using System Center 2012 Configuration Manager - Part 4. Adding roles and configuring custom Client Device Settings and custom Client User Settings

[kartook]

Thanks for your answer .

 

Nope i am not PKI installed ... How to make HTTPS to HTTP ?

 

I checked appcatalog found some thing refer a Screenshot ..

 

Thanks for your time and help

[kartook]

I installed PKI infrastructure and confiogured . ALl clients installed certificate now .

 

After that error logs below :

 

 

CcmSetup failed with error code 0x80004004 ccmsetup 10/11/2012 4:27:47 PM 4008 (0x0FA8)

==========[ ccmsetup started in process 3040 ]========== ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CcmSetup version: 5.0.7711.0000 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Running on OS (6.1.7601). Service Pack (1.0). SuiteMask = 272. Product Type = 3 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Ccmsetup command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required. ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Command line: "C:\Windows\ccmsetup\ccmsetup.exe" /runservice /config:MobileClient.tcf ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

SslState value: 224 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CCMHTTPPORT: 80 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CCMHTTPSPORT: 443 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CCMHTTPSSTATE: 63 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CCMHTTPSCERTNAME: ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

FSP: SCCM.DOMAIN.LOCAL ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CCMCERTISSUERS: CN=domain-ADS-CA; DC=domain; DC=local ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

CCMFIRSTCERT: 1 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Config file: C:\Windows\ccmsetup\MobileClientUnicode.tcf ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Retry time: 10 minute(s) ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

MSI log file: C:\Windows\ccmsetup\client.msi.log ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

MSI properties: INSTALL="ALL" SMSSITECODE="P01" CCMHTTPPORT="80" CCMHTTPSPORT="443" CCMHTTPSSTATE="63" FSP="SCCM.DOMAIN.LOCAL" CCMCERTISSUERS="CN=domain-ADS-CA; DC=domain; DC=local" CCMFIRSTCERT="1" ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Source List: ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

\\SCCM.domain.local\SMSClient ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

\\SCCM.DOMAIN.LOCAL\SMSClient ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

MPs: ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

HTTPS://SCCM.domain.local ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

No version of the client is currently detected. ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Updated security on object C:\Windows\ccmsetup\. ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Sending Fallback Status Point message to 'SCCM.DOMAIN.LOCAL', STATEID='100'. ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Failed to get client version for sending messages to FSP. Error 0x80041010 ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

Params to send FSP message '5.0.7711.0000 Deployment ' ccmsetup 10/11/2012 4:27:59 PM 3104 (0x0C20)

State message with TopicType 800 and TopicId {51DDA449-6DF8-42E8-ABDC-4EBD6816342A} has been sent to the FSP FSPStateMessage 10/11/2012 4:27:59 PM 3104 (0x0C20)

Running as user "SYSTEM" ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Detected 46755 MB free disk space on system drive. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Ccmsetup is being restarted due to an administrative action. Installation files will be reset and downloaded again. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Only one MP HTTPS://SCCM.domain.local is specified. Use it. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Searching for DP locations from MP(s)... ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Current AD site of machine is Default-First-Site-Name LocationServices 10/11/2012 4:27:59 PM 1456 (0x05B0)

Local Machine is joined to an AD domain LocationServices 10/11/2012 4:27:59 PM 1456 (0x05B0)

Current AD forest name is domain.local, domain name is domain.local LocationServices 10/11/2012 4:27:59 PM 1456 (0x05B0)

DhcpGetOriginalSubnetMask entry point is supported. LocationServices 10/11/2012 4:27:59 PM 1456 (0x05B0)

Begin checking Alternate Network Configuration LocationServices 10/11/2012 4:27:59 PM 1456 (0x05B0)

Finished checking Alternate Network Configuration LocationServices 10/11/2012 4:27:59 PM 1456 (0x05B0)

Sending message body '<ContentLocationRequest SchemaVersion="1.00">

<ClientPackage/>

<ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseInternetDP="0">

<ADSite Name="Default-First-Site-Name"/>

<Forest Name="domain.local"/>

<Domain Name="domain.local"/>

<IPAddresses>

<IPAddress SubnetAddress="172.16.89.0" Address="172.16.89.110"/>

</IPAddresses>

</ClientLocationInfo>

</ContentLocationRequest>

' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Sending message header '<Msg SchemaVersion="1.1"><ID>{296ED73E-0DAA-4451-B465-76BAC357B430}</ID><SourceHost>SCCM</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:SCCM:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>HTTPS://SCCM.domain.local</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2012-10-11T10:57:59Z</SentTime><Body Type="ByteRange" Offset="0" Length="1060"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

CCM_POST 'HTTPS://SCCM.domain.local/ccm_system/request' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Begin searching client certificates based on Certificate Issuers ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Certificate Issuer 1 [CN=domain-ADS-CA; DC=domain; DC=local] ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Finding certificate by issuer chain returned error 80092004 ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Completed searching client certificates based on Certificate Issuers ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Unable to find any Certificate based on Certificate Issuers ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Locate client certificate bypassing Certificate Issuers restriction ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Begin searching client certificates based on Certificate Issuers ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Completed searching client certificates based on Certificate Issuers ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Begin to select client certificate ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

1 certificate(s) found in the 'MY' certificate store. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Only one certificate present in the certificate store. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Begin validation of Certificate [Thumbprint 0CF77F46D90062E7DC206FC6B7C343E8D06B9E0D] issued to 'SCCMcert' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

The Certificate [Thumbprint 0CF77F46D90062E7DC206FC6B7C343E8D06B9E0D] issued to 'SCCMcert' doesn't have 'Client Authentication' capability. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Completed validation of Certificate [Thumbprint 0CF77F46D90062E7DC206FC6B7C343E8D06B9E0D] issued to 'SCCMcert' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

GetSSLCertificateContext failed with error 0x800b0110 ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Sending Fallback Status Point message to 'SCCM.DOMAIN.LOCAL', STATEID='315'. ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Failed to get client version for sending messages to FSP. Error 0x80041010 ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Params to send FSP message '5.0.7711.0000 Deployment Error 0x800b0110' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

State message with TopicType 800 and TopicId {6100305D-B382-4EF0-BCCE-ACA23CC77744} has been sent to the FSP FSPStateMessage 10/11/2012 4:27:59 PM 1456 (0x05B0)

GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'HTTPS://SCCM.domain.local/ccm_system/request' ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

GetDPLocations failed with error 0x800b0110 ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Failed to get DP locations as the expected version from MP 'HTTPS://SCCM.domain.local'. Error 0x800b0110 ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

Next retry in 10 minute(s)... ccmsetup 10/11/2012 4:27:59 PM 1456 (0x05B0)

[arindellster]

Hello

I have set up a new SCC 2012 heirarchy. While trying to deploy the client settings and wehen I right click on it, I do not see the deploy option. The only option available there is PROPERTIES, with which i can alter the properties, I do not see the deploy option or any other option. Do let me know if you want to see the screenshot for the same.

What am I doing wrong?????????

[anyweb]

yes please include a screenshot of what you are talking about

[kartook]

I tried to install manually

 

ccmsetup.exe \SMSSITECODE=P01 DNSSUFFIX=domain.localhost

 

 

Client installed but its not reporting on my SCCM ????

[anyweb]

I tried to install manually

 

ccmsetup.exe \SMSSITECODE=P01 DNSSUFFIX=domain.localhost

 

 

Client installed but its not reporting on my SCCM ????

 

hi Kartook,

do you need to have your site configured in PKI mode, if not, then why not follow the guide as written and use regular distribution points (HTTP) instead of HTTPS

[kartook]

I love follow your guide as it it is ......

 

11 October 2012 - 08:36 AM .

 

can you i shared a Image which is graed out ... HTTPS and HTTP ..

 

OKIE .... I think i made something wrong installing on WIndows 2008 R2 -4 bit ??????

 

I am going to start Lab installation from scarch ....

[Pfeiffer]

^{When I get open the Application Catalogue and search for optional software I always get prompted for credentials can any one help with this}

 

I had the same issue. I found adding the server to the Local Intranet Zone did the trick. I am still not certain why Automatically Detect Intranet zone is not picking this up.

 

http://www.cb-net.co.uk/microsoft-articles/34-configmgr/2039-configmgr-application-catalog-login-popup-cross-domain

[vpn]

Greetings.

 

I have come to the point were I feel the need to ask a question here in the great forum.

 

I have followed the guide for installing SCCM, with a CAS and a Primary server.

My problem is that I am missing a few applications in IIS on my Primary server (SCCM) after everything is done, and thus my clients can not access them.

I have not been able to locate where theese should have been created, and what causes them to not be created.

 

On my Windows 2008 R2 server with IIS7 i have the following content under default website.

aspnet_client, ClientWebService, CMApplicationCatalog, CMApplicationCatalogSvc, SelfUpdate, SMS_DP_SMSPKG$, SMS_DP_SMSSIG$, SMS_FSP

 

I should also have had, but are missing the following: CCM_CLIENT, CCM_Incoming, CCM_System, CCM_System_WindowsAuth, SMS_MP, SMS_MP_WindowsAuth

 

As a result, i am getting a 404 error on the client install:

 

Sending message header '<Msg SchemaVersion="1.1"><ID>{03B79561-6E77-4C79-BB0E-092BDEE2E07F}</ID><SourceHost>VPN-W7</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:VPN-W7:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>http://SCCM.pp.local</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-01-03T07:24:49Z</SentTime><Body'>http://SCCM.pp.local</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-01-03T07:24:49Z</SentTime><Body Type="ByteRange" Offset="0" Length="1064"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>'

CCM_POST 'http://SCCM.pp.local/ccm_system/request'

Failed to receive ccm message response. Status code = 404

Failed to find DP locations with error 0x80004005, status code 404. Check next MP.

Only one MP http://SCCM.pp.local is specified. Use it.

Have already tried all MPs. Couldn't find DP locations.

GET 'http://SCCM.pp.local/CCM_Client/ccmsetup.cab'

Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 404)

DownloadFileByWinHTTP failed with error 0x80004005

 

I have been trough the logs and cant find anything that sheds any light on this, nor have I found info about this in the forums.

 

There is a lot of similar issues, but thoose are pointing to firewall, installation account, and other issues, and not to IIS itself.

 

Regards

VPN

[MASC&03]

Greetings,

 

I have a primary site test lab versus a CAS plus primary sites environment. Does it matter if the Application Catalog roles point towards the custom site specified for WSUS or the default site as in your guides?

 

thanks in advance