Recent Discussions
SCOM 2022 AD group monitoring failing
Hi all, Been a good 5 or 6 years since i last dabbled with SCOM - and i think im missing something simple - but not sure what. Installed SCOM 2022 UR2 a few weeks back and installed the agent onto one DC a part of a POC. Create a custom rule with the following properties Rule category : Alert Rule target: Windows domain controller Log Source : Security Expression: ( ( Event ID Equals 4728 ) AND ( Event Source Contains Domain Admins ) ) Alert description: $Data/LoggingComputer$ $Data/EventDescription$ No overrides. I swear i have done the same (granted many years ago) - but its just not working. I can see the event log entry in the security log that should trigger a match. In the Operations manager log i am getting The EventLog service reported that the Security event log on computer 'dc01.x.com' is corrupt. The Windows Event Log Provider will attempt to recover by re-opening log. One or more workflows were affected by this. Workflow name: MomUIGeneratedRuledfb20600b62c4463840e5c737e29695b Instance name: dc01.x.com Instance ID: {57D34D1F-F4F6-4487-CF86-10886C3AC019} Management group: MG1 This makes me think there is something wrong my rule.... but... i just cant see anything wrong with the rule. Can anyone point out what i am missing ?8Views0likes0CommentsSystem Center 2025 - Product Eval links seem broken
Hello - I've been eagerly awaiting the arrival of system center 2025. The product should have RTM-ed nov 1 and indeed, the product pages are all in place and up to date. The evaluation website allows a user (at least for me) to get through the info gathering page and on to the download links. This is where my Saturday morning took a turn (yup, I'm up just for this early). I digress -- the following links seem broken, has anyone been able to get the latest version downloaded? This page works but the d/l links do not:https://www.microsoft.com/en-us/evalcenter/download-system-center-2025 any help, alternate locations to obtain these installers, etc would be greatly appreciated.Solved170Views1like2CommentsComputer / System Protection using large amount of storage
We have a domain controller (Windows Server 2019 Standard) which has the DPM agent installed and is backed up through DPM (2019). The domain controller has a 600GB disk and the used space is approx. 50GB as this server doesn't perform any other function. We have noticed that the Computer \ System Protection data source is using over 900GB of disk storage. Why would the System Protection be using so much storage space for backups?40Views0likes0Commentscreate a SCOM monitor by referring a Rule
Hi, Is there any step by step guidance to create a SCOM Monitor by referring the existing performance collection rule. We have a Performance Collection rule which is collecting the metrics as expected and its used for creating dashboards. But now we have a requirement to create an alerting monitor based on that collected counter metric values from that Rule. I tried everywhere by no tutorials and use full links to refer. Please someone help.76Views0likes0CommentsSCOM Reporting installation failure
We upgraded OS to 2022, applied SQL 2019 CU 28 update and also updated SCOM from 2019 to 2022. The upgrade from SCOM completed but the reporting function failed. We have tried alot possible solutions including fresh reporting installation using SQl reporting 2022 and also changing ports but nothing worked. It is the reporting function only that fails . Also tried installing on a fresh instance but still not working. We have a single SCOM server that hosts all functions. Please help if you got any suggestions. Here is the log below [21:11:35]:Debug::More: 5 rety to go.. [21:11:36]:Debug::ReplaceSRSExtensionsWithOMExtensions: Restarted the service: ReportServerSCOM [21:11:36]:Debug::Setting retry count to:5 [21:11:36]:Debug::More: 5 rety to go.. [21:11:40]:Warn::Message:SRSPolicySetter WebException Exception: Unable to connect to the remote server. Will retry.. [21:11:40]:Debug::Now Sleeping for : 60000 milliseconds [21:12:40]:Debug::More: 4 rety to go.. [21:12:45]:Warn::Message:SRSPolicySetter WebException Exception: Unable to connect to the remote server. Will retry.. [21:12:45]:Debug::Now Sleeping for : 60000 milliseconds [21:13:45]:Debug::More: 3 rety to go.. [21:13:49]:Warn::Message:SRSPolicySetter WebException Exception: Unable to connect to the remote server. Will retry.. [21:13:49]:Debug::Now Sleeping for : 60000 milliseconds [21:14:49]:Debug::More: 2 rety to go.. [21:14:49]:Warn::Message:SRSPolicySetter WebException Exception: The request failed with HTTP status 503: Service Unavailable.. Will retry.. [21:14:49]:Debug::Now Sleeping for : 60000 milliseconds [21:15:49]:Debug::More:1 *LAST* retry to go.. [21:15:49]:Error::Error:All retrys failed!!. Message:SRSPolicySetter WebException, now throwing:The request failed with HTTP status 503: Service Unavailable. [21:15:49]:Error::StackTrace: at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at Microsoft.Reporting.Setup.ReportService.ReportingService2005.ListRoles(SecurityScopeEnum SecurityScope) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingConfigurationHelper.ReportingConfiguration.SRSPolicySetter(String fullSRSURL) [21:15:49]:Error::SRSPolicySetter error: Threw Exception.Type: System.Net.WebException, Exception Error Code: 0x80131509, Exception.Message: The request failed with HTTP status 503: Service Unavailable. [21:15:49]:Error::StackTrace: at Microsoft.EnterpriseManagement.OperationsManager.SetupCommon.RetryLog.ProcessException(String strMsg, Exception e, String strExtra) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingConfigurationHelper.ReportingConfiguration.SRSPolicySetter(String fullSRSURL) [21:15:49]:Error::ReplaceSRSExtensionsWithOMExtensions error: Threw Exception.Type: System.Net.WebException, Exception Error Code: 0x80131509, Exception.Message: The request failed with HTTP status 503: Service Unavailable. [21:15:49]:Error::StackTrace: at Microsoft.EnterpriseManagement.OperationsManager.SetupCommon.RetryLog.ProcessException(String strMsg, Exception e, String strExtra) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingConfigurationHelper.ReportingConfiguration.SRSPolicySetter(String fullSRSURL) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingConfigurationHelper.ReportingConfiguration.ReplaceSRSExtensionsWithOMExtensions(String srsReportServerFolder, String omServer, String reportServerURL, String srsServiceName) [21:15:49]:Error::Reporting Configuration failed.: Threw Exception.Type: System.Net.WebException, Exception Error Code: 0x80131509, Exception.Message: The request failed with HTTP status 503: Service Unavailable. [21:15:49]:Error::StackTrace: at Microsoft.EnterpriseManagement.OperationsManager.SetupCommon.RetryLog.ProcessException(String strMsg, Exception e, String strExtra) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingConfigurationHelper.ReportingConfiguration.SRSPolicySetter(String fullSRSURL) at Microsoft.EnterpriseManagement.OperationsManager.Setup.ReportingConfigurationHelper.ReportingConfiguration.ReplaceSRSExtensionsWithOMExtensions(String srsReportServerFolder, String omServer, String reportServerURL, String srsServiceName) at Microsoft.SystemCenter.Essentials.SetupFramework.InstallItemsDelegates.OMReportingProcessor.ConfigureReporting(ProgressData progressData, Func`2 progressDelegate) [21:15:49]:Error::FATAL ACTION: ConfigureReportingForInstall [21:15:49]:Error::ProcessInstalls: Running the PostProcessDelegate returned false. [21:15:49]:Always::SetErrorType: Setting NonVitalFailure. currentInstallItem: Reporting Server [21:15:49]:Error::ProcessInstalls: Running the PostProcessDelegate for OMREPORTING failed.... but this item is not fatal so we will process the other items. [21:15:49]:Info::SetProgressScreen: FinishMinorStep. [21:15:49]:Always::!***** Installing: POSTINSTALL *** [21:15:49]:Info::SetProgressScreen: StartMinorStep. [21:15:49]:Warn::ApplyUpdates: Unable to load QFE file. [21:15:49]:Always::Doing Preinstall task for POSTINSTALL [21:15:49]:Warn::CheckAndLoadUpdateFiles: Unable to load QFE file. [21:15:49]:Always::Doing Install task for POSTINSTALL139Views0likes0CommentsMulticast Not Working with VMs on Single Host/Logical Switch
Hello, I’m facing an issue with multicast traffic in my Hyper-V environment and would appreciate some insights. I have IGMP snooping enabled, and I’ve noticed the following behavior: Multicast works when VMs are on different hosts. Multicast also works when VMs are on different logical switches. However, multicast does not work when VMs are on the same host or using the same logical switch. Could someone help explain why multicast is not functioning in the latter scenario? Are there specific configurations or settings I should check in Hyper-V or SCVMM that could affect multicast traffic when VMs are on the same host or logical switch? Thank you for your assistance!96Views0likes0CommentsMulticast Traffic Management in Hyper-V and SCVMM
I have a question regarding the management of multicast traffic in a Hyper-V environment. I've been researching how multicast works with virtual switches and the role of IGMP snooping. From what I understand, multicast traffic is primarily managed at the switch level through IGMP snooping, rather than being directly managed by Hyper-V or SCVMM. Is this correct? Can someone confirm whether the effective management of multicast traffic relies more on the configuration of physical network switches rather than on Hyper-V or SCVMM settings? Additionally, if there are any specific configurations I should be aware of in Hyper-V or SCVMM to ensure proper multicast functionality, I would appreciate your insights!81Views0likes0CommentsSSRS Reporting Services HTTP Error 503
In an attempt to repair a broken SSRS installation for Operations Manager, I have attempted a fresh install using SQL Reporting Services 2017 (14.0.600.1669). When running OM 2019 RTM Report Server (Setup version10.19.10050.0) itchanges the SRS extension in the rsreportserver.config, the ReportServer web service stops working with 503 error. Other discussions I have seen with similar issue suggested a newer version of SSRS (done) and others suggest turning off AV (done) and I am still seeing this issue. Does anyone else know how to troubleshoot why the OM Extension would be giving the ReportServer a 503 error? I am wondering if some other aspect of the server hardening could be impacting it? OPSMGRSETUPWIZARD.LOG [12:24:01]: Always: :Adding WebConfigAppSetting to WebConfigFile [12:24:02]: Debug: :Setting retry count to:5 [12:24:02]: Debug: :More: 5 rety to go.. [12:24:02]: Debug: :AddWebConfigAppSettingToWebConfigFile: Added AppSetting with a GroupId of 209e08e0-0bb9-516b-5c3c-256e32c99e8f in the C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\web.config config file. [12:24:02]: Always: :Adding WebConfigAppSetting to ReportingService config file [12:24:02]: Debug: :Setting retry count to:5 [12:24:02]: Debug: :More: 5 rety to go.. [12:24:02]: Debug: :AddWebConfigAppSettingToWebConfigFile: Added AppSetting with a GroupId of 209e08e0-0bb9-516b-5c3c-256e32c99e8f in the C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\bin\ReportingServicesService.exe.config config file. [12:24:02]: Always: :Replacing SRS extensions. [12:24:02]: Debug: :ReplaceSRSExtensionsWithOMExtensions: full SRS URL is : http://VSCOMSQL:80/ReportServer/ReportService2005.asmx [12:24:02]: Debug: :ReplaceSRSExtensionsWithOMExtensions: MOM Server is: vscom.greenfieldsavings.com [12:24:02]: Debug: :ReplaceSRSExtensionsWithOMExtensions: SRS Report Server Folder is: C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\ [12:24:02]: Debug: :ReplaceSRSExtensionsWithOMExtensions: RSSrvPolicy.Config File: C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer\rsreportserver.config [12:24:02]: Debug: :Setting retry count to:5 [12:24:02]: Debug: :More: 5 rety to go.. [12:24:02]: Debug: :Setting retry count to:5 [12:24:02]: Debug: :More: 5 rety to go.. [12:24:03]: Debug: :ReplaceSRSExtensionsWithOMExtensions: Restarted the service: ReportServer [12:24:03]: Debug: :Setting retry count to:5 [12:24:03]: Debug: :More: 5 rety to go.. [12:24:04]: Warn: :Message:SRSPolicySetter WebException Exception: The request failed with HTTP status 503: Service Unavailable.. Will retry.. [12:24:04]: Debug: :Now Sleeping for : 60000 milliseconds [12:25:04]: Debug: :More: 4 rety to go.. [12:25:16]: Warn: :Message:SRSPolicySetter InvalidOperationException Exception: Client found response content type of '', but expected 'text/xml'. The request failed with an empty response.. Will retry..4.6KViews0likes2CommentsDropdown menus not showing in SCSM 2022 - With Update Rollup 2
Dear Community, we have the following problem with our newly installed environment: Any kind of dropdown menu only shows values when hovering over it (e.g. Resolving an Incident or Classifications) - although you can navigate with the arrow keys. Have any of you experienced a similar problem?463Views1like3CommentsSystem Center Licences help
Hi, I`m planning to buy System Center and have some doubts about witch licences i need. I have a 3 node vmware cluster with 96 total physycal cores. I'm planning to use configuration manager to manage deployment, updates and app installation on near 400 client pc. As i understand if i buy datacenter edition i can manage all windows servers on the cluster and have to buy 400 operations manager client licences for client pc's and with standard i have to buy client licences for servers to. Is that ok? Thanks112Views0likes0CommentsTune SCOM alert
We have been frequently receiving alerts regarding the Mellanox ConnectX-4 Lx Virtual Ethernet Adapter being disabled and re-enabled within a short time span. The alert is triggered each time the adapter is disabled and then enabled, causing unnecessary noise in the system. Specifically, the current alert triggers too quickly, and I would like to adjust the alert configuration to wait for a longer period before triggering. Ideally, the system should monitor the NIC adapter's status and only generate an alert if the adapter remains disabled for a longer period of time. If it is re-enabled within the adjusted time frame, the alert should not be triggered. I have checked the rules and overrides in the System Center Operations Manager (SCOM) but couldn't find any option to modify the time interval for triggering the alert. Below is a sample of the alert details: Alert Information: Mellanox ConnectX-4 Lx Virtual Ethernet Adapter device is successfully stopped. SCOM Data: AlertId: b4456b37-5b12-4b56-9e1e-779ec6cccd6c RuleId: 2f840cdd-71b6-05b4-da8e-9cb1a5b124d4 MonitorName: Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.BadBlock MonitorDisplayName: SCOM S2D: The Device has a Bad Block Management Pack: Storage Spaces Direct Management Pack:1.0.47.4 MonitoringObjectDisplayName: ABCCCC.Domain.com MonitoringObjectFullName: Microsoft.Windows.Computer .Domain.com139Views0likes0CommentsVMM Module in PowerShell 7
With the latest news in the tech industry, when can we expect to see the System Center PowerShell modules to be supported in PowerShell 7.0? I believe MECM/MEM works in pwsh7 already but VMM doesn't at this point. Requiring a Windows machine to use the VMM module doesn't make a ton of sense.597Views1like4CommentsDPM 2016 unable to remove storage
Hi Gurus, We are encountering an issue whereby we are unable to remove the DPM storage after we have removed all the protection groups. DPM alert logs do not give any good indications. We tried reformat the DPM storage disk hoping that it can be successfully be removed but still cannot. But after we reinitialize the disk,we do a rescan and can add this same reformatted disk into the DPM storage but the previous DPM storage remains there with a red cross signs still indicating certain data inside this "gone disk". Any gurus can help us to troubleshoot and resolve this issues?108Views0likes0CommentsOrchestrator FTP Algorithm list
Hi, I am trying to establish the communication between the system center 2019orchestratorapplication and a remote server. When i try the list folders/files function i am getting an error that the two servers do not use the same algorithms(view below) . List Folder failure: ChooseEncryptionAlgorithmClientToServer() could not decide on an algorithm. Client list: xxxx.xxxx.xxxx.xxxx.xxxx Server list: xxxx.xxxx.xxxx.xxxx.xxxx My questions is, fromorchestratorconsole, from where can i view the algorithms list that can be used in order to edit the list From system center 2019orchestrator, where can i find the ssh configuration?181Views0likes0CommentsOn-premise storage requirements with online backup
Before I added MARS online backup to my DPM 2022 server, I did not have storage limit issues on my on-premises backup. It seems like the online Azure backup has added to the storage requirements for the on-premises storage and I am exhausting my on-premises storage. Am I imagining this or is this the case? Thanks.170Views0likes2CommentsSCSM Notification Channel SMTP
Unable to send SMTP using the App Registration. The System Center Data Access service client failed to send a notification via the SMTP server: NA Exception message: MSAL.Desktop.4.38.0.0.MsalClientException: ErrorCode: unknown_user_type Microsoft.Identity.Client.MsalClientException: Unsupported User Type 'Unknown'. Please see https://aka.ms/msal-net-up. at Microsoft.Identity.Client.Internal.Requests.UsernamePasswordRequest.<FetchAssertionFromWsTrustAsync>d__4.MoveNext()212Views0likes2Commentscontent Library explorer not working - RESOLVED
Hi, We recently had to migrate to new hardware after a failure, most things seem to have survived or been revived, however content library explorer will not run. After entering the DP fqdn, it attempts to load and returns an error "An item with the same key has already been added" Any ideas appreciated. We have MECM 2002, server 2019 standard and Sql 2019 all on same server. I have run a site reset - no change. event logs show this Application: contentlibraryexplorer.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.IO.FileNotFoundException at Microsoft.ConfigurationManager.ContentLibraryExplorer.Program.Main() followed by this Faulting application name: contentlibraryexplorer.exe, version: 5.0.8968.1000, time stamp: 0x5e5b947a Faulting module name: KERNELBASE.dll, version: 10.0.17763.1369, time stamp: 0xb99aaceb Exception code: 0xe0434352 Fault offset: 0x00122452 Faulting process id: 0x3b50 Faulting application start time: 0x01d68aef710141d1 Faulting application path: C:\Program Files\Microsoft Configuration Manager\tools\ServerTools\contentlibraryexplorer.exe Faulting module path: C:\Windows\System32\KERNELBASE.dll Report Id: a4c3c7bb-b0bd-48d6-b689-1f9344ce191e Faulting package full name: Faulting package-relative application ID: in case relevant I have checked and we have dotnet 4.7 installed with only the following components not checked Message Queueing (MSMQ) Activation Named Pipe Activation TCP Activation I tried running Procmon and only found one section that might be indicative of an issue. I am in the administrators group on the machine and am MECM admin also, FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS CreateFile \\OURMECMSERVERfqdn\SCCMContentLibG$\ BAD NETWORK NAME Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS CreateFile \\OURMECMSERVERfqdn\SCCMContentLibG$\ BAD NETWORK NAME Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS CreateFile \\OURMECMSERVERfqdn\SCCMContentLibG$\ BAD NETWORK NAME Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS CreateFile \\OURMECMSERVERfqdn\SCCMContentLibG$\ BAD NETWORK NAME Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS CreateFile \\OURMECMSERVERfqdn\SCCMContentLibH$\ BAD NETWORK NAME Desired Access: Read Attributes, Disposition: Open, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS CreateFile \\OURMECMSERVERfqdn\SCCMContentLibH$\ BAD NETWORK NAME Desired Access: Read Data/List Directory, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a FileSystemControl \\OURMECMSERVERfqdn\IPC$ FS DRIVER REQUIRED Control: FSCTL_DFS_GET_REFERRALS CloseFile \\OURMECMSERVERfqdn\IPC$ SUCCESS Neither of these shares exist. there was a "SCCMContentLib$" which pointed to the content Library I created another share to the same path for"SCCMContentLibG$" but that doesn't appear to have helped. there is an "IPC$" share with no folder path. (which appear to be the way it should be) any ideas appreciated, thankyou.Solved3.7KViews0likes3CommentsProblems after upgrading SCCM from 1910 to 2002
we set up a testing environment for bitlocker purposes and because of new features for bitlocker we updated yesterday from 1910 to 2002. Update was done fine but now our 3 clients dont contact SCCM anymore. we tried to install new ccm client manually but ccmsetup.log shows a lot of errors. After checking PKI we solved on problem and clients can request new certificates again (CRL error solved) but ccmsetup is still full of errors. a quote: The 'MY' of 'Local Computer' store has 2 certificate(s). Using custom selection criteria based on the machine name. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Machine name is 'PC14.corp.contoso.com'. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) There are no certificate(s) that meet the criteria. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Performing search that includes SAN2 extensions... ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Checking if certificate [Thumbprint A6DFB039061A840C88D29F2E24F8656812895EF4] issued to 'PC14.corp.contoso.com' is valid for ConfigMgr usage. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Begin validation of Certificate [Thumbprint A6DFB039061A840C88D29F2E24F8656812895EF4] issued to 'PC14.corp.contoso.com' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Allowing usage of CNG key storage. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) The Certificate [Thumbprint A6DFB039061A840C88D29F2E24F8656812895EF4] issued to 'PC14.corp.contoso.com' has 'Client Authentication' capability. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Completed validation of Certificate [Thumbprint A6DFB039061A840C88D29F2E24F8656812895EF4] issued to 'PC14.corp.contoso.com' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Checking if certificate [Thumbprint ABE4F896582BD9E9A5D97A738849ACDF9B838F5B] issued to 'PC14.corp.contoso.com' is valid for ConfigMgr usage. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Begin validation of Certificate [Thumbprint ABE4F896582BD9E9A5D97A738849ACDF9B838F5B] issued to 'PC14.corp.contoso.com' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Allowing usage of CNG key storage. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) The Certificate [Thumbprint ABE4F896582BD9E9A5D97A738849ACDF9B838F5B] issued to 'PC14.corp.contoso.com' has 'Client Authentication' capability. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Completed validation of Certificate [Thumbprint ABE4F896582BD9E9A5D97A738849ACDF9B838F5B] issued to 'PC14.corp.contoso.com' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) >>> Client selected the PKI Certificate [Thumbprint A6DFB039061A840C88D29F2E24F8656812895EF4] issued to 'PC14.corp.contoso.com' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Raising pending event: instance of CCM_ServiceHost_CertRetrieval_Status { ClientID = "GUID:156C4B85-650F-4B4D-BE8D-8FC184C54976"; DateTime = "20200415114602.806000+000"; HRESULT = "0x00000000"; ProcessID = 6620; ThreadID = 6588; }; ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Successfully submitted pending event to WMI. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) ccmsetup: Host=CM1.corp.contoso.com, Path=/ccm_system/request, Port=443, Protocol=https, CcmTokenAuth=0, Flags=0x4100, Options=0x1f ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Created connection on port 443 ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Trying without proxy. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Both AAD token auth and client PreAuth are not ready. Cannot get CCM token ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Client doesn't have PKI issued cert and cannot get CCM access token. Error 0x8000ffff ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) [CCMHTTP] ERROR: URL=https://CM1.corp.contoso.com/ccm_system/request, Port=443, Options=31, Code=0, Text=CCM_E_NO_TOKEN_AUTH ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) [CCMHTTP] ERROR INFO: StatusCode=403 StatusText=Forbidden ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Raising event: instance of CCM_CcmHttp_Status { ClientID = "GUID:156C4B85-650F-4B4D-BE8D-8FC184C54976"; DateTime = "20200415114602.962000+000"; HostName = "CM1.corp.contoso.com"; HRESULT = "0x87d00455"; ProcessID = 6620; StatusCode = 403; ThreadID = 6588; }; ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Status Agent hasn't been initialized yet. Attempting to create pending event. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Raising pending event: instance of CCM_CcmHttp_Status { ClientID = "GUID:156C4B85-650F-4B4D-BE8D-8FC184C54976"; DateTime = "20200415114602.962000+000"; HostName = "CM1.corp.contoso.com"; HRESULT = "0x87d00455"; ProcessID = 6620; StatusCode = 403; ThreadID = 6588; }; ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Successfully submitted pending event to WMI. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Failed (0x87d00455) to send location request to 'CM1.corp.contoso.com'. StatusCode 403, StatusText 'Forbidden' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Failed to send location message to 'https://CM1.corp.contoso.com'. Status text 'Forbidden' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) GetDPLocations failed with error 0x87d00455 ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Failed to get DP locations as the expected version from MP 'https://CM1.corp.contoso.com'. Error 0x87d00455 ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Sending state '101'... ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0 ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) [5.00.8913.1012] Params to send '5.0.8968.1014 Deployment Error: 0x0, ' ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) A Fallback Status Point has not been specified and no client was installed. Message with STATEID='101' will not be sent. ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Failed to send status 101. Error (87D00215) ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) Next retry in 10 minute(s)... ccmsetup 15.04.2020 13:46:02 6588 (0x19BC) CCMSETUP bootstrap from Internet: 0 ccmsetup 15.04.2020 13:56:02 6588 (0x19BC) Current AD forest name is corp.contoso.com, domain name is corp.contoso.com LocationServices 15.04.2020 13:56:02 6588 (0x19BC) Domain joined client is in Intranet LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Current AD site of machine is Default-First-Site-Name LocationServices 15.04.2020 13:56:03 6588 (0x19BC) DHCP entry points already initialized. LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Begin checking Alternate Network Configuration LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Finished checking Alternate Network Configuration LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Adapter {A326668B-B0AF-436B-A37A-702FACCBD56A} is DHCP enabled. Checking quarantine status. LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Adapter {A6EFB301-F50C-4AD4-BAFE-35389BF1686E} is DHCP enabled. Checking quarantine status. LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Adapter {BD9C5FEF-8AD9-43F2-8748-258BEA19DBA4} is DHCP enabled. Checking quarantine status. LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Adapter {2D673774-A210-4C3C-ACA5-10C17F9D9175} is DHCP enabled. Checking quarantine status. LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Adapter {AAC1183F-40B2-4D83-A2E1-36E2D8B85DCC} is DHCP enabled. Checking quarantine status. LocationServices 15.04.2020 13:56:03 6588 (0x19BC) Sending message body '<ContentLocationRequest SchemaVersion="1.00" BGRVersion="1"> <AssignedSite SiteCode="CHQ"/> <ClientPackage RequestForLatest="0" DeploymentFlags="4098"/> <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseAzure="1" DPTokenAuth="1" UseInternetDP="0"> <ADSite Name="Default-First-Site-Name"/> <Forest Name="corp.contoso.com"/> <Domain Name="corp.contoso.com"/> <IPAddresses> <IPAddress SubnetAddress="10.0.0.0" Address="10.0.0.108"/> </IPAddresses> </ClientLocationInfo> </ContentLocationRequest> ' ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Sending location request to 'CM1.corp.contoso.com' with payload '<ContentLocationRequest SchemaVersion="1.00" BGRVersion="1"> <AssignedSite SiteCode="CHQ"/> <ClientPackage RequestForLatest="0" DeploymentFlags="4098"/> <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseAzure="1" DPTokenAuth="1" UseInternetDP="0"> <ADSite Name="Default-First-Site-Name"/> <Forest Name="corp.contoso.com"/> <Domain Name="corp.contoso.com"/> <IPAddresses> <IPAddress SubnetAddress="10.0.0.0" Address="10.0.0.108"/> </IPAddresses> </ClientLocationInfo> </ContentLocationRequest> ' ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) MapNLMCostDataToCCMCost() returning Cost 0x1 ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Failed to enumerate instances of the CCM_NetworkSettings class. Error = 0x80041013 ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Client is not on internet ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Client is set to use webproxy if available. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Using the certificate [Thumbprint A6DFB039061A840C88D29F2E24F8656812895EF4] issued to 'PC14.corp.contoso.com'. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) ccmsetup: Host=CM1.corp.contoso.com, Path=/ccm_system/request, Port=443, Protocol=https, CcmTokenAuth=0, Flags=0x4100, Options=0x1f ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Created connection on port 443 ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Trying without proxy. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Both AAD token auth and client PreAuth are not ready. Cannot get CCM token ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Client doesn't have PKI issued cert and cannot get CCM access token. Error 0x8000ffff ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) [CCMHTTP] ERROR: URL=https://CM1.corp.contoso.com/ccm_system/request, Port=443, Options=31, Code=0, Text=CCM_E_NO_TOKEN_AUTH ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) [CCMHTTP] ERROR INFO: StatusCode=403 StatusText=Forbidden ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Raising event: instance of CCM_CcmHttp_Status { ClientID = "GUID:156C4B85-650F-4B4D-BE8D-8FC184C54976"; DateTime = "20200415115603.357000+000"; HostName = "CM1.corp.contoso.com"; HRESULT = "0x87d00455"; ProcessID = 6620; StatusCode = 403; ThreadID = 6588; }; ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Status Agent hasn't been initialized yet. Attempting to create pending event. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Raising pending event: instance of CCM_CcmHttp_Status { ClientID = "GUID:156C4B85-650F-4B4D-BE8D-8FC184C54976"; DateTime = "20200415115603.357000+000"; HostName = "CM1.corp.contoso.com"; HRESULT = "0x87d00455"; ProcessID = 6620; StatusCode = 403; ThreadID = 6588; }; ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Successfully submitted pending event to WMI. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Failed (0x87d00455) to send location request to 'CM1.corp.contoso.com'. StatusCode 403, StatusText 'Forbidden' ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Failed to send location message to 'https://CM1.corp.contoso.com'. Status text 'Forbidden' ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) GetDPLocations failed with error 0x87d00455 ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Failed to get DP locations as the expected version from MP 'https://CM1.corp.contoso.com'. Error 0x87d00455 ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Failed to find DP locations from MP 'https://CM1.corp.contoso.com' with error 0x87d00455, status code 403. Check next MP. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Only one MP https://CM1.corp.contoso.com is specified. Use it. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Have already tried all MPs. Couldn't find DP locations. ccmsetup 15.04.2020 13:56:03 6588 (0x19BC) Attached both ccmsetup.log from 1910 and 2002, because of log and txt restrictments as PDF. May anybody knows what to do?Solved34KViews0likes16Comments
Events
Recent Blogs
- 4 MIN READIn this blog, we introduce System Center 2025 and its features that are now GA in Nov-2024.Nov 14, 20241.2KViews3likes0Comments
- In this blog, we provide a brief introduction toSCOM Management pack for Certificate Monitoring.Nov 22, 202429KViews5likes35Comments