Adam Bise

make sure you have created and deployed a "Software Updates" policy under administration / client settings. If you previously had WSUS, check rsop and ensure that "Specify intranet Microsoft update service location" is not configured.

Yes thank you, that does the trick!

First off, thanks for all the help. It is appreciated. What I'm trying to do now is add several "apply driver package" steps with a WMI query. But I would also like to add "auto apply drivers" if none of the driver package steps ran. So I was looking for a way to check if a previous step evaluated it's condition as false, set a variable, and then repeat for each driver package step until the auto apply section is reached, which would check the variable. However I can't seem to figure out how to check if a previous step was skipped. I tried _SMSTSLastActionSucceeded but it ignores steps that were skipped due their conditions weren't met. Any suggestions?

Thanks, Ill check it out.

It would be nice if there was such a thing as an "application group" which could be applied during a TS.

If I want to upgrade or remove an application that is included in many of TS's, is there an easier way to do this rather than going through each TS and removing the old application and adding the new one?

Oh god. "Threshold" was the name of the worst star trek episode in history. This can't be good!

I have some windows 8 clients. Once they've had their SCCM client installed they are no longer able to download dotnet 3.5 from programs and features. I'm guessing this is because of WSUS Anyway I have already found out how to install dotnet 3.5 on win8 using dism.. DISM /Online /Enable-Feature /FeatureName:NetFx3 /All /Source:D:\sources\sxs But I wonder if there is a way to include this feature in WSUS so people can still use their pretty little GUI that pops up saying they need to install it. Not a huge deal, and I'm not even sure if this would affect anything other than dotnet 3.5, but any thoughts on this?

AWESOME!!! It was the client communications tab on site properties. I had missed the PKI checkbox. Looks like everything is working now thanks!!!

I checked a client HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\Httpsstate is 224 The MP says it's SSL state = 63. Is this the incompatibility? What do these numbers mean? Thank you.

One thing I noticed was the configmgr control panel on windows clients shows client certificate issued by the CA is self signed. Is this what it should say?

Having trouble isolating what is causing issues with our MP when switching to HTTPS. I followed MS article http://technet.microsoft.com/en-us/library/jj591553.aspx to enable support for mac. I have issued all the required templates on our CA. I have deployed the autoenrollment policy for the client cert via GPO. After this process only mac clients work while HTTPS is enabled on the MP. I have to switch back to HTTP to get everything else working, and then of course the mac clients don't work anymore. While on HTTPS clients are now reporting the MP is not compatible in the location services log. MPcontrol log suggests that there might be a certificate issue involved, but the mac clients works? I'm not sure what the issue is please help! Here is my mpcontrol. Call to HttpSendRequestSync succeeded for port 443 with status code 200, text: OK SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:37 AM 13104 (0x3330) Http test request succeeded. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) STATMSG: ID=5461 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_MP_CONTROL_MANAGER" SYS=collin.ntcc.edu SITE=P01 PID=2800 TID=13104 GMTDATE=Wed Jun 04 13:36:38.045 2014 ISTR0="" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Successfully performed Legacy Device Management Point availability check against local computer for /devicemgmt?selftest. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) SSL is enabled. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Client authentication is also enabled. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Machine name is 'collin.ntcc.edu'. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint db268c761e75e22b58eb9c01006addaf5cc16770] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint db268c761e75e22b58eb9c01006addaf5cc16770] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Skipping this certificate which is not valid for ConfigMgr usage. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint c5c6bee0ca4f787532a7c1e739ac6036c2c8f94e] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint c5c6bee0ca4f787532a7c1e739ac6036c2c8f94e] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Skipping this certificate which is not valid for ConfigMgr usage. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) XXX There are no certificate(s) that meet the criteria. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Performing machine FQDN to SAN2 search. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint f0503fc07e5b094f89b31c769e87386d2fc1d74a] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate has "SSL Client Authentication" capability. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint f0503fc07e5b094f89b31c769e87386d2fc1d74a] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate doesn't have SAN2 extension. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate doesn't have SAN2 extension. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint c5c6bee0ca4f787532a7c1e739ac6036c2c8f94e] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint c5c6bee0ca4f787532a7c1e739ac6036c2c8f94e] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint a5ee10b10ccf8decf35be32d9487db5970a055bc] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate doesn't have "SSL Client Authentication" capabilities. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint a5ee10b10ccf8decf35be32d9487db5970a055bc] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate doesn't have SAN2 extension. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint 22f9281f1c175ff191b3b0481b809e40fa5f399b] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate doesn't have "SSL Client Authentication" capabilities. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint 22f9281f1c175ff191b3b0481b809e40fa5f399b] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Begin validation of Certificate [Thumbprint 1e25a8774d8cfa33373738509f3a945d2f8ce766] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Certificate has "SSL Client Authentication" capability. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Completed validation of Certificate [Thumbprint 1e25a8774d8cfa33373738509f3a945d2f8ce766] issued to 'collin.ntcc.edu' SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) >>> Selected Certificate [Thumbprint 1e25a8774d8cfa33373738509f3a945d2f8ce766] issued to 'collin.ntcc.edu' for HTTPS Client Authentication SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Call to HttpSendRequestSync succeeded for port 443 with status code 200, text: OK SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) STATMSG: ID=5462 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_MP_CONTROL_MANAGER" SYS=collin.ntcc.edu SITE=P01 PID=2800 TID=13104 GMTDATE=Wed Jun 04 13:36:38.795 2014 ISTR0="" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) Successfully performed OMA Device Management Point availability check against local computer for /omadm/handler.ashx. SMS_MP_CONTROL_MANAGER 6/4/2014 8:36:38 AM 13104 (0x3330) -------------------------------------------------------------------------------- Looks like it can't find a compatible cert, is this correct? Here is a client locationservices log -------------------------------------------------------------------------------- The MP name retrieved is 'collin.ntcc.edu' with version '7958' and capabilities '<Capabilities SchemaVersion="1.0"><Property Name="SSL" Version="1"/><Property Name="SSLState" Value="63"/></Capabilities>' LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) MP 'collin.ntcc.edu' is not compatible LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Refreshed security settings over AD LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) No security settings update detected. LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Refreshed Site Signing Certificate over AD LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Attempting to retrieve lookup MP(s) from AD LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) No lookup MP(s) from AD LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Attempting to retrieve lookup MP(s) from DNS LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Using default DNS suffix ntcc.edu LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Attempting to retrieve default management points from DNS LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Found DNS record of collin.ntcc.edu port 443 LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Skipping DNS record of collin.ntcc.edu port 443 as it is not compatible with Client LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Failed to retrieve compatible DNS service record using _mssms_mp_p01._tcp.ntcc.edu lookup LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) No lookup MP(s) from DNS LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Policy prevents failover to WINS for lookup LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Unable to retrieve compatible MP(s) from AD LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Attempting to retrieve default management points from lookup MP(s) via HTTP LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Failed to retrieve Default Management Points from lookup MP(s) LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Using default DNS suffix ntcc.edu LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Attempting to retrieve default management points from DNS LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Found DNS record of collin.ntcc.edu port 443 LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Skipping DNS record of collin.ntcc.edu port 443 as it is not compatible with Client LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Failed to retrieve compatible DNS service record using _mssms_mp_p01._tcp.ntcc.edu lookup LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Failed to retrieve Default Management Points from DNS LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Attempting to retrieve NLB management point from WINS LocationServices 6/4/2014 8:26:47 AM 3496 (0x0DA8) Failed to resolve 'NLB_P01' from WINS LocationServices 6/4/2014 8:26:56 AM 3496 (0x0DA8) No NLB management point is present, attempting to retrieve default management point from WINS LocationServices 6/4/2014 8:26:56 AM 3496 (0x0DA8) Retrieved Default Management Point collin.ntcc.edu through WINS LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Persisting the default management points in WMI LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Persisted Default Management Point Locations locally LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Attempting to retrieve local MPs from the assigned MP LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:01 AM 3496 (0x0DA8) Retrieved management point encryption info from AD. LocationServices 6/4/2014 8:27:02 AM 144 (0x0090) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:02 AM 3496 (0x0DA8) [CCMHTTP] ERROR: URL=http://collin.ntcc.edu/SMS_MP/.sms_aut?MPLIST1&P01, Port=80, Options=224, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE LocationServices 6/4/2014 8:27:02 AM 144 (0x0090) Raising event: instance of CCM_CcmHttp_Status { ClientID = "GUID:25C70F42-0911-438D-863B-6152530429C8"; DateTime = "20140604132702.177000+000"; HostName = "collin.ntcc.edu"; HRESULT = "0x87d0027e"; ProcessID = 3588; StatusCode = 403; ThreadID = 144; }; LocationServices 6/4/2014 8:27:02 AM 144 (0x0090) Successfully sent security settings refresh message. LocationServices 6/4/2014 8:27:02 AM 144 (0x0090) Successfully sent location services HTTP failure message. LocationServices 6/4/2014 8:27:02 AM 144 (0x0090) Failed to retrieve MP certificate authentication information over http. LocationServices 6/4/2014 8:27:02 AM 144 (0x0090) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 2824 (0x0B08) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 1428 (0x0594) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Refreshed security settings over AD LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) A security settings update is already in progress. LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) 1 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:22 AM 1428 (0x0594) A security settings update is already in progress. LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) 2 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:22 AM 2824 (0x0B08) No security settings update detected. LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 1868 (0x074C) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 256 (0x0100) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 1808 (0x0710) A security settings update is already in progress. LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) Executing Task LSRefreshLocationsTask LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) Executing Task LSRefreshDefaultMPTask LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) 3 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:22 AM 256 (0x0100) Executing Task LSTimeOutRequestsTask LocationServices 6/4/2014 8:27:22 AM 1852 (0x073C) 4 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 2824 (0x0B08) A security settings update is already in progress. LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Assigned MP error threshold reached, moving to next MP. LocationServices 6/4/2014 8:27:22 AM 1808 (0x0710) Already refreshed security settings within the last 60 minutes, not refreshing. LocationServices 6/4/2014 8:27:22 AM 3552 (0x0DE0) No security settings update detected. LocationServices 6/4/2014 8:27:22 AM 3552 (0x0DE0) Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) 0 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Refreshed security settings over AD LocationServices 6/4/2014 8:27:22 AM 3552 (0x0DE0) No security settings update detected. LocationServices 6/4/2014 8:27:22 AM 3552 (0x0DE0) Attempting to retrieve lookup MP(s) from AD LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) No lookup MP(s) from AD LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Attempting to retrieve lookup MP(s) from DNS LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Using default DNS suffix ntcc.edu LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Attempting to retrieve default management points from DNS LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Found DNS record of collin.ntcc.edu port 443 LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Skipping DNS record of collin.ntcc.edu port 443 as it is not compatible with Client LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Failed to retrieve compatible DNS service record using _mssms_mp_p01._tcp.ntcc.edu lookup LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) No lookup MP(s) from DNS LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Policy prevents failover to WINS for lookup LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Unable to retrieve compatible MP(s) from AD LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Attempting to retrieve default management points from lookup MP(s) via HTTP LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Failed to retrieve Default Management Points from lookup MP(s) LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Using default DNS suffix ntcc.edu LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Attempting to retrieve default management points from DNS LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Found DNS record of collin.ntcc.edu port 443 LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Skipping DNS record of collin.ntcc.edu port 443 as it is not compatible with Client LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Failed to retrieve compatible DNS service record using _mssms_mp_p01._tcp.ntcc.edu lookup LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Failed to retrieve Default Management Points from DNS LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Attempting to retrieve NLB management point from WINS LocationServices 6/4/2014 8:27:22 AM 2832 (0x0B10) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:22 AM 3532 (0x0DCC) Already refreshed security settings within the last 60 minutes, not refreshing. LocationServices 6/4/2014 8:27:22 AM 1808 (0x0710) No security settings update detected. LocationServices 6/4/2014 8:27:22 AM 1808 (0x0710) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) 0 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:22 AM 1424 (0x0590) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:23 AM 2824 (0x0B08) Already refreshed security settings within the last 60 minutes, not refreshing. LocationServices 6/4/2014 8:27:23 AM 3360 (0x0D20) No security settings update detected. LocationServices 6/4/2014 8:27:23 AM 3360 (0x0D20) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:23 AM 3764 (0x0EB4) Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 6/4/2014 8:27:23 AM 3764 (0x0EB4) 0 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:23 AM 3764 (0x0EB4) Failed to resolve 'NLB_P01' from WINS LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) No NLB management point is present, attempting to retrieve default management point from WINS LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Retrieved Default Management Point collin.ntcc.edu through WINS LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Persisting the default management points in WMI LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:31 AM 3552 (0x0DE0) Already refreshed security settings within the last 60 minutes, not refreshing. LocationServices 6/4/2014 8:27:31 AM 3532 (0x0DCC) No security settings update detected. LocationServices 6/4/2014 8:27:31 AM 3532 (0x0DCC) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) 0 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Persisted Default Management Point Locations locally LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:31 AM 3552 (0x0DE0) Already refreshed security settings within the last 60 minutes, not refreshing. LocationServices 6/4/2014 8:27:31 AM 3532 (0x0DCC) No security settings update detected. LocationServices 6/4/2014 8:27:31 AM 3532 (0x0DCC) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) 0 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Attempting to retrieve local MPs from the assigned MP LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Current AD site of machine is Default-First-Site-Name LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:31 AM 3552 (0x0DE0) Already refreshed security settings within the last 60 minutes, not refreshing. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) No security settings update detected. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Executing Task LSSiteRoleCycleTask LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Failed to send management point list Location Request Message to collin.ntcc.edu LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Ignoring MP error during post-rotation flush period of 20 seconds. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) 0 assigned MP errors in the last 10 minutes, threshold is 5. LocationServices 6/4/2014 8:27:31 AM 3764 (0x0EB4) Refreshing the Management Point List for site P01 LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Retrieved management point encryption info from AD. LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) [CCMHTTP] ERROR: URL=http://collin.ntcc.edu/SMS_MP/.sms_aut?MPLIST, Port=80, Options=224, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Raising event: instance of CCM_CcmHttp_Status { ClientID = "GUID:25C70F42-0911-438D-863B-6152530429C8"; DateTime = "20140604132731.886000+000"; HostName = "collin.ntcc.edu"; HRESULT = "0x87d0027e"; ProcessID = 3588; StatusCode = 403; ThreadID = 2832; }; LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Successfully sent security settings refresh message. LocationServices 6/4/2014 8:27:31 AM 2832 (0x0B10) Executing Task LSRefreshSecuritySettingsTask LocationServices 6/4/2014 8:27:31 AM 3532 (0x0DCC) Successfully sent location services HTTP failure message. LocationServices 6 ------------------------------------------------------------------------------ This says MP SSL state = 63 I cant find any documentation on what the SSL state value means. Thanks for any help!

Make sure the root working folder is specified in the deployment type under content location. Also I have noticed that changing these settings doesn't work very well. I have had to delete and re-create the application in order to update the content location. Does the folder in ccmcache mirror the folder in content location?

I had recently switched to HTTPS to accommodate Mac enrollment. After completing this I noticed some odd behavior. During client push ccmsetup.log would indicate that the source was inaccessible. It would say Source \\server\smsclient is inaccessible (5) Weird thing, I checked and that share doesn't even exists. I created it, and then had to set some read permissions. Now everything is working again. Can't explain why this happened, but I hope it helps someone else. If anyone who is running SCCM 2012 R2 and has never used HTTPS. Can you see if this share had ever existed? I'm not sure it the share disappeared or the source path was changed somewhere. I would be curious to see if the share exists, but I don't want to set up a whole new system to find out!

What do you guys do when you need to update an Application? I would rather use applications over packages for detection. I don't like the message I get when I click update content on a deployment type. It says "clients may be updated" Assuming everything is working, when exactly do clients get updated? I don't want to run into a situation where all of my clients are uninstalling and reinstalling huge programs just because I needed to modify an installer script. On my larger applications the source is just a folder with the scripts, and the real content is ran over the network.

I have an application with a script installer deployment type. I had modified this script but I cannot update the content. When I try to install the application it fails, and when I dig through the ccmcache folder I see that the script files have not been updated, which is why it is failing. At first I simply updated the files in the source folder. When that didn't work I tried clicking redistribute content in the app properties "content location" tab, I also deleted the cache from my test machine, ran the machine policy and app eval cycle for good measure. Still getting the old content. So I right clicked the deployment type, chose update content, created a new revision, redistributed again, cleared client cache, and ran the client cycles. Still getting the old content. Then I went to application properties, content location, selected the distribution point, and removed it. I checked content status and it was grey (0 targeted). I went to application revisions and removed all previous revisions. Double-checked source files and path, distributed application to the DP again, cleared client cache, ran client cycles, and I'm STILL getting the old content. Then I deleted the whole deployment. Only when I did this I was stuck because the application was stuck in software center with status failed, even after deleting the deployment and running the machine and app cycles. When I tried to re-deploy it would say the software I selected is no longer available, press F5, which didn't remove the failed application from the list in software center. Finally I had to delete the application entirely and wait for the failed application to remove itself from software center, because there was no apparent way to get rid of it besides waiting. I ran all of the client cycles and rebooted etc. Why would modifications to my applications source files not be reflected by the DP, even after removing from the DP entirely? BranchCache is not enabled so that isn't it. The client cache was cleared so it had to re-download from the DP. Any assistance appreciated.

Thanks. I wound up making an app with 2 DT's x86 and x64. Their content was an empty folder with just an install script. The script worked out the 3 step install sequence over the network so no caching was needed.

I have an application that is a suite (adobe creative cloud) The installation is a 3 part step, Acrobat pro via pre mode exceptiondeployer, main install (I'm using the exe bootstrap), then post install exceptions. I set up an application and added 3 deployment types to it, with the preinstall depending the main install, the main install depending the post install, and the post install is priority 1. I haven't even got it all working yet but in my lab experiments I have found that when the app is deployed it attempts to download the content 3 separate times. All 3 DT's have content pointing to the same folder, yet SCCM thinks they are different. Why would it be trying to download the same content 3 times? Is it because I clicked update content on one of the DT's? How do I correct this part? I'm not so much concerned with the fact that the application doesn't install, that is another story, I just want to make these DT's share content. Or find out if I'm trying to go about this totally wrong. I suppose I could script the whole process instead of making 3 DT's but at this point I'm curious why it isn't reusing the content.

Hello. I've just got started with SCCM, running 2012 R2 I have created a Windows 7 VM for capturing. I have installed windows updates and some applications, Office 2013, Adobe Creative Cloud etc. I had captured the image using capture media, and distributed it to the DP. Then I made a TS to deploy it all using the standard default settings. However when I went to deploy the image, I found that all of the programs and updates were not included. My question is, Is this even possible? or have I missed something and selected the wrong image. I double checked and made sure I was using the right data, but I don't understand how the image is stripped of Office and updates etc. The image has 2 partitions, 1-1 and 2-2. Looking at the properties I see that 2-2 is the OS. This is the only image I had applied. The 1-1 I assume is the MSR partition. (Everything was installed on C: on the reference machine.) I read the documentation on the capture process and MS says you can install updates and application and it should be included. What am I missing?