SCCM 2012 Permission Errors

[FEJustinTH]

I believe I have an issue with permissions but I can write to the folders that are in question. Here are some screen shots of the errors I am getting. I am logged in as the admin and I have tried my domain admin account too.

 

I installed MDT, and the PXE issues started so I uninstalled it and then I still could not PXE boot so I started poking around and found all these errors.

 

I have used this same Installer + Image + Boot Images to push OSD many times.

 

Adding a Operating System Installer:

 

Modifying an existing working installer (Click Browse - Click OK - Click Apply):

 

 

Adding new Operating System Image: (From a known WIM that worked)

 

 

Modifying existing Operating System Image:

 

 

Updating a boot image that I have been using for multiple successful OSD:

 

Error: Boot image to update:

• Microsoft Windows PE (x64)

 

Error: Actions to perform:

• Add ConfigMgr binaries

• Enable Windows PE command line support

• Add drivers

 

Error: The wizard detected the following problems when updating the boot image.

• The SMS Provider reported an error.: ConfigMgr Error Object:

instance of SMS_ExtendedStatus

{

• Description = "Failed to insert OSD binaries into the WIM file";

• ErrorCode = 2152205056;

• File = "e:\\nts_sccm_release\\sms\\siteserver\\sdk_provider\\smsprov\\sspbootimagepackage.cpp";

• Line = 4318;

• ObjectInfo = "CSspBootImagePackage::PreRefreshPkgSrcHook";

• Operation = "ExecMethod";

• ParameterInfo = "SMS_BootImagePackage.PackageID=\"FEM0000E\"";

• ProviderName = "WinMgmt";

• StatusCode = 2147749889;

};

 

Share Permissions so the folder where everything is kept:

 

 

Administrator Properties from Local Users and Groups:

 

[FEJustinTH]

Should I just run a site reset and go through the wizard? I have tried going through all of the permissions I can think of, given everyone write permissions. I tried removing PXE and rebooting and enabling it again. I tried taking the role DP from the site and restarting and adding it back and deleteing the RemoteInstall folder. I then went back and distributed everything to the DP and still no luck.

[anyweb]

are those file permissions set on the software folder in your screenshot, or somewhere else ? don't do a site reset, fix your permissions, are you logged on with the same account that you installed Configuration Manager with ?

[FEJustinTH]

are those file permissions set on the software folder in your screenshot, or somewhere else ? don't do a site reset, fix your permissions

 

Thank you for responding, I greatly apprecaite it. Those file permissions are set on the software folder.

 

This problem started after I installed MDT, so I uninstalled it and it did not help. I dont know if that was just a coincidence.

 

Yes, I am logged on with the same account that we set config manager up with.

[FEJustinTH]

I have tried restarting WMI and WDS without any luck too, any other idea's?

 

I think it has something to do with installing MDT but I followed anyweb's guide to install it but I started having pxe boot issues so I uninstalled it and then these errors started...

 

Site Permissions:

 

[FEJustinTH]

Site reset did not fix it

[FEJustinTH]

Some errors on Configuration Manager Status - Site Status - Management Point:

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/25/2012 2:29:17 PM INBA-SCCM.flanderselectric.com SMS_WSUS_CONTROL_MANAGER 7000 WSUS Control Manager failed to configure proxy settings on WSUS Server "INBA-SCCM.flanderselectric.com". Possible cause: WSUS Server version 3.0 SP2 or above is not installed or cannot be contacted. Solution: Verify that the WSUS Server version 3.0 SP2 or greater is installed. Verify that the IIS ports configured in the site are same as those configured on the WSUS IIS website.You can receive failure because proxy is set but proxy name is not specified or proxy server port is invalid.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/25/2012 2:18:33 PM INBA-SCCM.FLANDERSELECTRIC.COM SMS_SITE_SQL_BACKUP 4959 Site Component Manager successfully installed this component. However the SQL Server Principal Name (SPN) could not be validated in Active Directory. Possible cause: The MSSQL Service is running under a user account, instead of the computer account. In this case, SQL does not publish its own SPN. Solution: Manually publish the SQL Server SPN in Active Directory. The component will operate correctly. However remote site systems requiring access to SQL Server (i.e. management points) might not be able to access the SQL database. Refer to your ConfigMgr Documentation or the Microsoft Knowledge Base for further information.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/25/2012 2:15:05 PM INBA-SCCM.flanderselectric.com SMS_EXECUTIVE 578 Could not read registry key "HKEY_LOCAL_MACHINE\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE\Yield Configuration" on computer INBA-SCCM. The operating system reported error 2: The system cannot find the file specified.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/25/2012 2:14:05 PM INBA-SCCM.flanderselectric.com SMS_EXECUTIVE 578 Could not read registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Components\SMS_EXECUTIVE" on computer INBA-SCCM.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/24/2012 4:28:23 PM INBA-SCCM.flanderselectric.com SMS_HIERARCHY_MANAGER 3303 Hierarchy Manager cannot connect to the site database. Possible cause: SQL Server problem. Solution: 1. Review the immediately preceding status messages from this component about SQL Server errors. 2. Verify that this computer can reach the SQL Server computer. 3. Verify that SQL Server services are running. 4. Verify that the site server computer account can access the site database. 5. Verify that the site database, transaction log, and tempdb are not full. 6. If the problem persists, check the SQL Server error logs.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/24/2012 3:36:43 PM INBA-SCCM.flanderselectric.com SMS_PORTALWEB_CONTROL_MANAGER 8000 Portal Web Site Control Manager detected PORTALWEB is not responding to HTTP requests. The http status code and text is 401, Unauthorized. Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which PORTALWEB is configured to communicate. Solution: Verify that the designated Web Site is configured to use the same ports which PORTALWEB is configured to use. Possible cause: The designated Web Site is disabled in IIS. Solution: Verify that the designated Web Site is enabled, and functioning properly. For more information, refer to Microsoft Knowledge Base.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/24/2012 10:01:06 AM INBA-SCCM.flanderselectric.com SMS_DISTRIBUTION_MANAGER 2391 Distribution manager failed to connect to the distribution point ["Display=\\INBA-SCCM.flanderselectric.com\"]MSWNET:["SMS_SITE=FEM"]\\INBA-SCCM.flanderselectric.com\. Check your network and firewall settings.

 

Severity Type Site code Date / Time System Component Message ID Description

Error Milestone FEM 7/20/2012 8:19:36 AM INBA-SCCM.FLANDERSELECTRIC.COM SMS_HIERARCHY_MANAGER 3353 Hierarchy Monitoring detected that the ConfigMgr SQL Server INBA-SCCM.flanderselectric.com ports 1433,4022, are not active on Firewall exception.

[anyweb]

are you sure you followed my guides step by step, if so you wouldnt have any firewall PORT issues for sql, i can remote into your box tomorrow and take a look if you want.

[FEJustinTH]

are you sure you followed my guides step by step, if so you wouldnt have any firewall PORT issues for sql, i can remote into your box tomorrow and take a look if you want.

 

We had a rep come in and install everything, and get it all running. I followed your guide for the MDT portion of it only, but after I made a TS I started getting PXE boot errors and could not even PXE boot to the orginal non MDT TS.

 

I would greatly appreciate it if you would remote in and take a look.

 

Another piece of information, I can create applications just fine.

[FEJustinTH]

Well I fixed it, seems that somehow Windows AIK got uninstalled, once I reinstalled it everything was fixed.