00000000"; ProcessID = 3032;ThreadID = 3252;}; CCMEXEC 08/11/2011 09:31:28 3252 (0x0CB4) [CCMHTTP] HTTP ERROR: URL=http://SCCM.NORTH-NORFOLK.GOV.UK/ccm_system/request, Port=443, Protocol=https, SSLOptions=127, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE CCMEXEC 08/11/2011 09:31:29 3252 (0x0CB4) Raising event:instance of CCM_CcmHttp_Status{DateTime = "20111108093129.044000+000";HostName = "SCCM.NORTH-NORFOLK.GOV.UK";HRESULT = "0x8004027e";ProcessID = 3032;StatusCode = 403;ThreadID = 3252;}; CCMEXEC 08/11/2011 09:31:29 3252 (0x0CB4) HandleRemoteSyncSend failed (0x80040231). CCMEXEC 08/11/2011 09:31:29 3252 (0x0CB4) CForwarder_Sync::Send failed (0x80040231). CCMEXEC 08/11/2011 09:31:29 3252 (0x0CB4) CForwarder_Base::Send failed (0x80040231). CCMEXEC 08/11/2011 09:31:29 3252 (0x0CB4) LocationServices.log Attempting to retrieve default management point from AD LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Retrieved Default Management Point from AD: SCCM.NORTH-NORFOLK.GOV.UK LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Persisting the default management point in WMI LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Persisted Default Management Point Location locally LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Attempting to retrieve local MP from AD LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) DhcpGetOriginalSubnetMask entry point not supported. LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Current AD site of machine is Cromer LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Retrieved local Management Point from AD: SCCM.NORTH-NORFOLK.GOV.UK LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) The 'Certificate Store' is empty in the registry, using default store name 'MY'. LocationServices 08/11/2011 08:32:31 3252 (0x0CB4) Refreshing client operational settings over AD LocationServices 08/11/2011 08:32:32 3252 (0x0CB4) Refreshed security settings over AD LocationServices 08/11/2011 08:32:32 3252 (0x0CB4) No security settings update detected. LocationServices 08/11/2011 08:32:32 3252 (0x0CB4) ClientIDManagerStartup.log RegTask: Client is not registered. Sending registration request... ClientIDManagerStartup 08/11/2011 09:31:28 3252 (0x0CB4) RegTask: Failed to send registration request message. Error: 0x80040231 ClientIDManagerStartup 08/11/2011 09:31:29 3252 (0x0CB4) RegTask: Failed to send registration request. Error: 0x80040231 ClientIDManagerStartup 08/11/2011 09:31:29 3252 (0x0CB4)
November 8th, 2011 4:59am

Client is not registered. Sending registration request..Error: 0x80040231 Make sure that the certificate has not expired or corrupted.... on the client system.. you can remove the computer certificate (Client authentication) and request for new certificate and restart the SMS agent Host service for the log.........This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2011 7:36am

in SCCM Console the discover Clients not showing as Yes for Client assignment......... This indicates the Boundaries issues.... Re-check your boundaries.......... This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 8th, 2011 7:39am

I have already removed and re requested the certificate on more than 1 occasion, it's must be valid as it uses it to download the client. All clients show as yes in the console for assignment, just about 80 show No for client.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2011 7:50am

Configuration Manager 2007 clients that use auto-assignment attempt to find site boundaries published to Active Directory Domain Services. If this method fails (for example, the Active Directory schema is not extended for Configuration Manager 2007, or clients are not within the same forest), clients can find boundary information from a server locator point. there is nothing wrong than your Boundaries... see here http://technet.microsoft.com/en-us/library/bb681005.aspx Client assignment is related to Boundaries This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 8th, 2011 8:01am

Have you checked clientlocation.log? Also, have you verified connectivity from the client to the MP using a ping and http request using the server's name (not IP)?Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2011 9:11am

Many Thanks for your help, to give you a better idea of our set up, we have 1 server running as component server, distribution point, fallback status point management point etc etc the only thing that is on a different server is the sql database. All clients are on the same subnet and in a single forest like I said most are fine just a few are not. In boundaries I have the following:- Boundary: 172.16.0.0 Site: CRO Type: IP subnet Connection: Fast There is nothing configured for subnet mask or network. But as I said they are all showing as assigned, even the ones that show as No under Client.
November 8th, 2011 9:11am

ClientLocation.log GetCurrentManagementPointEx ClientLocation 08/11/2011 14:51:28 1284 (0x0504) Current Management Point is SCCM.NORTH-NORFOLK.GOV.UK with version 6487 and capabilities: <Capabilities SchemaVersion="1.0"> <Property Name="SSL" Version="1"/> </Capabilities>. ClientLocation 08/11/2011 14:51:28 1284 (0x0504) I can ping the server fine, what do I need to do for an http request? Thanks
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2011 10:15am

mplist and mpcert: http://technet.microsoft.com/en-us/library/bb932118.aspxTorsten Meringer | http://www.mssccmfaq.de
November 8th, 2011 10:37am

Sorry of course, I've tried that before when troubleshooting, when I access them I get 403 - Forbidden: Access is denied. from all machines, even ones that are working correctly and showing as client Yes. I'm sure I read somewhere that this was normal though due to IE not using the certificate or something when running Native Mode.
Free Windows Admin Tool Kit Click here and download it now
November 8th, 2011 10:53am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics