Search the Community

Hi, I'm new here, please be gentle Someone seems to have played with our SCCM IIS. I think Windows Authentication with Kerberos doesn't work anymore. Login to the Application Catalog only works when you put "NTLM" over "Negotiate" in IIS. The Distribution Point only works, when you allow Anonymous Authentication in SCCM - Distribution Points. What doesn't work, is when Users try to reevaluate user policies. PolicyAgent.log: Synchronous policy assignment request with correlation guid {A16140B0-151C-4A9B-8A67-283CE38FEE8A} for User S-1-5-21-1960130858-3242946568-2400973019-36681 completed with status 80070005 I tried reinstalling Windows Authentication -> SCCM didn't work at all anymore, until I reregistered ASP.NET and other nasty Bits. I tried reinstalling the Management Point -> Log says success, still users can't authenticate and can't get Policies. Any Ideas? Can I just uninstall all System Roles, reinstall IIS and install System Roles again? Thank you Greetz

I have an idea but wanted to see if anyone else knows why this happens. I think it is possibly due to basic authentication being enabled in IIS for that particular site. I could be wrong though Ideas?