InstallSoftware insists on accessing /NOCERT_SMS_DP_SMSPKG$/

[spgsitsupport]

Step after Setup Windows and ConfigMgr

Workstation restarts & next Group is Install Packages

 

At which point we are in FULL OS

 

Yet InstallSoftware wants to download the package from /NOCERT_SMS_DP_SMSPKG$/ instead of /SMS_DP_SMSPKG$/ (using SSL certificate)

In SSL, but with no client cert

is TOTALLY wrong, as it registered CM client to MP using machine certificate!

Retrieving value from TSEnv for '_SMSTSPolicySP1000B8_Install'									
::DecompressBuffer(65536)													
Decompression (zlib) succeeded: original size 3064, uncompressed size 38564.							
ADV_AdvertisementID=SP1200E3													
PKG_PSF_ContainsSourceFiles=TRUE												
ResolveSource flags: 0x00000000													
SMSTSPersistContent: . The content for package SP1000B8 will be persisted							
DownloadOnDemand flag is true. Attempting to download content locally for Package SP1000B8.					
Locations: Multicast = 0, HTTP = 1, SMB = 0.											
Package Flags: 0x01000000													
Multicast is not enabled for the package.											
Trying https://sccm.domain.local/NOCERT_SMS_DP_SMSPKG$/SP1000B8.								
GetDirectoryListing() entered													
Initializing HTTP transport.													
Setting URL = https://sccm.domain.local/NOCERT_SMS_DP_SMSPKG$/SP1000B8.								
   Address=https://sccm.domain.local, Scheme=https, Object=/NOCERT_SMS_DP_SMSPKG$/SP1000B8, Port=443.				
Setting Authenticator.														
Set authenticator in transport													
Setting Media Certificate.													
WinHttp credentials set														
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.local:443  PROPFIND /NOCERT_SMS_DP_SMSPKG$/SP1000B8			
In SSL, but with no client cert													
401 - Unsuccessful with anonymous access. Retrying with context credentials.							
Using thread token for request													
Error. Status code 404 returned													
dwHttpResultCode >= 200 && dwHttpResultCode <= 299, HRESULT=80190194 (e:\qfe\nts\sms\framework\tscore\downloadcontent.cpp,832)	
Http result: 404														

Anybody has any idea why it goes so wonky?

 

Seb

[spgsitsupport]

This is a workable temporary workaround, as I believe the Anonymous Authentication get periodically (nightly) reset back to defaults (which is Disabled for the Virtual directory)

 

Seb

[spgsitsupport]

Anybody?

 

The workaround can be extended to scheduled task using appcmd to run every xx minutes, but surely this subfolder should NOT be accessed in FULL OS

%windir%\system32\inetsrv\appcmd.exe set config "Default Web Site/NOCERT_SMS_DP_SMSPKG$" -section:system.webServer/security/authentication/anonymousAuthentication /enabled:"True" /commit:apphost