SCCM07 SP1: Problems with CfgMgr-Agent

[alittlelouder]

Hello

 

At first of all I have to say; u're tutorials rock, anyweb!

 

I've installed the SCCM07 more or less with ur guide, everything seems to work fine (No Error or anything like that). I only use the Domain Administrator as Account, I dont use the SMSadmin nor the SMSread (It's for testing only!).

 

I've created a boundary with my AD.

I've added a Client Package from Definition (Configuration Manager Client Upgrade).

I've configured the discovery-methods.

 

Thats more or less everything i did.

 

my environment looks like that:

srvadc01 - Win2k8 Ent x64 - Domaincontroller - Joined Domain

srvhyp01 - Win2k8 Ent x64 - Hyper-V Server - Joined Domain

srvsql01 - Win2k8 Ent x64 - SQL 2008 Enterprise Server - Joined Domain

srvsus01 - Win2k8 Ent x64 - WSUS Server - Joined Domain

srvscc01 - Win2k8 Ent x64 - SCCM07 SP1 Server - Joined Domain

pc01 - Win Vista SP1 Business x86 - Client1 - Joined Domain

pc02 - Win Vista SP1 Business x86 - Client2

Every Server/Client is on the same subnet, the firewalls are disabled and the domain admin is local admin.

 

If i right click on a client/server in a collection or in a query and choose "Install Client" the Wizard pops up, and afterwards the client doesnt install. Doesnt matter if it is a server or a client.

 

The SMS_MP_CONTROL_MANAGER has a warning saying something with the policy has been rejected................Access denied.

 

EDIT:

If i make an advertisment to deploy the Client Package it doesnt work too... =/

 

I'd really happy if any1 could help me...

Thanks a lot!

 

Regards

Lukas

[anyweb]

welcome and thanks for your kind words :-)

 

can you attach your SMS_MP_CONTROL_MANAGER log here please so that I can take a look at it ?

[alittlelouder]

Severity Type Site code Date / Time System Component Message ID Description

Warning Milestone DPL 31.03.2009 08:04:38 WIDDPLSCC01 SMS_MP_CONTROL_MANAGER 5447 MP has rejected a policy request from GUID:6966B201-97A2-4EED-9A9A-3C43A76ED5C5 because it was not approved. The operating system reported error 2147942405: Access is denied.

[anyweb]

which account are you using to do the actual Client Install, it is specified in the Site Settings, Client Installation Methods, client Push Installation, Accounts

 

it is that user that must be a local administrator of the target machine you want to install the client on

[alittlelouder]

Hey anyweb

 

I use the domain admin; widdpl\Administrator

This user - more precisely the "Domain Admins" group - is in the local admin group of every domain joined client - automatically (or am I wrong?).

 

I read something about unapproved clients, what does that mean? Where can I approve clients? The setting is set to approve all clients (even unsecure)...

 

Thanks

Lukas

[anyweb]

a domain admin account is good enough, you must have something else incorrectly configured,

 

are you SURE that your System Status component logs are all green and ok ?????

 

can you post your entire MP log you mentioned above here ? (as an attachment)

[alittlelouder]

Hey anyweb

 

Yes, I'm sure. Every Status is Green. If i start the Serivce-Manager and do a query of every service the status remains green. =/

Expect the SMS_MP_CONTROL_MANAGER, this status turns in Warning.

 

My Log-File;

SMS_MP_CONTROL_MANAGER.txt

[anyweb]

have you extended the AD schema for SCCM ? if not please do so now and see does this error message go

 

MP has rejected a policy request from GUID:6966B201-97A2-4EED-9A9A-3C43A76ED5C5 because it was not approved. The operating system reported error 2147942405: Access is denied.

[alittlelouder]

Hey

 

Yes, I did. But I'm not sure if it worked.

Maybe I'll do it a second time.

 

Lukas

 

EDIT:

I checked my ExtADSch Log and everything was done successfully (-> No Errors) - intresting; in the System Management container aren't any objects...

BUT, I extended my schema a second time according to ur guide - step by step.

I checked my log again and it said at every container "already exists" but in the System Management container are now the needed objects such as SMS_SITE_DPL and the MP container.

 

I queried every SCCM-Service in the Service Manager and the errors have been gone.

 

I'll try to deploy the client a second time.

 

EDIT2:

It works!

<3 anyweb =D

 

Maybe i'll have other questions. But for now I'm happy.

 

Thanks!

[alittlelouder]

Solution: Like i posted above;

I checked my ExtADSch Log and everything was done successfully (-> No Errors) - intresting; in the System Management container aren't any objects...

BUT, I extended my schema a second time according to ur guide - step by step.

I checked my log again and it said at every container "already exists" but in the System Management container are now the needed objects such as SMS_SITE_DPL and the MP container.