PENDING Trouble installing multiple Distribution points

[Russtoleum]

Hello all, I'll get right to it. I started a new job and inherited the task of completing the setup of SCCM, but I am only responsible for getting windows updates working. I have no idea if everything was working before I started working on it but I don't think so because the first thing I found was that WSUS wasn't running. I should also say, I've been in IT for 15+ years but oddly, never had a client or employer who ran SCCM, so everything I have learned is over the past several days. I have a relatively good grasp on general setup and use of the CAS.
There is one primary server or CAS, and 15 DP's. After banging my head for several days I have about half of the DP's reporting green and functioning 100 percent. Now I have removed the DP role from the others and I'm trying one by one to get the DP role installed and working on the rest, and I am stuck on the first one.

I have uninstalled and reinstalled IIS using this doc https://docs.microsoft.com/en-us/archive/blogs/friis/how-to-perform-a-clean-reinstallation-of-iis
I have done that so many times I have lost count, I have also used numerous 'help' tools people built to try and fix it. Things I am noticing is only the SCCMContentLib is being created, and none of the IIS virtual directories are present. I'm getting this error: Distribution manager does not have sufficient rights to the computer.
I have quadruple checked that the Primary site AD computer object is in the admins group on the local computer I am trying to add the DP to. I have also added the SCCM install user for good measure and tried to authenticate that way.
I also tried this suggestion:

Error 0x800706BA Failed to install Distribution Point

Error 0x800706BA Failed to install Distribution Point,smsdpprov.mof,Error code 1722,DP error,Failed to install DP files on the remote DP

www.prajwaldesai.com

Because I see that error as well.

I have done numerous SFC and DISM health scans as well.

I feel like I have exhausted every googleable solution for this issue, even more than once. I'm finally posting here to get backup, because I need it. I will also post some of the logs. I appreciate any attempt to help me. I'd really like to get past this so I can start using SCCM to get updates rolled out, because, I guess, the IT department at my current new employer doesn't care about updates, and I do.

Note: you can probably see I have sanitized the log and there are several erroring sites but the current one I'm working on is fp-chanute

Sanitized_2020-05-13@00-13-43_logs_distmgr.log

LOG File

1drv.ms

This site said the log file is too big.

 

[Russtoleum]

After I posted this I ran WMIDiag on 2 DP's I can't get to complete install and they both have issues. I'm not sure if related to my problem however, could someone please tell me if trying to fix these is the correct path?

 

[Chelo]

Hello all, I'll get right to it. I started a new job and inherited the task of completing the setup of SCCM, but I am only responsible for getting windows updates working. I have no idea if everything was working before I started working on it but I don't think so because the first thing I found was that WSUS wasn't running. I should also say, I've been in IT for 15+ years but oddly, never had a client or employer who ran SCCM, so everything I have learned is over the past several days. I have a relatively good grasp on general setup and use of the CAS.
There is one primary server or CAS, and 15 DP's. After banging my head for several days I have about half of the DP's reporting green and functioning 100 percent. Now I have removed the DP role from the others and I'm trying one by one to get the DP role installed and working on the rest, and I am stuck on the first one.

I have uninstalled and reinstalled IIS using this doc https://docs.microsoft.com/en-us/archive/blogs/friis/how-to-perform-a-clean-reinstallation-of-iis
I have done that so many times I have lost count, I have also used numerous 'help' tools people built to try and fix it. Things I am noticing is only the SCCMContentLib is being created, and none of the IIS virtual directories are present. I'm getting this error: Distribution manager does not have sufficient rights to the computer.
I have quadruple checked that the Primary site AD computer object is in the admins group on the local computer I am trying to add the DP to. I have also added the SCCM install user for good measure and tried to authenticate that way.
I also tried this suggestion:

Error 0x800706BA Failed to install Distribution Point

Error 0x800706BA Failed to install Distribution Point,smsdpprov.mof,Error code 1722,DP error,Failed to install DP files on the remote DP

www.prajwaldesai.com

Because I see that error as well.

I have done numerous SFC and DISM health scans as well.

I feel like I have exhausted every googleable solution for this issue, even more than once. I'm finally posting here to get backup, because I need it. I will also post some of the logs. I appreciate any attempt to help me. I'd really like to get past this so I can start using SCCM to get updates rolled out, because, I guess, the IT department at my current new employer doesn't care about updates, and I do.

Note: you can probably see I have sanitized the log and there are several erroring sites but the current one I'm working on is fp-chanute

Sanitized_2020-05-13@00-13-43_logs_distmgr.log

LOG File

1drv.ms

This site said the log file is too big.

Hello, how are you? I tell you that this error that mentions that the administrator cannot generate the folders due to permissions problems "I have suffered it and let me tell you that you must ensure that where you are going to install the DP role you must have the account of central server team as administrator as well as the user account of the installer .., without this the SCCM server will not be able to create what is necessary .. due to the issue of installing the IIS you must verify that the role assignment process already exists an option to allow the server to install and configure it correctly.

 

[Russtoleum]

Thank you for responding. And I agree, the more I dig, the more it feels like a permission issue. However, I have triple checked that the computer object and the admin installer user 'sccmadmin' in my case. Is a member of the administrators group on the server I am trying to install the dp role on. I also have checked the check box you screenshot each time I try to install it. Is there any way or any tool to verify the permissions are permeating throughout the destination server correctly?
I have also run this command: dism.exe /online /norestart /enable-feature /ignorecheck /featurename:"IIS-WebServerRole" /featurename:"IIS-WebServer" /featurename:"IIS-CommonHttpFeatures" /featurename:"IIS-StaticContent" /featurename:"IIS-DefaultDocument" /featurename:"IIS-DirectoryBrowsing" /featurename:"IIS-HttpErrors" /featurename:"IIS-HttpRedirect" /featurename:"IIS-WebServerManagementTools" /featurename:"IIS-IIS6ManagementCompatibility" /featurename:"IIS-Metabase" /featurename:"IIS-WindowsAuthentication" /featurename:"IIS-WMICompatibility" /featurename:"IIS-ISAPIExtensions" /featurename:"IIS-ManagementScriptingTools" /featurename:"MSRDC-Infrastructure" /featurename:"IIS-ManagementService"

And it succeeds no problem.

The weird thing is I am able to get this role to install on other servers in the same domain. And I have confirmed they are setup the exact same way.

I appreciate your response. And if you can help me get to the bottom of this, I will buy you something i'm that desperate.