Client's not getting Software Updates but getting Inventory

[smokey75]

I'm really hoping someone on this forum can help. I used the Anyweb guides to configure SCCM 2007 (R2 though). I also modified it slightly to turn it into Native Mode, but I have all the certs installed on the endpoints and server instances.

 

I'm running everything in a lab environment and all the various SCCM components (DP, MP, Site Server, etc.) are running on one Server 2008 R2 instance. I've spent literally weeks working through various issues, but I feel that I'm extremely close to getting it working on the LAN at the moment. Currently, I have 2 Windows 7 clients that are members of the domain, have client certs, and the SCCM client push is working correctly to them.

 

At least some communication is working as I'm getting hardware and software inventory in the reporting console, but no matter what I do, I can not seem to push any updates or software out to the sccm clients. I followed the guide posted by Anyweb on how to configure Firefox, but just no luck.

 

I've poured through logs on both the server and the console and these are the only real errors that I can seem to find. These may be red herrings, but wanted to be thorough.

 

 

On the client side, seeing this error and similar a bunch in PolicyAgent.log:

 

Signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}

 

 

On the server side, seeing this error in the MP_Status.log:

 

Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN7ENTTEST1]LOG

 

 

Also seeing this in the CAS.log:

GetLogonUserSid failed at GetTokenSids 0x800703f0

 

 

Also, the PolicyAgent.log:

Signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.

 

 

 

More detail:

 

Client Logs

 

 

Client PolicyAgent.log

 

<![LOG[Cleaning policy for 'SMS:FLK' in '\\WIN7ENTTEST1\ROOT\ccm\Policy\S_1_5_21_1459899864_4149357974_4185135662_1000\RequestedConfig' ()]LOG]!><time="14:56:38.577+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="312" file="policyutil.cpp:6912">

<![LOG[Requesting Machine policy assignments]LOG]!><time="15:56:37.578+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="3504" file="requestassignmentstask.cpp:1448">

<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="15:56:37.593+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="3504" file="requestassignmentstask.cpp:1508">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsRequested

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215637.687000+000";

ProcessID = 1172;

ResourceName = "WIN7ENTTEST1";

ResourceType = "Machine";

ThreadID = 3504;

};

]LOG]!><time="15:56:37.687+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="3504" file="event.cpp:525">

<![LOG[Requesting User policy assignments for 'S-1-5-21-1459899864-4149357974-4185135662-1000']LOG]!><time="15:56:37.844+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="728" file="requestassignmentstask.cpp:1452">

<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="15:56:37.890+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="728" file="requestassignmentstask.cpp:1508">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsRequested

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215638.094000+000";

ProcessID = 1172;

ResourceName = "S-1-5-21-1459899864-4149357974-4185135662-1000";

ResourceType = "User";

ThreadID = 728;

};

]LOG]!><time="15:56:38.094+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="728" file="event.cpp:525">

<![LOG[Processing Machine assignments from 'SMS:FLK'. The new cookie is '2009-12-04 10:01:54.743'.]LOG]!><time="15:56:38.156+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="replyassignmentsendpoint.cpp:970">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsReceived

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215638.172000+000";

ProcessID = 1172;

ReplyType = "Full";

ResourceName = "WIN7ENTTEST1";

ResourceType = "Machine";

ThreadID = 956;

};

]LOG]!><time="15:56:38.172+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">

<![LOG[Raising event:

 

instance of CCM_ServiceHost_CertRetrieval_Status

{

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215638.281000+000";

HRESULT = "0x00000000";

ProcessID = 1172;

ThreadID = 956;

};

]LOG]!><time="15:56:38.281+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">

<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="15:56:38.328+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="15:56:38.328+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="15:56:38.344+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">

<![LOG[Raising event:

 

instance of CCM_ServiceHost_CertRetrieval_Status

{

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215638.516000+000";

HRESULT = "0x00000000";

ProcessID = 1172;

ThreadID = 956;

};

]LOG]!><time="15:56:38.516+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">

<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="15:56:38.547+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="15:56:38.547+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="15:56:38.562+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_PolicyAuthorizationFailure

{

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215638.578000+000";

PolicyNamespace = "\\\\WIN7ENTTEST1\\ROOT\\ccm\\Policy\\Machine\\RequestedConfig";

PolicySource = "SMS:FLK";

ProcessID = 1172;

ThreadID = 956;

};

]LOG]!><time="15:56:38.578+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">

<![LOG[Processing User assignments from 'SMS:FLK'. The new cookie is ''.]LOG]!><time="15:56:38.594+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="replyassignmentsendpoint.cpp:970">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsReceived

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";

DateTime = "20091204215638.594000+000";

ProcessID = 1172;

ReplyType = "Full";

ResourceName = "S-1-5-21-1459899864-4149357974-4185135662-1000";

ResourceType = "User";

ThreadID = 3504;

};

]LOG]!><time="15:56:38.594+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="event.cpp:525">

<![LOG[Received full policy update with 0 assignments]LOG]!><time="15:56:38.609+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="replyassignmentsendpoint.cpp:1429">

<![LOG[Cleaning policy for 'SMS:FLK' in '\\WIN7ENTTEST1\ROOT\ccm\Policy\S_1_5_21_1459899864_4149357974_4185135662_1000\RequestedConfig' ()]LOG]!><time="15:56:38.609+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="policyutil.cpp:6912">

 

 

 

Server Logs

 

MP_Status on Server:

 

<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN7ENTTEST1]LOG]!><time="06:56:49.742+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4996" file="stattran.cpp:1565">

<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\VUN2V116.SVF"]LOG]!><time="06:56:49.742+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4996" file="stattran.cpp:959">

<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN2K8R2-1]LOG]!><time="07:03:48.867+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4592" file="stattran.cpp:1565">

<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\JVC4DNHW.SVF"]LOG]!><time="07:03:48.867+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4592" file="stattran.cpp:959">

<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN7ENTTEST1]LOG]!><time="07:56:49.837+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4772" file="stattran.cpp:1565">

<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\3NNLAQ7G.SVF"]LOG]!><time="07:56:49.838+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4772" file="stattran.cpp:959">

<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN2K8R2-1]LOG]!><time="08:03:48.931+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4892" file="stattran.cpp:1565">

<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\AOVFDCRT.SVF"]LOG]!><time="08:03:48.932+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4892" file="stattran.cpp:959">

 

 

 

 

CAS.LOG on server:

<![LOG[GetLogonUserSid failed at GetTokenSids 0x800703f0]LOG]!><time="08:27:32.801+360" date="12-02-2009" component="ContentAccess" context="" type="2" thread="6432" file="contentaccessservice.cpp:202">

 

 

PolicyAgent.log on server:

<![LOG[Requesting Machine policy assignments]LOG]!><time="08:03:48.394+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5636" file="requestassignmentstask.cpp:1448">

<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="08:03:48.400+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5636" file="requestassignmentstask.cpp:1508">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsRequested

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140348.483000+000";

ProcessID = 5200;

ResourceName = "WIN2K8R2-1";

ResourceType = "Machine";

ThreadID = 5636;

};

]LOG]!><time="08:03:48.484+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5636" file="event.cpp:525">

<![LOG[Processing Machine assignments from 'SMS:FLK'. The new cookie is '2009-12-06 17:00:33.170'.]LOG]!><time="08:03:48.625+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="replyassignmentsendpoint.cpp:970">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsReceived

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140348.626000+000";

ProcessID = 5200;

ReplyType = "Full";

ResourceName = "WIN2K8R2-1";

ResourceType = "Machine";

ThreadID = 5636;

};

]LOG]!><time="08:03:48.626+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">

<![LOG[Raising event:

 

instance of CCM_ServiceHost_CertRetrieval_Status

{

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140348.632000+000";

HRESULT = "0x00000000";

ProcessID = 5200;

ThreadID = 5636;

};

]LOG]!><time="08:03:48.632+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">

<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="08:03:48.652+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="08:03:48.655+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="08:03:48.660+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">

<![LOG[Raising event:

 

instance of CCM_ServiceHost_CertRetrieval_Status

{

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140348.676000+000";

HRESULT = "0x00000000";

ProcessID = 5200;

ThreadID = 5636;

};

]LOG]!><time="08:03:48.676+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">

<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="08:03:48.695+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="08:03:48.698+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">

<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="08:03:48.703+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_PolicyAuthorizationFailure

{

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140348.705000+000";

PolicyNamespace = "\\\\WIN2K8R2-1\\ROOT\\ccm\\Policy\\Machine\\RequestedConfig";

PolicySource = "SMS:FLK";

ProcessID = 5200;

ThreadID = 5636;

};

]LOG]!><time="08:03:48.705+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">

<![LOG[Requesting User policy assignments for 'S-1-5-21-2157139612-4035527790-3516504348-500']LOG]!><time="08:03:49.422+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5912" file="requestassignmentstask.cpp:1452">

<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="08:03:49.432+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5912" file="requestassignmentstask.cpp:1508">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsRequested

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140349.541000+000";

ProcessID = 5200;

ResourceName = "S-1-5-21-2157139612-4035527790-3516504348-500";

ResourceType = "User";

ThreadID = 5912;

};

]LOG]!><time="08:03:49.541+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5912" file="event.cpp:525">

<![LOG[Processing User assignments from 'SMS:FLK'. The new cookie is ''.]LOG]!><time="08:03:49.670+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="replyassignmentsendpoint.cpp:970">

<![LOG[Raising event:

 

instance of CCM_PolicyAgent_AssignmentsReceived

{

AuthorityName = "SMS:FLK";

ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";

DateTime = "20091207140349.671000+000";

ProcessID = 5200;

ReplyType = "Full";

ResourceName = "S-1-5-21-2157139612-4035527790-3516504348-500";

ResourceType = "User";

ThreadID = 4892;

};

]LOG]!><time="08:03:49.671+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="event.cpp:525">

<![LOG[Received full policy update with 0 assignments]LOG]!><time="08:03:49.673+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="replyassignmentsendpoint.cpp:1429">

<![LOG[Cleaning policy for 'SMS:FLK' in '\\WIN2K8R2-1\ROOT\ccm\Policy\S_1_5_21_2157139612_4035527790_3516504348_500\RequestedConfig' ()]LOG]!><time="08:03:49.673+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="policyutil.cpp:6912">

[Peter van der Woude]

The image that you use, is that created in a different domain? If so, then take a look here: http://www.petervanderwoude.nl/post/Prepare-ConfigMgr-Client-for-Capture-doesne28099t-remove-the-AllowedRootCAHashCode-value.aspx

[smokey75]

Thanks for the reply Peter. I've come across many helpful posts by you as I worked through other issues (wow .. this stuff is hard ....). I really appreciate the help.

 

Unfortunately, I did not take this image from another domain. It was a new build of Win 7 running inside VMWare. I did connect to the corp licensing server to get the license right after install, but did not join any domains, etc. at that time. I went ahead and removed that reg key just to be safe and am re-installing the CCM client now, but don't have high hopes that was the issue.

 

It looks like the base communication is in place since I'm getting the hardware/software inventory so I think the certs should be okay, but wouldn't surprise if there was something hiding somewhere.

 

Looking for some help in what steps I should take to troubleshoot the issue in general. If I'm getting hard/software inventory, does that mean communication is working correctly ... at least on the LAN (I'm scared to even try Internet based management, but that will be my next steps once this is worked through ...)?

[Peter van der Woude]

I know that setting up a Site in Native Mode can be really frustrating... and when I am looking at the first error that you mentioned Signature verification failed for PolicyAssignmentID it looks like you've got some certificate problems...

[smokey75]

That's the first thing I thought of too, but every test I've run seems to work okay. Do you know of a way to test end-to-end that the certs are correct? Looking manually, I have the root cert, client certs, etc. all where they need to be.

 

I noticed this just now in the windowsupdate.log that might be helpful ... Looking at another site, they mention something about this issue being fixed in WSUS 3.0 SP2, but I do have that version installed so not sure what is happening. Doing some additional digging ...

 

2009-12-07 13:42:54:857 912 914 Agent *************

2009-12-07 13:42:54:857 912 914 Agent ** START ** Agent: Finding updates [CallerId = CcmExec]

2009-12-07 13:42:54:857 912 914 Agent *********

2009-12-07 13:42:54:857 912 914 Agent * Include potentially superseded updates

2009-12-07 13:42:54:857 912 914 Agent * Online = Yes; Ignore download priority = Yes

2009-12-07 13:42:54:857 912 914 Agent * Criteria = "(DeploymentAction=* AND Type='Software') OR (DeploymentAction=* AND Type='Driver')"

2009-12-07 13:42:54:857 912 914 Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed

2009-12-07 13:42:54:857 912 914 Agent * Search Scope = {Machine}

2009-12-07 13:42:54:888 1644 730 COMAPI <<-- SUBMITTED -- COMAPI: Search [ClientId = CcmExec]

2009-12-07 13:42:56:951 912 914 PT +++++++++++ PT: Synchronizing server updates +++++++++++

2009-12-07 13:42:56:951 912 914 PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = https://WIN2K8R2-1.SETEST.LOCAL:443/ClientWebService/client.asmx

2009-12-07 13:42:57:029 912 914 PT WARNING: Cached cookie has expired or new PID is available

2009-12-07 13:42:57:029 912 914 PT Initializing simple targeting cookie, clientId = 70d7491c-ed70-41c0-8efd-39b325ec528b, target group = , DNS name = win7enttest1.setest.local

2009-12-07 13:42:57:029 912 914 PT Server URL = https://WIN2K8R2-1.SETEST.LOCAL:443/SimpleAuthWebService/SimpleAuth.asmx

2009-12-07 13:42:57:060 912 914 Misc WARNING: Send failed with hr = 80072f0c.

2009-12-07 13:42:57:060 912 914 Misc WARNING: SendRequest failed with hr = 80072f0c. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>

2009-12-07 13:42:57:060 912 914 PT + Last proxy send request failed with hr = 0x80072F0C, HTTP status code = 0

2009-12-07 13:42:57:060 912 914 PT + Caller provided credentials = No

2009-12-07 13:42:57:060 912 914 PT + Impersonate flags = 0

2009-12-07 13:42:57:060 912 914 PT + Possible authorization schemes used =

2009-12-07 13:42:57:060 912 914 PT WARNING: GetAuthorizationCookie failure, error = 0x80072F0C, soap client error = 5, soap error code = 0, HTTP status code = 200

2009-12-07 13:42:57:060 912 914 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x80072f0c

2009-12-07 13:42:57:060 912 914 PT WARNING: PopulateAuthCookies failed: 0x80072f0c

2009-12-07 13:42:57:060 912 914 PT WARNING: RefreshCookie failed: 0x80072f0c

2009-12-07 13:42:57:060 912 914 PT WARNING: RefreshPTState failed: 0x80072f0c

2009-12-07 13:42:57:060 912 914 PT WARNING: Sync of Updates: 0x80072f0c

2009-12-07 13:42:57:060 912 914 PT WARNING: SyncServerUpdatesInternal failed: 0x80072f0c

2009-12-07 13:42:57:060 912 914 Agent * WARNING: Failed to synchronize, error = 0x80072F0C

2009-12-07 13:42:57:060 912 914 Agent * WARNING: Exit code = 0x80072F0C

2009-12-07 13:42:57:060 912 914 Agent *********

2009-12-07 13:42:57:060 912 914 Agent ** END ** Agent: Finding updates [CallerId = CcmExec]

2009-12-07 13:42:57:060 912 914 Agent *************

2009-12-07 13:42:57:060 912 914 Agent WARNING: WU client failed Searching for update with error 0x80072f0c

2009-12-07 13:42:57:076 1644 730 COMAPI >>-- RESUMED -- COMAPI: Search [ClientId = CcmExec]

2009-12-07 13:42:57:076 1644 730 COMAPI - Updates found = 0

2009-12-07 13:42:57:076 1644 730 COMAPI - WARNING: Exit code = 0x00000000, Result code = 0x80072F0C

2009-12-07 13:42:57:076 1644 730 COMAPI ---------

2009-12-07 13:42:57:076 1644 730 COMAPI -- END -- COMAPI: Search [ClientId = CcmExec]

2009-12-07 13:42:57:076 1644 730 COMAPI -------------

2009-12-07 13:42:57:076 1644 730 COMAPI WARNING: Operation failed due to earlier error, hr=80072F0C

2009-12-07 13:42:57:076 1644 730 COMAPI FATAL: Unable to complete asynchronous search. (hr=80072F0C)

2009-12-07 13:43:02:478 912 914 Report REPORT EVENT: {85CF9A86-9CC0-4887-BE0F-6843520641EF} 2009-12-07 13:42:57:060-0600 1 148 101 {00000000-0000-0000-0000-000000000000} 0 80072f0c CcmExec Failure Software Synchronization Windows Update Client failed to detect with error 0x80072f0c.

2009-12-07 13:43:04:121 912 914 Report CWERReporter::HandleEvents - WER report upload completed with status 0x8

2009-12-07 13:43:04:121 912 914 Report WER Report sent: 7.4.7600.226 0x80072f0c 00000000-0000-0000-0000-000000000000 Scan 101 Managed

2009-12-07 13:43:04:121 912 914 Report CWERReporter finishing event handling. (00000000)

[Peter van der Woude]

I've got no clue if there is any way to tell, whether or not the certs are correct... The only thing you can do is check with the Microsoft documentation... Most of the times when you get the error Signature verification failed for PolicyAssignmentID it has to do with a mismatch between the Client certificate and the Site Signing Certificate.

[smokey75]

Hmm... I followed MS's own guide on step-by-step how to install the certs so they should have matched up correctly. Going to try rebuilding from scratch and get hybrid mode working first then try to get Native mode as then I can at least narrow down issues better. With this level of complexity and lack of solid feedback in logs, it's no wonder there are so many other patching solutions out there ...