USMT fails

[clane]

I am having trouble getting my USMT task sequence to work.

I am running SCCM R2 with SP2 on Server 2008 SP2 with SQL2005 SP3

when I run this task it fails within seconds with the error code 0x80004002.

I have tried several fixes, starting with removing KB 974571 on the server and client, then re-installing the PXE service, system health validator and distribution points as well as uninstalling and re-installing the network access protection client agent but nothing works.

Can anyone help?

I have the attached the only log I have that shows any information about this issue (based on the timestamp).

smsts-20101001-142057.log

[thadkew]

Certs aren't correct.

What I've done for our environment is add a step to the advertisement that resets the client certificate first, then performs the capture or the restore.

It's a little bit of a hassle, but it works.

First step is to create a new Program that will reset the cert.

Create a DelTrk.vbs file and make that your program. Copy and paste this into it.

 

---------------------------------------

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

' MICROSOFT LEGAL STATEMENT FOR PFE SCRIPTS/CODE

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

' This Sample Code is provided for the purpose of illustration only and is not

' intended to be used in a production environment.

'

' THIS SAMPLE CODE AND ANY RELATED INFORMATION ARE PROVIDED "AS IS" WITHOUT WARRANTY

' OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED

' WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.

'

' We grant You a nonexclusive, royalty-free right to use and modify the Sample Code

' and to reproduce and distribute the object code form of the Sample Code, provided

' that You agree:

' (i) to not use Our name, logo, or trademarks to market Your software product

' in which the Sample Code is embedded;

' (ii) to include a valid copyright notice on Your software product in which

' the Sample Code is embedded; and

' (iii) to indemnify, hold harmless, and defend Us and Our suppliers from and

' against any claims or lawsuits, including attorneys’ fees, that arise

' or result from the use or distribution of the Sample Code.

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

 

 

'The following script sample removes the current Trusted Key Information from WMI

'on the machine it runs on.

 

Call DelKey(".")

 

 

Sub DelKey(strComputer)

On Error Resume Next

 

Dim oWBEMCon

Dim WbemLS

 

Set oWBEMCon = CreateObject("WbemScripting.SWbemLocator")

Set WbemLS = oWBEMCon.ConnectServer(strComputer, "root\ccm\LocationServices")

 

 

If Err.Number <> 0 Then

' objDocument.Writeln "Submitting error for " & strComputer & " to logfile. <br>"

Exit Sub

End If

 

 

Set clTrustedRootKey = WbemLS.Get("TrustedRootKey").SpawnInstance_()

clTrustedRootKey.TrustedRootKey = ""

clTrustedRootKey.Put_

 

strKey = clTrustedRootKey.TrustedRootKey

 

' Call a sub to restart the service SMS Agent Host Service

 

Call RestartService(strComputer, oConn, objDocument)

 

End Sub

 

Sub RestartService(strComputer, oConn, objDocument)

 

'objDocument.Writeln "Attempting to restart the SMS Agent Host Service on " & strComputer & "<br>"

Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

 

Set colServiceList = objWMIService.ExecQuery _

("Select * from Win32_Service where Name='CcmExec'")

For each objService in colServiceList

errReturn = objService.StopService()

Wscript.Sleep 60000

errReturn = objService.StartService()

Next

 

'objDocument.Writeln "Waiting for service to stop on " & strComputer & "<br>"

'Wscript.Sleep 120000

'objDocument.Writeln "Service Stop code " & errReturn & "<br>"

 

'objDocument.Writeln "Attempting to restart the SMS Agent Host Service on " & strComputer & "<br>"

'Set colServiceList = objWMIService.ExecQuery _

'("Select * from Win32_Service where Name='CcmExec'")

'For each objService in colServiceList

'errReturn = objService.StartService()

'Next

 

End Sub

 

-----------------------------------------------------------

 

 

In your advertisement, set this to always run before the USMT task.

We stopped that practice because I went ahead and sent it out enterprise wide. (The report will show failed, but that's because it restarts the SCCM service and never reports back correctly).

The MS guy that gave this to us said that the cert failed for some reason and this will cause the client to get an updated one.

 

Hope it helps. It seems to be working for us.

[clane]

Thanks. I'll try this during the week. I am going to speak to the techs at the other site and just roll it out to the entire site as you did.