Paul H

Hi there, At my customers site we have to use an upstream WSUS server as a source for our SCCM 2012 R2 box. In order to make that work i have opened the WSUS console and removed the check where it says download only when approved (http://www.vroege.biz/?p=663) My sccm sup then downloads everything from the upstream server to the wsuscontent share If i create a deployment for a single or several updates i tell SCCM to download these updates from the \wsuscontent share but all downloads fail (download failed, file not found) There is a storage problem on the upstream server (disk full) at the moment My question: Is it possible that the disk full error on the upstream server causes all my downloads in sccm to fail while wsus sync to upstream is succesfull? If not, can anybody tell me what i can check to troubleshoot this? Should iput specific permissions or rights on the wsuscontent share before my sup can take files from it (maybe in sql?) any help will be welcome greetings, Paul

Right, it should be in a GPO that can be applied by all computers that will recieve the Agent.. Sorry it wasn't clear the first time. You can us a single GPO high up in the hierarchy or link a new one only to every OU that holds computers.

Hi Nick, You can either create a new GPO or put this in an existing one. In the Computer Configuration part of the GPO drill down to Windows settings\security settings\local policies\user rights assignment One of the entries there is "Allow log on locally" Here you can state all accounts that need these rights. Be aware that everybody not in that list will be denied that right! So be carefull and first check who should have these rights beside the action accounts good luck Paul

I can start the wizard for creating boot media but when i reach the page where you can select boot image and DP. When i click the drop down, ther is nothing in the list. And i do have a DP. DP has been a member of a DP group, didn't make any difference. Deleted the group, no change. Does anybody have a hint? Tnx in advance people..

Thanks Peter, And serverside??

Maybe an update for SCCM 2012? only logs i can find are in my backup folder. And trace32 doesn't like them and keeps crashing. Thanks..

As long as FEP installer wants to integrate into the MMC SCCM console (whitch isn't there anymore) it wont install on SCCM 2012 So unless i'm mistaking (always an option ) the change will have to be made on FEP, not on SCCM 2012. Wait for FEP 2010 R2...

by now i'm convinced the certutil -setreg policy \EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 on the CA is absolutely necessary. But i still get the same error: Could not get name from cert context i created a windows7 VM. From that machine i requested a certificate. in the wizard i open the properties of the request and fill friendly name, description, common name and alternate name. I tried several combinations including not filling in anything and leaving out some fields. Always the same result: FAIL. Can anybody tell me which fields i have to fill and what do i have to fill them with? Can i keep the VM on which i requested and installed the certificate while i try to create the bootmedia or do i have to delete it (and remove it from AD and DNS)? i'm going ballistic here.. please help!

start mmc, add certificate snap in then select local computer from the root open folder personal, then computer and thats where the cert should be select it and press delete

do you see a screen that only shows one task sequence or does the task sequence fire off straight away? If it starts without you beeing able to select it that means that you have made it mandatory. If there are multiple mandatory Task sequences it will pick the first one in its path.

Hi all, We've setup SCCM 2007 r3 in native mode on a server 2008 r2 sp1 OS. MDT2010 also installed site server signing certificate web server certificate and client certificate are OK. But now i want to create Task sequence boot media. What has been done so far.. Duplicated the SCCM client certificate template and set the allow private key to be exported switch From a freshly (manually) installed windows 7 sp1 machine requested a certificate from the duplicated template. Exported this certificate with the private key and tried to use this in the boot media. basically thats what it says here: http://technet.microsoft.com/en-us/library/bb632961.aspx We keep getting "Unspecified error, refer to CreateMedia.log" In that log it states: "Could not get name from cert context" At first, while requesting the cert, we did not bother to fill in any fields in the properties. After a fail we tried filling in the common name, friendly name and description in various combinations all resulting in "Could not get name from cert context"" Could this be a SP1 issue? Or are we filling in the wrong fields or missing something else. I've also seen an extra setting to be applied to the CA: "certutil -setreg policy \EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2" to add the SAN attribute. This is something we do not have. Could that be the problem? The CA administrator is reluctant to try this, i'm looking for arguments here... Any help would be appreciated... Thanks in advance.

I was wondering: Do you still need the WSUS database on your SQL server or is all the information stored into the SCCM DB?

if you can always use GPO, dont create a maze of scripts. much easier troubleshooting later

If the driver is present and you tell the machine to search for new hardware, does it find and use the proper drivers then? In that case you might try an extra PnP run on the machine a command line step with rundll32.exe Syssetup.dll,UpdatePnpDeviceDrivers sometimes works

And the network access account you use has permissions in the subdomain? I read in your first post permissions are the same as in your primairy site, but i don't know if these permissions also apply to subdomains. I'm assuming your site topology matches your domain topology here. check the effective permissions in the advanced security settings of the folder where the package is. If this seems fine, try to remove the package from the DP, check if its gone, and redistribute it.