Search the Community

Greetings all, Firstly, I'm a true noob when it comes to certificates. I’m trying to deploy RDS on a W2012 R2 workgroup server (there is no AD). I’ve been using this guide but it requires a cert and, like Jon Snow, I know nothing about certs. The thought is to use the cert simply for authentication. We’ll manually install the public side cert on each of the 5 remote user’s computers. It doesn’t have to be from an external authority. I need to create a client cert that: 1. Is required 2. Is valid for at least 5 years How do I create this certificate? Using IIS or CA? Please provide details! Thanks all!!

Hi, I'm new here, please be gentle Someone seems to have played with our SCCM IIS. I think Windows Authentication with Kerberos doesn't work anymore. Login to the Application Catalog only works when you put "NTLM" over "Negotiate" in IIS. The Distribution Point only works, when you allow Anonymous Authentication in SCCM - Distribution Points. What doesn't work, is when Users try to reevaluate user policies. PolicyAgent.log: Synchronous policy assignment request with correlation guid {A16140B0-151C-4A9B-8A67-283CE38FEE8A} for User S-1-5-21-1960130858-3242946568-2400973019-36681 completed with status 80070005 I tried reinstalling Windows Authentication -> SCCM didn't work at all anymore, until I reregistered ASP.NET and other nasty Bits. I tried reinstalling the Management Point -> Log says success, still users can't authenticate and can't get Policies. Any Ideas? Can I just uninstall all System Roles, reinstall IIS and install System Roles again? Thank you Greetz

Is it possible to add a SCCM 2012 R2 distribution point to a server that’s already hosting a website using IIS? If so are there any special configuration issues to consider? I’ve added the DP role to the server in question and from a SCCM standpoint everything appears fine, I can distribute software to it and it otherwise seems functional. However when I try to install something from the Software Center the installation never gets past the point where the status message says, “downloading”. Eventually it will time out and say it failed. I’m somewhat new to SCCM so this may be an obvious issue, but any help would be appreciated.

Hi, I have a question about reinstalling IIS on SCCM 2012R2. The server has 10 roles (including the Management Point, App Catalog Web Service Point, App Catalog Website Point Services, Reporting Point, Fallback Status Point,). I have a problem such as in this thread: http://scexblog.blogspot.com/2013/12/call-to-httpsendrequestsync-failed-for.html I decided to reinstall IIS. Do you first have to remove all dependent on the IIS roles?

This is my client log when trying to get the client installed on windows 7. Looks good except for the last line. Looks like an iis issue. Anyone have exact web dav and bits settings that are supposed to be set. Or should I just delete all web sites, and iis and try to reinstall. Out of 2k clients only about 20 are picking up new sccm 2012 client. This issue is going to kill me! ==========[ ccmsetup started in process 5056 ]========== ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) CcmSetup version: 5.0.7711.0000 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Running on OS (6.1.7601). Service Pack (1.0). SuiteMask = 256. Product Type = 1 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Ccmsetup command line: ccmsetup.exe /mp:sccm2012 /logon smssitecode=842 /forceinstall ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required. ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Command line: ccmsetup.exe /mp:sccm2012 /logon smssitecode=842 /forceinstall ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) SslState value: 224 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) CCMHTTPPORT: 80 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) CCMHTTPSPORT: 443 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) CCMHTTPSSTATE: 224 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) CCMHTTPSCERTNAME: ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) FSP: ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) CCMFIRSTCERT: 1 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Config file: ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Retry time: 10 minute(s) ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) MSI log file: C:\Windows\ccmsetup\client.msi.log ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) MSI properties: SMSSITECODE="842" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="224" CCMFIRSTCERT="1" ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Source List: ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) MPs: ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) sccm2012 ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) No version of the client is currently detected. ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Updated security on object C:\Windows\ccmsetup\. ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent. ccmsetup 4/24/2013 10:49:30 AM 8764 (0x223C) Downloading file C:\ccmsetup.exe ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Downloading C:\ccmsetup.exe to C:\Windows\ccmsetup\ccmsetup.exe ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) File download 24% complete (262144 of 1052528 bytes). ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) File download 49% complete (524288 of 1052528 bytes). ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) File download 74% complete (786432 of 1052528 bytes). ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) File download 99% complete (1048576 of 1052528 bytes). ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) File download 100% complete (1052528 of 1052528 bytes). ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Download complete. ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Running as user "jkirshy" ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Detected 78773 MB free disk space on system drive. ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Only one MP sccm2012 is specified. Use it. ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Searching for DP locations from MP(s)... ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Current AD site of machine is TIC LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) Local Machine is joined to an AD domain LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) Current AD forest name is ntsupport.tic.toshiba.com, domain name is ntsupport.tic.toshiba.com LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) DhcpGetOriginalSubnetMask entry point is supported. LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) Begin checking Alternate Network Configuration LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) Finished checking Alternate Network Configuration LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) Adapter {79F03CF8-90B5-41CD-BFD2-BA0103E1EFC6} is DHCP enabled. Checking quarantine status. LocationServices 4/24/2013 10:49:31 AM 8764 (0x223C) Sending message body '<ContentLocationRequest SchemaVersion="1.00"> <ClientPackage/> <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0"> <ADSite Name="TIC"/> <Forest Name="ntsupport.tic.toshiba.com"/> <Domain Name="ntsupport.tic.toshiba.com"/> <IPAddresses> <IPAddress SubnetAddress="10.3.16.0" Address="10.3.16.27"/> </IPAddresses> </ClientLocationInfo> </ContentLocationRequest> ' ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Sending message header '<Msg SchemaVersion="1.1"><ID>{EAD1D8F6-F7EB-47B1-A95A-6C32437A7E8B}</ID><SourceHost>IS-JKIRSHY-790</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IS-JKIRSHY-790:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>sccm2012</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-04-24T15:49:31Z</SentTime><Body Type="ByteRange" Offset="0" Length="1062"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) CCM_POST 'HTTP://sccm2012/ccm_system/request' ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Failed to receive ccm message response. Status code = 500 ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) GetDPLocations failed with error 0x80004005 ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C) Failed to get DP locations as the expected version from MP 'sccm2012'. Error 0x80004005 ccmsetup 4/24/2013 10:49:31 AM 8764 (0x223C)

Hi All, I have been trying to work this out for a week now. We have just setup SCCM 2012, and are starting to deploy new DPs Now the DPs that we are to use, also have other roles assigned to them. Mainly they are Lotus Notes Domino Servers I have successfully installed the DP roles to these servers, and the packages have transferred across all ok, but during our first deployment it seems we are getting these error messages in the contenttransfermanager logs. Successfully sent location services HTTP failure message. Error sending HEAD request. HTTP code 404, status 'Not Found' Persisted locations for CTM job {E80FD15A-F656-4E0E-9313-E5DF447F9443}: (LOCAL) http://xxxx.xxxx.com/SMS_DP_SMSPKG$/Content_b61b4a9f-27f2-49a3-8a28-2a254fd681ea.1 [CCMHTTP] ERROR: URL=http://xxxx.xxxx.com/SMS_DP_SMSPKG$/Content_b61b4a9f-27f2-49a3-8a28-2a254fd681ea.1, Port=80, Options=224, Code=0, Text=CCM_E_BAD_HTTP_STATUS_CODE I have tried the following I tried browsing to that link, and I get a 404 error. Looking locally using windows explorer I can see the files are indeed there. Could the issue be, that since Domino itself uses Port 80 for webmail, hence SCCM cant use that port, and therefore the client cannot download anything? Also, how would I get around this issue? Is it possible to change the ports that sccm uses for communication?

Got big problem with SCCM 2012 SP1. SCCM 2012 SP1 and SQL 2012 SP1 CU3 on Windows Server 2012. Installed all prereqs and got a clean install. Get these error every 30 minutes and both MP and SMP role are critical in Site Status. Already checked the SPN records. IIS and SCCM use port 80. What can be wrong? Only thing I haven't tried is removing MP and SMP and reinstallting IIS... Also got this up on technet... : http://social.technet.microsoft.com/Forums/en-US/configmanagergeneral/thread/85a7974a-daa2-412b-9b82-9ae6ba716c6d ____________________________ Errors: On SMS_STATE_MIGRATION_POINT: SMP Control Manager detected SMP is not responding to HTTP requests. The http status code and text is 500, Internal Server Error. Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which the site is configured to communicate. Solution: Verify that the designated Web Site is configured to use the same ports which the site is configured to use. Possible cause: The designated Web Site is disabled in IIS. Solution: Verify that the designated Web Site is enabled, and functioning properly. Possible cause: The MP ISAPI Application Identity does not have the requisite logon privileges. Solution: Verify that the account that the MP ISAPI is configured to run under has not been denied batch logon rights through group policy. For more information, refer to Microsoft Knowledge Base. --------------------------------------------------------------------------------------------------------------------- ************************************************************************************ ----------------------------------------------------------------------------------------------------------------------- ERROR on: SMS_MP_CONTROL_MANAGER MP Control Manager detected management point is not responding to HTTP requests. The HTTP status code and text is 500, Internal Server Error. Possible cause: Management point encountered an error when connecting to SQL Server. Solution: Verify that the SQL Server is properly configured to allow Management Point access. Verify that management point computer account or the Management Point Database Connection Account is a member of Management Point Role (msdbrole_MP) in the SQL Server database. Possible cause: The SQL Server Service Principal Names (SPNs) are not registered correctly in Active Directory Solution: Ensure SQL Server SPNs are correctly registered. Review Q829868. Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which the site is configured to communicate. Solution: Verify that the designated Web Site is configured to use the same ports which the site is configured to use. Possible cause: The designated Web Site is disabled in IIS. Solution: Verify that the designated Web Site is enabled, and functioning properly. Possible cause: The MP ISAPI Application Identity does not have the requisite logon privileges. Solution: Verify that the account that the MP ISAPI is configured to run under has not been denied batch logon rights through group policy. For more information, refer to Microsoft Knowledge Base article 838891.

Hi Everyone- This is my first time posting here, but I visit this site almost every day and always find good info, so hopefullly you can help me uncover some of the issues i have created for myself. I have a single server SCCM environment that was working well to deploy software, manage endpoint protection and handle computer images/pxe boot through WDS. Yesterday, I installed the Dotnet 1.1 framework on the server as a prereq for some other software, and everything blew up. My event log filled with IIS errors 2274 and 2268 over and over again. I ripped out Dotnet 1.1, but that really didn't help. My current issues: Application Deploy has stopped working. I can setup deployments all day long but my clients don't see them. PXE/WDS and SCCM are not communicating My troubleshooting steps to this point: Ripped out Dotnet 1.1 Uninstalled all roles (IIS & WDS) Repaired Dotnet 4.0 Reparied MDT Removed the Distribution point role from my server Reinstalled IIS and WDS Re-added the DP role Notes: At this point, I can boot from PXE if I manually put the boot.wim in to the boot folder of the WDS console, but it fails to connect to SCCM and reboots after WinPE is loaded I did point the WDS role to my D:\remoteinstall folder (the one I have used all along) I am worried about other side effects that I have not yet realized. SCCM uses IIS (WebDav) to manipulate AD, correct? What other things did I break? There are so many log files, i have no idea which ones are valuable and which ones are going to send me off chasing my tail. I really, really, really, really wish i had made a snapshot of the SCCM server before installing Dotnet 1.1 Thanks in advanced for any advice you can give.