PENDING ccm_system_windowsauth/request failed with 0x87d00231

[Veato]

I have SCCM 1802 installed and noticed recently new clients not connecting and log errors such as "ccm_system_windowsauth/request failed with 0x87d00231" and "ERROR: URL=http://--------/ccm_system_windowsauth/request, Port=80, Options=480, Code=12030, Text=ERROR_WINHTTP_CONNECTION_ERROR"

I found that by enabling anonymous authentication for SMS_MP_WindowsAuth and CCM_System_WindowsAuth in IIS this error went away and clients could connect again. Obviously this is only a workaround as the sites _WindowsAuth should be set to use Windows Authentication and the CCM_System and SMS_MP sites are the ones set to use anonymous.

What I'm wondering is why is this the case? I'm assuming I've got an error somewhere in my configuration but I don't know where.

In terms of my other IIS configuration bits; the app pools for the _WindowsAuth and anonymous auth sites are all set to use LocalService for their identity.

 

[Prajwal Desai]

I think the issue is with client to MP communication. Are you using any proxy within the network is blocking traffic on port 80 ?. Because i see that when you browse through the URL that you specified, you get ERROR_WINHTTP_CONNECTION_ERROR. What's in the ClientIDManagerStartup.log ?. Can you upload that file ?.

 

[Veato]

Log attached. Thanks for looking.

I was wondering though, why does everything work when I enable anonymous auth for the _WindowsAuth sites in IIS?

 

[Prajwal Desai]

FYI.. Similar issue is resolved here - https://prajwaldesai.com/community/...ion-portal-fails-to-install-applications.593/

 

[Terikan]

Hi, I am facing the same issue. I know this is old, but it is the only topic that exactly matches the errors I'm seeing and the link above no longer goes anywhere. Anyone able to tell me things to check?

 

[yleong80]

Hi, I’m also having this issue too. Everything work if i enable the anonymous_Auth in IIS The link above also no longer valid. Any similar solution or suggestion.