NEW DPs Failing to Update

[david.gardner]

Hi guys,

We have 1 DP that is working fine but 3 that have suddenly stopped working.

This is the error we get.



This is the data from the distmgr.log

DP 1

Failed to find a valid drive on the distribution point ["Display=\\DP-POL.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-POL.XXXXX.local\ SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:19 22628 (0x5864)
Finished GetDPUsableDrives - ["Display=\\DP-POL.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-POL.XXXXX.local\ SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:19 22628 (0x5864)
Cannot find or create the signature share. SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:19 22628 (0x5864)
Failed to make a network connection to \\DP-POL.XXXXX.local\ADMIN$ (0x5). SMS_DISTRIBUTION_MANAGER 18/10/2022 17:46:28 33980 (0x84BC)



DP 2

CWmi::Connect() failed to connect to \\["Display=\\DP-ZH.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-ZH.XXXXX.local\\root\CIMv2. Error = 0x800706BA SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:18 39636 (0x9AD4)
STATMSG: ID=2391 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=DAG2WINSCCM01P.PROD.XXXXX.local SITE=DAG PID=16164 TID=39636 GMTDATE=ma. oct. 18 17:06:18.990 2022 ISTR0="["Display=\\DP-ZH.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-ZH.XXXXX.local\" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 LE=0X0 AID0=404 AVAL0="["Display=\\DP-ZH.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-ZH.XXXXX.local\" SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:18 39636 (0x9AD4)
ERROR DPConnection::ConnectWMI() - Failed to connect to DP-ZH.XXXXX.local. error = 0x800706ba SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:18 39636 (0x9AD4)


DP 3


Failed to find a valid drive on the distribution point ["Display=\\DP-ITA.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-ITA.XXXXX.local\ SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:19 68604 (0x10BFC)
Finished GetDPUsableDrives - ["Display=\\DP-ITA.XXXXX.local\"]MSWNET:["SMS_SITE=DAG"]\\DP-ITA.XXXXX.local\ SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:19 68604 (0x10BFC)
Cannot find or create the signature share. SMS_DISTRIBUTION_MANAGER 18/10/2022 19:06:19 68604 (0x10BFC)

I´ve checked the time sync and it´s ok.
I´ve also checked firewall ports and that´s ok too.

Does anyone have any suggestions?

Many thanks in anticipation.

 

[Garth]

from the site server can you connect to each DP? Can the local system account connect to each dp?

 

[david.gardner]

Hi Garth,

Thanks for your post.

I have double checked and I can access the DPs via RDP and also the system account has access. I checked the system account access by deploying a test package for cmd.exe as an available download.




One thing I have noticed is that these distribution points have not been restarted for 5 months. Could that be it? I can´t try that without agreeing it with the client first.

Best wishes and thanks again.

David

 

[Garth]

How exactly did you test access to the dp? you screenshot only shows that cmd opens with local system account NOT that is access the dp with the local system account.

 

[david.gardner]

I created a deploy as Available then I downloaded from the SCCM store. As per this:

Configuration Manager Deployment Test #1 - Recast

Confirm ConfigMgr can Deploy Apps Checking the MP, ConfigMgr Client, and Deployment Infrastructure A couple of months ago, I published a blog post entitled, “How to Test Your MP to Confirm If It Is Healthy.” Confirming whether or not a Management Point (MP) is healthy, however, is only half the...

www.recastsoftware.com

What would be the best way to test it?

Thanks for your help.

 

[Garth]

I created a deploy as Available then I downloaded from the SCCM store. As per this:

Configuration Manager Deployment Test #1 - Recast

Confirm ConfigMgr can Deploy Apps Checking the MP, ConfigMgr Client, and Deployment Infrastructure A couple of months ago, I published a blog post entitled, “How to Test Your MP to Confirm If It Is Healthy.” Confirming whether or not a Management Point (MP) is healthy, however, is only half the...

www.recastsoftware.com

What would be the best way to test it?

Thanks for your help.

All that does is give you access the the local system account. It does NOT test accessing the DP.

To Test accessing the DP you need to map a drive to the server and copy a file to the mapped drive. then delete the file. That should give you just about everything you need to test accessing the DP remotely. Again, you need to do this on the SITE server and NOT the DP itself.

 

[david.gardner]

Ok thank you. But which user am I mapping the drive as? If I map the drive using my account surely the test is not valid as SCCM is not using the same account?

 

[Garth]

Ok thank you. But which user am I mapping the drive as? If I map the drive using my account surely the test is not valid as SCCM is not using the same account?

As the local system account to mapped the drive.

 

[david.gardner]

Hi Garth, I think you´re on to something.

From the working DP I can ping the SCCM Management Server and browse to the SCCM folders put from the faulty DPs I can´t do either. Is this likely to be a firewall configuration or a GPO/Permission issue?

Best wishes and thanks very much.

David

 

[david.gardner]

Can you please confirm what ports need to be open from the distribution point to the Management server? Is it just 445 2-way between the MS and the DP?

 

[Garth]

Can you please confirm what ports need to be open from the distribution point to the Management server? Is it just 445 2-way between the MS and the DP?

Everything port related is listed within the online docs. https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

 

[david.gardner]

Well it´s now all working perfectly. The ports were opened last night.

Many thanks for your help Garth, truly appreciated.