Azfar

Dear All, I was suppose to Uninstall Windows Automated Installation Kit (AIK). After uninstalling it installation worked fine. Thanks a lot.

Now I am unable to open the console of SCCM and getting this error I don't know why - may be because of setup failure. The Configuration Manager console cannot connect to the Configuration Manager site database. Verify the following: • This computer has network connectivity to the SMS Provider computer. • Your user account has Remote Activation permission on the Configuration Manager site server and the SMS Provider computer. • The Configuration Manager console version is supported by the site server. • You are assigned to at least one role-based administration security role. • You have the following WMI permissions to the Root\SMS and Root\SMS\site_<site code> namespaces: Execute Methods, Provider Write, Enable Account, and Remote Enable.

While upgrading SCCM on SP1 I am facing this issue and setup is not properly finished. Some of the files are not copied. However I have uploaded the log file here for clear picture of the scenario. It is showing CORE SETUP COMPLETED INFO: Copy files in DeviceClientDeployment\ClientTransfer folder Configuration Manager Setup 5/5/2015 13:27:08 5924 (0x1724) INFO: Copy files in OSD\bin\x64 folder Configuration Manager Setup 5/5/2015 13:27:08 5924 (0x1724) ERROR: Failed to copy C:\USERS\ADMINISTRATOR.QICT_NT\DESKTOP\SCCM\EN\SMSSETUP\OSD\bin\x64\bcd.mof to d:\program files\microsoft configuration manager\osd\bin\x64\bcd.mof, Win32 error = 3 Configuration Manager Setup 5/5/2015 13:27:08 5924 (0x1724) ERROR: Failed to copy C:\USERS\ADMINISTRATOR.QICT_NT\DESKTOP\SCCM\EN\SMSSETUP\OSD\bin\x64\bcd.mof to d:\program files\microsoft configuration manager\osd\bin\x64\bcd.mof. Configuration Manager Setup 5/5/2015 13:27:08 5924 (0x1724) ~===================== Failed Configuration Manager 2012 Server Setup - Upgrade ===================== Configuration Manager Setup 5/5/2015 13:27:08 5924 (0x1724) ConfigMgrSetup.log

Dear All, What is the best way to perform the updates smartly as whenever I get the report from SCCM for compliance I get detail of pcs but cannot add all those PCs at once in a new collection and assign/deploy specific updates to them. I have followed Article and my ADR for monthly updates which are working fine. But I have PCs that are missing other updates. I want to update my entire domain with all security and critical updates. I have XP, Win 7 & Win 8 computers in it. I have another question - If I select all updates and deploy them will it be installed on all computers or it will be installed on the computer that do not have those updates installed and bypass installation on already installed computers. Thanks for Kind Help in advance. Regards

I followed this article but still my newly installed computers are not downloading all updates from SCCM and we have to download those manually. Please advise.

Dear All, I check few of pcs are not updating antivirus - I checked windows updates and found a lot of missing updates around 90 on 1 pc and 111 on another and I am sure that more are available on network that are missing Microsoft updates. I have to check and update all of my Windows 7 machines to install all of the important and critical updates till last release of this month. Please advise. Kind Regards, Azfar Lashari

Dear All, I found this link http://www.windows-noob.com/forums/index.php?/topic/4683-using-sccm-2012-rc-in-a-lab-part-12-updating-an-operating-system-image-using-offline-servicing/ I believe this will help to get my things done I will surely update here after testing the solution Regards

I have followed articles and deployed my server and it is working fine. I just want to know to configure these settings to get any new pc updated by my sccm automatically to save bandwidth and time not through Internet manually. Please advise.

How to do that in CM12 - We are using CM12. Step by Step configuration would be highly appreciated as I am new to SCCM. Thanks in advance.

Dear All, I want to explain the requirements here: Whenever we build a new Win2k8 R2 server or a pc Win7 we normally have lot of updates to download on new machines from internet like 620 or 450 MB. I want if we build up a pc or a server in my domain SCCM 2012 automatically send all the updates to it which will save most of the time and internet bandwidth. I believe it used to be like this in SUS & in WSUS. Any help would be highly appreciated. Kind Regards, Azfar

I already tried to include screen shots but that didnt work here on this page - I am adding the logs for you to review and advice the solution. <![LOG[sending EvaluateAssignments Trigger to Updates Deployment Agent]LOG]!><time="14:43:15.031-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="1300" file="epagentutil.cpp:553"> <![LOG[Register a timer here to check whether definition get updated in 30 minutes.]LOG]!><time="14:43:20.546-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="1300" file="epagentimpl.cpp:1006"> <![LOG[Firewall provider is installed.]LOG]!><time="14:43:23.158-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="1300" file="epagentutil.cpp:774"> <![LOG[installed firewall provider meet the requirements.]LOG]!><time="14:43:23.158-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="1300" file="epagentutil.cpp:795"> <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="14:43:23.168-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="7876" file="epagentutil.cpp:499"> <![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="14:43:23.168-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="7876" file="epagentutil.cpp:200"> <![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="14:43:23.168-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="7876" file="epagentutil.cpp:218"> <![LOG[AM Policy XML is ready.]LOG]!><time="14:43:23.169-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="7876" file="epagentutil.cpp:314"> <![LOG[Renew the wmi notification hookup as new EP installation is deteced.]LOG]!><time="14:43:24.335-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="7876" file="epagentimpl.cpp:921"> <![LOG[EP Policy Default Client Antimalware Policy is already applied.]LOG]!><time="14:43:24.338-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="7876" file="epagentutil.cpp:520"> <![LOG[Endpoint is triggered by Timer.]LOG]!><time="15:13:20.384-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="4820" file="fepsettingendpoint.cpp:263"> <![LOG[Definition is not installed or it's too old. Need to explicitly trigger SCEP client to download latest definition.]LOG]!><time="15:13:20.405-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="4820" file="epagentimpl.cpp:1029"> <![LOG[Create Process Command line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" -SignatureUpdate.]LOG]!><time="15:13:20.405-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="4820" file="epagentutil.cpp:602"> <![LOG[Trigger the application C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe starting successfully.]LOG]!><time="15:13:20.622-300" date="12-07-2012" component="EndpointProtectionAgent" context="" type="1" thread="4820" file="epagentimpl.cpp:592"> <![LOG[service startup notification received]LOG]!><time="09:20:24.032-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="fepsettingendpoint.cpp:234"> <![LOG[Endpoint is triggered by CCMTask Execute.]LOG]!><time="09:20:24.767-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="fepsettingendpoint.cpp:208"> <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="09:20:25.264-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="epagentutil.cpp:499"> <![LOG[unable to query registry key (SOFTWARE\Microsoft\Microsoft Security Client), return (0x80070002) means EP client is NOT installed.]LOG]!><time="09:20:25.264-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="epagentutil.cpp:149"> <![LOG[start to send state message.]LOG]!><time="09:20:25.265-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="epagentimpl.cpp:159"> <![LOG[send State Message with topic type = 2001, state id = 2, and error code = 0x00000000]LOG]!><time="09:20:25.287-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="epagentimpl.cpp:166"> <![LOG[save new state 2 to registry SOFTWARE\Microsoft\CCM\EPAgent\State]LOG]!><time="09:20:25.287-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="epagentimpl.cpp:190"> <![LOG[AM Policy XML is ready.]LOG]!><time="09:20:25.343-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6120" file="epagentutil.cpp:314"> <![LOG[Endpoint is triggered by message.]LOG]!><time="10:47:30.059-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="fepsettingendpoint.cpp:55"> <![LOG[Endpoint is triggered by message.]LOG]!><time="10:47:30.059-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="fepsettingendpoint.cpp:55"> <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="10:47:30.264-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:499"> <![LOG[unable to query registry key (SOFTWARE\Microsoft\Microsoft Security Client), return (0x80070002) means EP client is NOT installed.]LOG]!><time="10:47:30.264-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:149"> <![LOG[AM Policy XML is ready.]LOG]!><time="10:47:30.264-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:314"> <![LOG[Handle AM Policy.]LOG]!><time="10:47:30.264-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:844"> <![LOG[Disable Startup Signature Update equals to true.]LOG]!><time="10:47:30.396-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:347"> <![LOG[Add the Disable Startup Signature Update settings to policy xml successfully.]LOG]!><time="10:47:30.426-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:356"> <![LOG[Create Process Command line: "C:\Windows\ccmsetup\SCEPInstall.exe" /s /q /NoSigsUpdateAtInitialExp /policy "C:\Windows\CCM\EPAMPolicy.xml".]LOG]!><time="10:47:30.426-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:602"> <![LOG[Detail error message is : [EppSetupResult] HRESULT=0x00000000 Description=The operation completed successfully. ]LOG]!><time="10:49:15.969-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:406"> <![LOG[installed EP client successfully.]LOG]!><time="10:49:15.969-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:418"> <![LOG[start to send state message.]LOG]!><time="10:49:15.970-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:159"> <![LOG[send State Message with topic type = 2001, state id = 3, and error code = 0x00000000]LOG]!><time="10:49:18.825-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:166"> <![LOG[save new state 3 to registry SOFTWARE\Microsoft\CCM\EPAgent\State]LOG]!><time="10:49:18.826-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:190"> <![LOG[EP Policy Default Client Antimalware Policy is already applied.]LOG]!><time="10:49:19.025-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:520"> <![LOG[state 1 and ErrorCode 0 and ErrorMsg and PolicyName Default Client Antimalware Policy is NOT changed, SKip sending State Message.]LOG]!><time="10:49:19.106-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:237"> <![LOG[sending EvaluateAssignments Trigger to Updates Deployment Agent]LOG]!><time="10:49:19.152-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:553"> <![LOG[Register a timer here to check whether definition get updated in 30 minutes.]LOG]!><time="10:49:20.806-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentimpl.cpp:1006"> <![LOG[Firewall provider is installed.]LOG]!><time="10:49:21.032-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:774"> <![LOG[installed firewall provider meet the requirements.]LOG]!><time="10:49:21.033-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="4132" file="epagentutil.cpp:795"> <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="10:49:21.038-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:499"> <![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="10:49:21.038-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:200"> <![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="10:49:21.038-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:218"> <![LOG[AM Policy XML is ready.]LOG]!><time="10:49:21.038-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:314"> <![LOG[Handle EP Deployment Policy.]LOG]!><time="10:49:21.038-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentimpl.cpp:780"> <![LOG[EP Policy Default Client Antimalware Policy is already applied.]LOG]!><time="10:49:21.069-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:520"> <![LOG[EP Client is already installed, will NOT trigger reinstall for now.]LOG]!><time="10:49:21.069-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentimpl.cpp:823"> <![LOG[Firewall provider is installed.]LOG]!><time="10:49:21.071-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:774"> <![LOG[installed firewall provider meet the requirements.]LOG]!><time="10:49:21.071-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="1204" file="epagentutil.cpp:795"> <![LOG[Endpoint is triggered by WMI notification.]LOG]!><time="10:49:49.288-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="fepsettingendpoint.cpp:125"> <![LOG[File C:\Windows\ccmsetup\SCEPInstall.exe version is 2.2.903.0.]LOG]!><time="10:49:49.292-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="epagentutil.cpp:499"> <![LOG[EP version 2.2.903.0 is already installed.]LOG]!><time="10:49:49.293-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="epagentutil.cpp:200"> <![LOG[Expected Version 2.2.903.0 is exactly same with installed version 2.2.903.0.]LOG]!><time="10:49:49.293-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="epagentutil.cpp:218"> <![LOG[AM Policy XML is ready.]LOG]!><time="10:49:49.293-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="epagentutil.cpp:314"> <![LOG[Renew the wmi notification hookup as new EP installation is deteced.]LOG]!><time="10:49:49.388-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="epagentimpl.cpp:921"> <![LOG[EP Policy Default Client Antimalware Policy is already applied.]LOG]!><time="10:49:49.391-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="6420" file="epagentutil.cpp:520"> <![LOG[Endpoint is triggered by Timer.]LOG]!><time="11:19:20.866-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="7532" file="fepsettingendpoint.cpp:263"> <![LOG[Definition is not installed or it's too old. Need to explicitly trigger SCEP client to download latest definition.]LOG]!><time="11:19:20.896-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="7532" file="epagentimpl.cpp:1029"> <![LOG[Create Process Command line: "C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe" -SignatureUpdate.]LOG]!><time="11:19:20.896-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="7532" file="epagentutil.cpp:602"> <![LOG[Trigger the application C:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe starting successfully.]LOG]!><time="11:19:21.274-300" date="12-10-2012" component="EndpointProtectionAgent" context="" type="1" thread="7532" file="epagentimpl.cpp:592">

Sorry Champ, That icon again showed up then my script removed it, please advice what to do now to get this done. Hundreds of users complaining about it that is it getting the systems slow. Thanks in advance.

Dear Champ, I was quite stuck in the middle of nowhere. Now as after removing that Custom Setting the problem is resolved. I am very grateful to you. Regards

Dear All, I followed this great article to deply Endpoint Protection in my environment. Now my management have decided to remove it. But it is again automatically being installed on all of the computers. How to get it done now. I want to permanently stop this auto installation. Please Help Thanks & Regards

Dear, I followed the entire topic and getting superseded error on most/all of the updates in log file. Please advice. Skipped update 45a998db-0cd8-47cd-b917-ef6ab059e70c - Cumulative Security Update for Internet Explorer 8 for Windows Server 2008 R2 for Itanium-based Systems (KB2675157) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:05.080-300><thread=2844 (0xB1C)> Skipped update 1581a364-a485-43de-872f-7252a661a01d - Cumulative Security Update for Internet Explorer 8 for Windows Server 2008 R2 for Itanium-based Systems (KB2699988) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:05.284-300><thread=2844 (0xB1C)> Skipped update 89b634b6-b818-46b6-abbc-4a3fc2747496 - Cumulative Security Update for Internet Explorer 9 for Windows Vista for x64-based Systems (KB2675157) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:05.676-300><thread=2844 (0xB1C)> Skipped update 637277d4-e733-4471-a5ea-799e888ee750 - Cumulative Security Update for Internet Explorer 9 for Windows Vista for x64-based Systems (KB2699988) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:05.898-300><thread=2844 (0xB1C)> Skipped update 420e1f75-15e5-4af1-8d08-83d1f317cf02 - Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB2699988) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:06.177-300><thread=2844 (0xB1C)> Skipped update 506508b4-dd57-4a46-a217-118c2a148566 - Cumulative Security Update for Internet Explorer 9 for Windows 7 (KB2675157) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:06.535-300><thread=2844 (0xB1C)> Skipped update 538d4f66-e213-4010-8c18-b4722caaaedc - Cumulative Security Update for Internet Explorer 9 for Windows 7 (KB2699988) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:06.780-300><thread=2844 (0xB1C)> Skipped update b8bc9bd9-6ce1-405a-8f0d-b4ec0cf1926e - Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB2699988) because it was superseded. $$<SMS_WSUS_SYNC_MANAGER><09-26-2012 00:21:07.059-300><thread=2844 (0xB1C)>