PENDING SCCM 1806 Client Push Not Working...and more

[chris.john15]

Hi All,



Having a few errors with my SCCM instance when trying to install the Client:



1. Have a user who's firewall is off but getting this error:

---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account DOMAIN\SCCM_PUSH (00000035) SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:33:08 AM 1784 (0x06F8)



I checked and that account is part of Domain Admins which is part of the Local Admins group on that machine. Also made sure the password was correct (reset password in AD, removed and readded in SCCM).



2. When I push to my local machine, I get the following issues:



======>Begin Processing request: "2097152034", machine name: "DESKTOP-RVJL7LR" SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

Execute query exec [sp_IsMPAvailable] N'GNY' SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> Attempting to connect to administrative share '\\DESKTOP-RVJL7LR.DOMAIN.NYC\admin$' using account 'DOMAIN\SCCM_PUSH' SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> NetUseAdd succeeded! SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> The 'best-shot' account has now succeeded 2 times and failed 0 times. SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> Connected to administrative share on machine DESKTOP-RVJL7LR.DOMAIN.NYC using account 'DOMAIN\SCCM_PUSH' SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> Attempting to make IPC connection to share <\\DESKTOP-RVJL7LR.DOMAIN.NYC\IPC$> SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> Searching for SMSClientInstall.* under '\\DESKTOP-RVJL7LR.DOMAIN.NYC\admin$\' SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:30 AM 6432 (0x1920)

---> System OS version string "10.0.17134" converted to 10.00 SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:31 AM 6432 (0x1920)

---> Unable to connect to WMI (root\ccm) on remote machine "DESKTOP-RVJL7LR.DOMAIN.NYC", error = 0x8004100e. SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:31 AM 6432 (0x1920)

---> Creating \ VerifyingCopying existence of destination directory \\DESKTOP-RVJL7LR.DOMAIN.NYC\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:31 AM 6432 (0x1920)

---> Copying client files to \\DESKTOP-RVJL7LR.DOMAIN.NYC\admin$\ccmsetup. SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:31 AM 6432 (0x1920)

---> Copying file "D:\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "MobileClient.tcf" SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:31 AM 6432 (0x1920)

---> Copying file "D:\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "ccmsetup.exe" SMS_CLIENT_CONFIG_MANAGER 12/17/2018 10:32:33 AM 6432 (0x1920)


Any and all help would be great! Still learning this stuff so appreciate it!

 

[chris.john15]

any ideas from anyone?

 

[Prajwal Desai]

Unable to connect to WMI (root\ccm) on remote machine "DESKTOP-RVJL7LR.DOMAIN.NYC", error = 0x8004100e - https://forums.prajwaldesai.com/thr...te-machinename-machine-error-0x8004100e.1106/

WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account DOMAIN\SCCM_PUSH (00000035) - https://forums.prajwaldesai.com/thr..._new_credentials-using-account.495/#post-2180

 

[chris.john15]

thanks for the reply Prajwal! I'll try to search the forums on how to setup the boundaries.

With regards to the SCCM_PUSH account it IS a domain admin. but the forum post you sent me didn't give a resolution for that in particular. is there any other permissions this user would need?

 

[chris.john15]

Just as a test, I completely turned off my windows firewall and setup the boundary. the config manager was installed on my machine and pointing to the sccm site. However, if I go to SCCM it still shows that my machine does NOT have the client installed. Please see logs attached.

 

[chris.john15]

bump...

 

[Prajwal Desai]

---> Failed to make IPC connection to share <\\DESKTOP-RVJL7LR.DOMAIN.NYC\IPC$>, error (64)    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:15 PM    6040 (0x1798)
---> The 'best-shot' account has now succeeded 11 times and failed 0 times.    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:15 PM    6040 (0x1798)
---> Unable to connect to remote machine %s using Kerberos, error - 0xfbba4498.    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:15 PM    6040 (0x1798)
--> NTLM fallback is enabled, remote machine "DESKTOP-RVJL7LR" is continuing with client push.    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:15 PM    6040 (0x1798)
---> Copying file "D:\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "MobileClient.tcf"    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:18 PM    6040 (0x1798)
---> Copying file "D:\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "ccmsetup.exe"    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:20 PM    6040 (0x1798)
---> Created service "ccmsetup" on machine "DESKTOP-RVJL7LR".    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:25 PM    6040 (0x1798)
---> Started service "ccmsetup" on machine "DESKTOP-RVJL7LR".    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:25 PM    6040 (0x1798)
---> Deleting SMS Client Install Lock File '\\DESKTOP-RVJL7LR\admin$\SMSClientInstall.GNY'    SMS_CLIENT_CONFIG_MANAGER    12/20/2018 2:38:25 PM    6040 (0x1798)

From the log file, i see the client agent is installed. However there is a Kerberos, error - 0xfbba4498 which I couldn't figure out why it's appearing. Have you created boundary, boundary group and associcated a valid DP to the boundary group ?.

 

[chris.john15]

Ok I just updated the Distribution Point. Do I have to reinstall the client?

 

[Prajwal Desai]

Try pushing the client agent to the machine now and monitor ccm.log file.

 

[chris.john15]

see attached for updated ccm.log. How long does it usually take for the clients to show up with the Client column set to "Yes" in SCCM?

 

[chris.john15]

Any ideas?

 

[Garth]

There is nothing wrong with the client push everything is normal for that PC.

 

[chris.john15]

Thanks but then why isn't the client showing up properly in SCCM then? The Client Type is still set to None and Client still say "No"

 

[Garth]

Likely your boundaries are misconfigured. You will need to look at the client to see why, it is not talking to your site.

 

[chris.john15]

Thanks, but what in the client am I looking for to verify that?

 

[Garth]

There are far too many thing to list here. You will need to review the log file to see what issues popup.
Here is the list of log files. https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/log-files

 

[chris.john15]

Just an update, thanks for your help I believe I got the first part resolved. The issue/fix was the following:

Port 80 (currently using HTTP) requests to the SCCM server was being blocked. Had to enable that. Found that out by looking at the ccmmessaging.log on the client, was getting the error:

[CCMHTTP] ERROR: URL=http://SCCMSERVER.DOMAIN.NYC/ccm_system/request, Port=80, Options=224, Code=12007, Text=ERROR_WINHTTP_NAME_NOT_RESOLVED CcmMessaging 1/3/2019 3:44:32 PM 2588 (0x0A1C)

One thing I've also noticed was I added a few machines to a Device Group. The machines disappeared from the group. Any ideas why that would be? Some showed up but others don't but they are in the all Devices view.