Paul H

Hi there, At my customers site we have to use an upstream WSUS server as a source for our SCCM 2012 R2 box. In order to make that work i have opened the WSUS console and removed the check where it says download only when approved (http://www.vroege.biz/?p=663) My sccm sup then downloads everything from the upstream server to the wsuscontent share If i create a deployment for a single or several updates i tell SCCM to download these updates from the \wsuscontent share but all downloads fail (download failed, file not found) There is a storage problem on the upstream server (disk full) at the moment My question: Is it possible that the disk full error on the upstream server causes all my downloads in sccm to fail while wsus sync to upstream is succesfull? If not, can anybody tell me what i can check to troubleshoot this? Should iput specific permissions or rights on the wsuscontent share before my sup can take files from it (maybe in sql?) any help will be welcome greetings, Paul

Right, it should be in a GPO that can be applied by all computers that will recieve the Agent.. Sorry it wasn't clear the first time. You can us a single GPO high up in the hierarchy or link a new one only to every OU that holds computers.

Hi Nick, You can either create a new GPO or put this in an existing one. In the Computer Configuration part of the GPO drill down to Windows settings\security settings\local policies\user rights assignment One of the entries there is "Allow log on locally" Here you can state all accounts that need these rights. Be aware that everybody not in that list will be denied that right! So be carefull and first check who should have these rights beside the action accounts good luck Paul

I can start the wizard for creating boot media but when i reach the page where you can select boot image and DP. When i click the drop down, ther is nothing in the list. And i do have a DP. DP has been a member of a DP group, didn't make any difference. Deleted the group, no change. Does anybody have a hint? Tnx in advance people..

Thanks Peter, And serverside??

Maybe an update for SCCM 2012? only logs i can find are in my backup folder. And trace32 doesn't like them and keeps crashing. Thanks..

As long as FEP installer wants to integrate into the MMC SCCM console (whitch isn't there anymore) it wont install on SCCM 2012 So unless i'm mistaking (always an option ) the change will have to be made on FEP, not on SCCM 2012. Wait for FEP 2010 R2...

by now i'm convinced the certutil -setreg policy \EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2 on the CA is absolutely necessary. But i still get the same error: Could not get name from cert context i created a windows7 VM. From that machine i requested a certificate. in the wizard i open the properties of the request and fill friendly name, description, common name and alternate name. I tried several combinations including not filling in anything and leaving out some fields. Always the same result: FAIL. Can anybody tell me which fields i have to fill and what do i have to fill them with? Can i keep the VM on which i requested and installed the certificate while i try to create the bootmedia or do i have to delete it (and remove it from AD and DNS)? i'm going ballistic here.. please help!

start mmc, add certificate snap in then select local computer from the root open folder personal, then computer and thats where the cert should be select it and press delete

do you see a screen that only shows one task sequence or does the task sequence fire off straight away? If it starts without you beeing able to select it that means that you have made it mandatory. If there are multiple mandatory Task sequences it will pick the first one in its path.

Hi all, We've setup SCCM 2007 r3 in native mode on a server 2008 r2 sp1 OS. MDT2010 also installed site server signing certificate web server certificate and client certificate are OK. But now i want to create Task sequence boot media. What has been done so far.. Duplicated the SCCM client certificate template and set the allow private key to be exported switch From a freshly (manually) installed windows 7 sp1 machine requested a certificate from the duplicated template. Exported this certificate with the private key and tried to use this in the boot media. basically thats what it says here: http://technet.microsoft.com/en-us/library/bb632961.aspx We keep getting "Unspecified error, refer to CreateMedia.log" In that log it states: "Could not get name from cert context" At first, while requesting the cert, we did not bother to fill in any fields in the properties. After a fail we tried filling in the common name, friendly name and description in various combinations all resulting in "Could not get name from cert context"" Could this be a SP1 issue? Or are we filling in the wrong fields or missing something else. I've also seen an extra setting to be applied to the CA: "certutil -setreg policy \EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2" to add the SAN attribute. This is something we do not have. Could that be the problem? The CA administrator is reluctant to try this, i'm looking for arguments here... Any help would be appreciated... Thanks in advance.

I was wondering: Do you still need the WSUS database on your SQL server or is all the information stored into the SCCM DB?

if you can always use GPO, dont create a maze of scripts. much easier troubleshooting later

If the driver is present and you tell the machine to search for new hardware, does it find and use the proper drivers then? In that case you might try an extra PnP run on the machine a command line step with rundll32.exe Syssetup.dll,UpdatePnpDeviceDrivers sometimes works

And the network access account you use has permissions in the subdomain? I read in your first post permissions are the same as in your primairy site, but i don't know if these permissions also apply to subdomains. I'm assuming your site topology matches your domain topology here. check the effective permissions in the advanced security settings of the folder where the package is. If this seems fine, try to remove the package from the DP, check if its gone, and redistribute it.

Is the boot.wim present on the distribution point in your secondairy site?

Hi there, I've installed RMS and deployed about 20 clients to my serverpark. A month or so later i installed a second management server and tried to install clients to about 20 other servers Installation of clients went well but they all show up as Not Monitored. Even the 2nd Mgt server does that I stopped the health service on target machines and deleted the state folder to no effect stopped the health service on RMS and deleted the opsmgrconfig.xml to no effect started the console with /c no effect I now uninstalled all clients and will try again monday Does anybody have any suggestions that i can try or check?? Update: I've removed all opsmgr installations, including the DB and datawarehousing. Re-installed the DB, the RMS and trying to install DW now but getting errors about the reporting on SQL 2008. "HTTP://<servername>:80/reports" returns a config error. tryed several accounts in Reporting services config mgr but no luck backed up all my databases on the SQL box and will de-install reporting on the SQL server That worked fine. wish i could reach my management server in the other datacenter but the line is dead to be continued.... Well the line is back installed the management server in the other site Imported Management packs installed a couple agents... again not monitored in the eventviewer i discovered errors stating connection was refused to the management server On the mgt server i saw a clear statement of the problem: action account used did not have allow log on locally permissions... Why didn't i check eventvwr earlier?? :angry: after adding the action accout to the proper GPO and a gpupdate /force followed by a restart of the systemcenter management service my agents started to get in line problem solved!