Deploying SCCM 2007 client using SUP?

[GopherRob]

We recently installed a fresh SCCM 2007 site on our existing WSUS 3.0 SP1 server. To get SCCM to properly exist with WSUS, we also did a fresh install of WSUS 3.0 SP1 and cancelled at the config screen as instructed.

 

We don't want to disable the windows firewall or open a broad range of ports to install the new SCCM client, so we are having issues pushing the client. This caused me to look at deploying it through the SUP, but ever since performing the fresh install of WSUS on the SCCM server, client machines (with the old SMS 2003 client) are not commuticating with the WSUS portion of SCCM. On client machines I am seeing the following error messages in the Windowsupdate.log file.

 

2010-03-25 12:08:07:307 1164 780 PT WARNING: Cached cookie has expired or new PID is available

2010-03-25 12:08:07:307 1164 780 PT Initializing simple targeting cookie, clientId = 62cb241f-4ebb-4022-adb4-dae37fe97b7be, target group = , DNS name = testbox.domain.com

2010-03-25 12:08:07:307 1164 780 PT Server URL = http://WsusServerName/SimpleAuthWebService/SimpleAuth.asmx

2010-03-25 12:08:07:323 1164 780 PT WARNING: GetAuthorizationCookie failure, error = 0x80244019, soap client error = 10, soap error code = 0, HTTP status code = 404

2010-03-25 12:08:07:323 1164 780 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x80244019

2010-03-25 12:08:07:323 1164 780 PT WARNING: PopulateAuthCookies failed: 0x80244019

2010-03-25 12:08:07:323 1164 780 PT WARNING: RefreshCookie failed: 0x80244019

2010-03-25 12:08:07:323 1164 780 PT WARNING: RefreshPTState failed: 0x80244019

2010-03-25 12:08:07:323 1164 780 PT WARNING: PTError: 0x80244019

2010-03-25 12:08:07:323 1164 780 Report WARNING: Reporter failed to upload events with hr = 80244019.

 

I have changed our GPO for WSUS from http://WSUSServerName to http://WSUSServerName:8530 since port 8530 is what the SUP is configured to use, where our old WSUS was using 80.

 

Despite forcing a group policy update and running wuauclt.exe /detectnow, this error persists.

 

Any ideas and input would be appreciated, as we need to get the new sccm client out on the domain ASAP.

 

Thanks!

[anyweb]

you do raise some interesting points, and i'm interested to see where you get with this

 

however, for me client push *manually via wizard or site wide* would be my preferred way,

 

you do realise you don't have to take the firewall down but just to add the following exceptions on the client ?

 

Client Push Installation

In order to successfully use client push to install the Configuration Manager 2007 client, you must add the following as exceptions to the Windows Firewall:

 

File and Printer Sharing

 

 

Windows Management Instrumentation (WMI)

[GopherRob]

you do raise some interesting points, and i'm interested to see where you get with this

 

however, for me client push *manually via wizard or site wide* would be my preferred way,

 

you do realise you don't have to take the firewall down but just to add the following exceptions on the client ?

I totally agree with you. I would much prefer to be able to manually push the client out in several waves, but I am yet to find a way to add WMI as a firewall exception on windows XP clients.

 

I did find this link, but it didn't seem to work when I first tried it.

 

http://support.microsoft.com/kb/875605

[anyweb]

is it xp sp2 or xp sp3 ?

[GopherRob]

is it xp sp2 or xp sp3 ?

SP3

[GopherRob]

I think I found our problem.

 

When the client is going to install it is looking for the sitename Default-First-Site-Name, which is how our SMS 2003 server was setup. HOwever, that is not how the boundary is set in SCCM 2007. How do I point it at the right place? Why is it going after the old site? I verified that SCCM published properly to AD's system management container.

 

<![LOG[==========[ ccmsetup started in process 2008 ]==========]LOG]!><time="19:00:15.612+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:8849">

<![LOG[Version: 4.0.6221.1000]LOG]!><time="19:00:15.612+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:1907">

<![LOG[GetAdaptersAddressess entry point is supported.]LOG]!><time="19:00:15.612+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="ccmiputil.cpp:118">

<![LOG[DhcpGetOriginalSubnetMask entry point not supported.]LOG]!><time="19:00:15.628+240" date="03-25-2010" component="ccmsetup" context="" type="2" thread="3780" file="ccmiputil.cpp:169">

<![LOG[Adapter {08232EFD-60A5-4CBF-BD26-615B9EC29DC9} is DHCP enabled. Checking quarantine status.]LOG]!><time="19:00:15.628+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="ccmiputil.cpp:509">

<![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="19:00:15.628+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="lsad.cpp:457">

<![LOG[Attempting to query AD for assigned site code]LOG]!><time="19:00:15.628+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="lsad.cpp:1766">

<![LOG[Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=169871576)(MSSMSRangedIPHigh>=169871576))))]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="lsad.cpp:1801">

<![LOG[Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.32.8.0)(mSSMSRoamingBoundaries=Default-First-Site-Name)))]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="lsad.cpp:1862">

<![LOG[Command line: "C:\WINDOWS\SoftwareDistribution\Download\Install\ccmsetup.exe" ]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:3941">

<![LOG[Ccmsetup was run without any user parameters specified. Assume AUTO sitecode and run without registering ccmsetup as a service.]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:3959">

<![LOG[CCMHTTPPORT: 80]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:7847">

<![LOG[CCMHTTPSPORT: 443]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:7862">

<![LOG[CCMHTTPSSTATE: 2147483648]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:7880">

<![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:7908">

<![LOG[FSP: ]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:7923">

<![LOG[No MP or source location has been explicitly specified. Trying to discover a valid content location...]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:4271">

<![LOG[Current directory is not a valid source location.]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:4288">

<![LOG[Looking for an MP source through SLP...]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:4303">

<![LOG[iPv6 entry points already initialized.]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="ccmiputil.cpp:75">

<![LOG[DHCP entry points already initialized.]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="ccmiputil.cpp:139">

<![LOG[Adapter {08232EFD-60A5-4CBF-BD26-615B9EC29DC9} is DHCP enabled. Checking quarantine status.]LOG]!><time="19:00:15.800+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="ccmiputil.cpp:509">

<![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="lsad.cpp:457">

<![LOG[Attempting to query AD for assigned site code]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="lsad.cpp:1766">

<![LOG[Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=169871576)(MSSMSRangedIPHigh>=169871576))))]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="lsad.cpp:1801">

<![LOG[Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.32.8.0)(mSSMSRoamingBoundaries=Default-First-Site-Name)))]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="0" thread="3780" file="lsad.cpp:1862">

<![LOG[Couldn't find an MP source through SLP.]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:4315">

<![LOG[No valid source or MP locations could be indentified to download content from.Ccmsetup.exe cannot continue.]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="3" thread="3780" file="ccmsetup.cpp:4326">

<![LOG[invalid ccmsetup command line: "C:\WINDOWS\SoftwareDistribution\Download\Install\ccmsetup.exe" ]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="3" thread="3780" file="ccmsetup.cpp:4405">

<![LOG[A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:9169">

<![LOG[A Fallback Status Point has not been specified. Message with STATEID='307' will not be sent.]LOG]!><time="19:00:15.815+240" date="03-25-2010" component="ccmsetup" context="" type="1" thread="3780" file="ccmsetup.cpp:9169">

[anyweb]

in your site settings, how are your boundaries setup for this site ?

[GopherRob]

in your site settings, how are your boundaries setup for this site ?

the new site is an active directory site with the site name as our domain name.

[GopherRob]

Just out of curiosity, I tried manually installing the client on another machine with the following command:

 

ccmsetup.exe /mp:SCCM SMSSITECODE=XXX, where SCCM is our Site Server and MP, and XXX is our sitename, and it went and uninstalled the old client, installed the new one, and now reports to the site properly.

 

In the systems management container of AD, it looks like everything is right. It lists:

 

-SMS-MP-XXX-SCCM

-SMS-Site-XXX

-SMS-SLP-XXX-SCCM

 

I even tried re-publishing the site, and all 3 attributes returned shortly after doing so.

 

So the question is, why won't machines on the domain see it?

[anyweb]

did you at any stage create a client from definition package ?

[GopherRob]

did you at any stage create a client from definition package ?

No, I did not. I'm not sure how that would help if the client machines with the old SMS 2003 clients still are not seeing the new site.