Recent Discussions
Cannot update to Update Rollup 3 for System Center 2022
Hi, I tried update my DPM 2022 to the latest version. I tried also via Windows Update and manually but both method is unsuccessful. When I tried windows update method I got the following error message: There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80070643) For manually update I run this package but the setup wizard didn't show up: dataprotectionmanager-kb5059073_ce4e4e4b8dd358bd0b79e77235e9945dc96131fa.exe I restarted the server as recommended by Microsoft and tried again but not helped for me. My dpm setup: Virtual Machine Windows Server 2022 Standard Language: English Region: HungarianSystem Center Orchestrator 2022
I have automations set up for user terminations. When a user is termed, i want to be able to give the manager access to their one drive (sharepoint module issues). The way i am authenticating is with a cert, app-only authentication. the problem that i have found with connect-sposervice is that the module is older than the connect-exchange online module and it only looks in the current users cert store so when i run a command it says it cant find it. so Ok, i connected to powershell with the orchestrator service account and imported the cert to that local store but it still didnt work. I then tried to use the newer powershell module, connect-pnponline but that requires powershell 7.x.x to even run and orchestrator is using powershell 5 (at least its 64 bit) So i then try to run powershell 7 with a run .net activity but when i use orchestrator variables, it just comes out as garbled text since the activity isnt the one running the command. Any suggestions on how i make this work? As i have said, i just need orchestrator to be able to assign the manager as full control over a terminated user's onedrive. The exchange modules work great for app only auth, but the sharepoint ones just arent working for me. I used to pass a password using basic auth but that is now deprecated, (and its not a good practice to do that anyways). Thank you so much in advance for any tips or tricks to get this working.
Unable to patch Windows Server 2025/24H2
Windows updates will not display in software center for 2025/24H2 clients. Currently running SCCM version 2503 hotfix rollup KB32851084. SCCM client version on test server is 5.00.9135.1013. Test server OS is 24H2 build 2600.2894. I have verified that the 24H2 product is enabled in the software update point configuration and within the ADR. ADR preview shows the 24H2 update (KB5068861). I see KB5068861 under the deployments tab of the test server device. I have a daily maintenance window on the collection, and this shows on the test client within "installation status -->upcoming" tab in software center. I do realize that this hotfix rollup included a fix for 2025 OS. Windows Server 2025 updates use the incorrect Maximum run time value in the properties for the software update component. The value can lead to update installations being incorrectly canceled. I did change the maximum run time for KB5068861 from 10 minutes to 60 minutes. Could this be a metadata related issue with the existing KB that is currently downloaded to SCCM (via WSUS)? I hope I'm not missing something obvious but do welcome an easy resolution if that's the case. Thanks for any suggestions or troubleshooting suggestions.need help with a problem related to the system center
This problem started after the September database server update. I can't access the system center interface to view reports, see devices, check updates, track device status, etc. When I try to open it, I see the attached image. Has anyone else experienced this problem and resolved it? What is the solution for this issue?
How to Configure SCOM 2025 Email Alerts with Microsoft Graph or SMTP OAuth (SMTP AUTH Deprecation)
Hi all, I'm just getting started with SCOM 2025 and need help configuring email notifications to use modern authentication. I understand that SMTP AUTH is being deprecated by Microsoft in April 2026, so I want to set up either: Microsoft Graph API for sending alerts Or SMTP with OAuth 2.0 (e.g., via Office 365) I haven’t done any configuration yet—just looking for clear guidance on how to get started. Specifically: What steps are needed to register an app in Entra ID (Azure AD) to support this? What permissions should the app have (e.g., Mail.Send)? How do I configure the notification channel in SCOM to use OAuth? Is Microsoft Graph supported directly in SCOM 2025, or is SMTP with OAuth the only option? Do I need to manually generate tokens, or does SCOM handle that automatically once the app is registered? Any documentation, walkthroughs, or examples would be hugely appreciated. Thanks in advance!
System Center Orchestrator SSL error when running DBConfig against existing DB
Hey all, I migrated the server to a new AD domain, and ran a repair on SQL, and re installed Orchestrator. SQL is working as expected. but when Orchestrator goes to configure the Database, it gives an ssl error. I told it to trust the server cert, SQL is on the same server. It sees the existing Orchestrator DB, but gives ssl error, even i try to use it, or try and create a new DB. Orchestrator 2025, SQL 2022 This is in the dbconfig error log The certificate chain was issued by an authority that is not trusted. Do I need to delete the certs form the old domain or something weird? (We don't have the new CA set up yet; I just need to run locally for now) TY
Orchestrator 2025 Security Credentials Problem
Hi, I’m experiencing an issue in SCO 2025 that has occurred across three different installations. In the Text File Management and File Management IPs, I’m unable to save the security credentials information for the activities. In other activities, such as Get Service Status, it works as expected. If I enter the account information, click Finish, and then reopen the properties, the fields are empty. As a result, the activity runs using the service account specified for the Orchestrator Runbook Service. Has anyone else experienced the same issue, or could there be something wrong with my installations? Get file status: Get service status:All Clients Showing with Question Mark in MECM Console - ResourceID Issue
All of a sudden (2 weeks ago) all my MECM Clients (~ 4000) in MECM 2409 are showing with a question mark (?) in the console and no values in Last Online Time, Last Activity or HeartBeatDDR. Upon investigation in the statesy.log file on our single site server we see the following message for all clients: SQL MESSAGE: dbo.spProcessStateReport - The record for machine MYCLIENT (GUID:CF5413C8-1DA7-450D-9243-33DB539DE8FF) was not found in the database. SMS_STATE_SYSTEM 24/09/2025 10:36:45 15356 (0x3BFC) We then ran MS SQL profiler and see that this external CLR stored proceedure checks for the existince of the client in the SQL view vLocalSystemIDXRef. This view is defined as follows: create view [dbo].[vLocalSystemIDXRef] as select MachineID, GUID from MachineIdGroupXRef where ArchitectureKey=5 and MachineID between dbo.fnGetSiteRangeStart() and dbo.fnGetSiteRangeEnd() The issue is that all clients are actually in the underlying table MachineIdGroupXRef but due to the filter dbo.fnGetSiteRangeStart() and dbo.fnGetSiteRangeEnd() they are not part of the view. The reason is their ResourceID is only 4 digits and the value returend from fnGetSiteRangeStart is 16777216. Q: How could the clients be getting this 4-digit resourceID all of a sudden? We have made no chnagesto MECM (no upgrades, DB restores etc. ).Unable to import drivers into SCCM 2503
While trying to import the LAN drivers into SCCM version 2503, I encountered an error. The errors are, 1. Error: Some driver(s) can not be imported successfully. 2. Error: Failed to import the following drivers: • Realtek PCIe GbE Family Controller - An error occurred while importing the selected driver. Can anyone help me resolve this issue?
DPM 2022 UR2 build 10.22.197 console crashes after MARS install
I have frequent DPM console crashes after installing and configuring MARS. I have used solely on-premise storage for many years, but I want to explore the possibility of using Azure storage for long term use. However, the frequent DPM MMC console crashes after installing MARS makes it virtually impossible to use and configure with virtually anything I try to do. What is going on? Event info below: The description for Event ID 999 from source MSDPM cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer. If the event originated on another computer, the display information had to be saved with the event. The following information was included with the event: An unexpected error caused a failure for process 'mmc'. Restart the DPM process 'mmc'. Problem Details: <FatalServiceError><__System><ID>19</ID><Seq>0</Seq><TimeCreated>7/23/2024 11:42:16 PM</TimeCreated><Source>DpmThreadPool.cs</Source><Line>169</Line><HasError>True</HasError></__System><ExceptionType>DlsException</ExceptionType><ExceptionMessage>Exception of type 'Microsoft.Internal.EnterpriseStorage.Dls.Utils.DlsException' was thrown.</ExceptionMessage><ExceptionDetails>Microsoft.Internal.EnterpriseStorage.Dls.Utils.DlsException: Exception of type 'Microsoft.Internal.EnterpriseStorage.Dls.Utils.DlsException' was thrown. at Microsoft.Internal.EnterpriseStorage.Dls.UI.UICommon.CmdLetWrapper.HandleError(Pipeline pipeline) at Microsoft.Internal.EnterpriseStorage.Dls.UI.UICommon.CmdLetWrapper.Invoke() at Microsoft.Internal.EnterpriseStorage.Dls.UI.Dpw.ExclusionManager.AddObjectToExclusion(TreeNode node) at Microsoft.Internal.EnterpriseStorage.Dls.UI.Dpw.SelectionPage.UpdateSelection(TreeNode node) at Microsoft.Internal.EnterpriseStorage.Dls.UI.Dpw.SelectionPage.treeView_AfterCheck(Object sender, TreeViewEventArgs e) at System.Windows.Forms.TreeView.OnAfterCheck(TreeViewEventArgs e) at System.Windows.Forms.TreeView.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) *** Mojito error was: GenericOMPlaceHolderError; 0; None</ExceptionDetails></FatalServiceError> The message resource is present but the message was not found in the message table
Orchestrator Designer 10.25.1.7 VMware Integration Guest OS version
We are new to System Center 2025 Orchestrator Runbook Designer and the VMware Integration. We would like to use the native functionality to create virtual machines, but in the Create VM activity, the Guest OS property has a list of possibilities that only goes up to Windows 7 and Windows Server 2008 R2. Does anyone else use the VMware Integration Create VM activity, and does it show supported operating system versions? If so, what could we be doing wrong?SCSM 2025 installation failure - _PopulateUserRoles
Let me lay out the full picture first. Windows Server 2025, Remote SQL Server 2022 CU 20 FCI (used for internal reasons, but I also tried using Always On and encountered the same error), and a clean installation of SCSM 2025 Management Server. I also tried CU19, but the same issue occurs. The installation starts without any problems. It goes through all the steps: creates the database, configures registry settings, configures the server, installs services, and imports management packs. But right after that, I get the following error: _"An error occurred while executing a custom action: PopulateUserRoles This upgrade attempt has failed before permanent modifications were made. Upgrade has successfully rolled back to the original state of the system. Once the corrections are made, you can retry the upgrade for this role." Immediately after this, the Event Viewer logs the following Event ID 36882: "The certificate received from the remote server was issued by an untrusted certificate authority. Because of this, none of the data contained in the certificate can be validated. The TLS connection request has failed. The attached data contains the server certificate. The SSPI client process is rundll32 (PID: 5084).” SQL does not require encryption and is not using any custom certificate. Just to clarify, the internal CA certificate is installed on all servers. The event is weird because, at this point, the installation has already created and configured the database. It doesn’t make sense to me, but the event appears at the exact same moment the installation fails. I’ve already checked permissions on both SQL and SCSM. The service account is a local administrator, has "Log on as a service" rights, and is a sysadmin on SQL. I’ve searched everywhere online but haven’t found a solution... Any ideas? Thanks.
[SOLVED] SCCM - Application auto upgrade not working
Hello, I'm trying to deploy applications with auto upgrade but nothing happens. Let me explain what I'm doing : App_V1 is deployed as available to a user collection I install the app, nothing special here App_V2 is set to supersede App_V1 with uninstall checkbox (I need that in my environment) I deploy App_V2 as available to the same user collection with the checkbox "Automatically upgrade any superseded versions of the application" In the software center, I can see App_V2 with the install button (App_V1 is hidden, expected), but nothing else happens If I check the logs, I can see in PolicyAgent.log (only) : A line starting with "Compiling policy <deploymentID>/supersedence..." Then a line starting with "Raising event: instance of CCM_PolicyAgent_AssignmentDisabled...<some assignment info> Nothing else I don't know how to further troubleshoot that situation. Can someone give me some clues ? ThanksProblemas para configurar un canal SMTP con un servidor de correo externo
me está pasando que cuando que cuando quiero crear un canal de tipo SMTP en mi servidor SCOM 2025, al utilizar el método de autenticación "autenticación de correo electrónico externo" no me permite seleccionar el perfil de ejecución que he creado previamente, espero su ayuda, comentarios o consultas, graciasForce DPM 2025 RA to use FQDN or trust server certificate when trying to backup SQL Server
Hi, anybody know a way to force the Recovery Agent to use the FQDN instead of the NETBIOS name or configure it to trust the SQL Server certificate on a SQL Server cluster. The certificate has both the NETBIOS and FQDN certificate and the server requires encryption I am getting the following error WARNING SQL - Detailed Description "Client unable to establish connection. For solutions related to encryption errors, see https://go.microsoft.com/fwlink/?linkid=2227882." SQLQueryHelper.cpp(384) [0000004DD7EFF560] WARNING SQL - Detailed Description "SSL Provider: The target principal name is incorrect. The server has the latest OLE DB driver, Microsoft OLE DB Driver 19 for SQL Server as required by DPM2025
SCCM Service Connection Tool Failed to Connect - ConnectionString Matter
Hello any SCCM Expert, I need help for the below issue with Service Connection Tool. I need to know how to set my connection string from TrustServerCertificate=False to True Reference Article: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/updating-configuration-manager-in-offline-mode-with-the-service/ba-p/1410282 I am trying to run ServiceConnectionTools for Offline Installer for my setup below. My Lab Setup is a follows: 1. SCCM Primary Server: CM01 (No Internet Access - Internal LAN) 2. MS SQL Server: DB01 (No Internet Access - Internal LAN) 3. Upstream WSUS Server: WSUS01 (Have internet access - in DMZ) 4. CA Server: CA01 (No Internet Access - Internal LAN) ON MY CM01 I have Created in C Drive C:\Temp Folder for temporary gather of the SCCM Infra. Once gathered collected it will be transferred to a USB drive. I have copied the ServiceConnectionTool into the C:\Temp as shown below I have also created a folder named UsageData Cd into C:\temp\serviceConnectionTool I run the Command below: ServiceConnectionTool.exe -prepare -usagedatadest c:\temp\UsageData\UsageData.cab The Operation completed with an an ERROR: Can not connect to the Database. Please refer to the log file.... Go into the ServiceConnectionTool > Open the ServiceConnectioToo.log The Logs as captured Below the Extracted Contents from above except hostname and ID changed: INFO:Logged-in account name: Sccm_admin INFO:Running as account name: Lab\Sccm_admin INFO:Telemetry Prepare step is running connectionString: :Persist Security Info=False;Integrated Security=true;Encrypt=True;TrustServerCertificate=False;Initial Catalog=CM_LB1;server=HomeLab-CM-DB1.lab.local\SCCM ERROR:System.Data.SqlClient.SqlException (0x80131904): A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: SSL Provider, error: 0 - The wait operation timed out.) ---> System.ComponentModel.Win32Exception (0x80004005): The wait operation timed out at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, DbConnectionPool pool, String accessToken, Boolean applyTransientFaultHandling, SqlAuthenticationProviderManager sqlAuthProviderManager) Anybody know how to. Thank you. Regards, ScokoSystem Center 2025 SQL Activation
Hello, Microsoft has recently made System Center available via the CSP program, but it is not clear to me how one would activate SQL server standard that I am entitled to run via an active System Center subscription. If I check in the admin center, I get download media and keys specifically for System Center, but nothing for SQL. I cannot find anything anywhere about how to properly activate SQL Server Standard.
