PENDING CPolicyManagerHandler::HandleMessage(): SetComplete(DISCARD) called.

[Bunny007]

MP_Policy log giving this error every minute.
CPolicyManagerHandler::HandleMessage(): SetComplete(DISCARD) called.

Can't find anything related to this on internet.

Does this mean there is something wrong with MP?

There are no errors in SMS_MP_Control.

 

[Prajwal Desai]

Are the clients talking to MP without any errors ?. Do you see all the action cycles on client properties ?.

 

[Bunny007]

Yes, there are around 250 devices that failing to get the policies. These devices used to work fine, but after doing windows update these devices stopped working on https. They work fine when we switch to http. We need https for BitLocker management.

I can't figure what could have changed after the updates. The issue seems to be on the client-side because when I connected the same device to my test lab it only worked on HTTP. If I reimage the device then it starts to work on HTTPS. We can't reimage 250 devices.

Would really appreciate your help.

 

[Garth]

Have you looked at the IIS logs to see what it says. Have you try to uninstall and reinstall the CM client?
Have you force it to get a new certificate on the client?
Have you tried any of the suggestion that are listed on bing? https://www.bing.com/search?q=setcomplete(DISCARD)

 

[Bunny007]

Hi Garth,

Thanks for your response.

Yes, I have checked the IIS logs. What I have noticed is that the clients which are having this issue never send the " CCM_POST, /ccm_system_windowsauth/request, -,. I have attached the image of the IIS logs below.

Yes, I have reinstalled the client a lot of times and deleted old certs to force the client to request new certificates.

I checked this article https://forums.prajwaldesai.com/threads/configuration-manager-client-missing-actions.311/
His solution was to run the SQL query SELECT * FROM ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
and if you get Null values then run the next script. But when I run that first script I didn't get any null values.

There are no errors in my MP_Framework.log
Converting policy request file succeed MpFramework 1/07/2021 8:53:28 AM 113860 (0x1BCC4)
File C:\Program Files\SMS_CCM\PolReqStaging\POL00000.POL is deleted
MpFramework 1/07/2021 8:53:29 AM 113860 (0x1BCC4)
Policy request file doesn't exist. MpFramework 1/07/2021 8:53:29 AM 113860 (0x1BCC4)
Policy request file doesn't exist. MpFramework 1/07/2021 8:53:29 AM 113860 (0x1BCC4)
Move Policy Request File from PolReqStaging folder to MP Outboxes if it exists. MpFramework 1/07/2021 8:58:29 AM 132104 (0x20408)
Converting policy request file succeed MpFramework 1/07/2021 8:58:29 AM 132104 (0x20408)
File C:\Program Files\SMS_CCM\PolReqStaging\POL00000.POL is deleted
MpFramework 1/07/2021 8:58:29 AM 132104 (0x20408)
Policy request file doesn't exist. MpFramework 1/07/2021 8:58:29 AM 132104 (0x20408)
Policy request file doesn't exist. MpFramework 1/07/2021 8:58:29 AM 132104 (0x20408)
Move Policy Request File from PolReqStaging folder to MP Outboxes if it exists. MpFramework 1/07/2021 9:03:29 AM 113860 (0x1BCC4)

Reinstalled MP role a few times.

BGBServer.log have these errors for these clients:

• Failed to verify signature in message from client SCCM GUID:ABCDG-CA36-4FC4-9563-8CA594B89E85 SMS_NOTIFICATION_SERVER 5/07/2021 10:47:20 PM 13888 (0x3640)
• Invalid hook to be decoded. Authentication PayloadSignature SMS_NOTIFICATION_SERVER 5/07/2021 10:47:20 PM 13888 (0x3640)
• Failed to decode message body with message header (<Message><SourceType>SCCM</SourceType><SourceID>GUID:ABCDG-CA36-4FC4-9563-8CA594B89E85</SourceID><Hooks><Hook Name="Authentication"><Property Name="PayloadSignature" Value="7p+7uqY8ENV6t9jj2XAgZXvnB0yKBTIzkvtK1d7BXd09URx7+AckJFOlGJfTXtk8&#xA;enSr2MNpcezU23vGOr8KeldyMNPESor18uUdbDlK0cFkJmbcsZjbt+WHl51/t5zl&#xA;/XTSvqEdDjfoI8ovuXMVNRWW6IXkd+dTTcKnzuyTgr2yxZN99sYJx9tQQ5EBF8sF&#xA;je0f35TQBUjDG64FYIvRYAHTSjOK0hUckXbJSkGpWYY5n+fGermRghglZs9wrPfw&#xA;yByieHCnrXGz2czaNHx+xKl+81m/AaBWTyJ9PNaK2J0VcOdzaZA5nP46dWmKi3fQ&#xA;nYtANwRHxsXdgL6N2CEFaQ=="/></Hook></Hooks></Message>) SMS_NOTIFICATION_SERVER 5/07/2021 10:47:20 PM 13888 (0x3640)
• Failed to process SignIn message from client 10.4.1.65:58321. SMS_NOTIFICATION_SERVER 5/07/2021 10:47:20 PM 13888 (0x3640)
• Retrieving online resync flag from database... SMS_NOTIFICATION_SERVER 5/07/2021 10:47:44 PM 2068 (0x0814)

Didn't find much internet about those bgbserver error messages on the internet.
Thanks

 

[surferstylee]

@Bunny007 ║ Did you ever get to the bottom of this?

I have 2 clients that I am seeing the same exact thing. With verbose logging enabled, the MP_Policy.log also has one additional line:

Detected at least one Policy Assignment row in the result set which is pending signing, rejecting all rows.​

The same SQL query produces 0 results at either client. I have noticed that people who had success with this query had the following additional line in the MP_Policy.log:

CalculateCRCFullAssignments cookie has changed, old cookie 2013-09-17 19:54:15.423, new cookie 2013-10-08 12:49:49.060​

One additional thing I am seeing at both clients is a huge backlog of files on their MPs in .\SMS\CCM\Incoming as was as in SMS\CCM\Incoming\Bit-Sessions\Requests\

Perplexing . . .

~m