HawkwardHunter
New Member
- Messages
- 3
- Reaction score
- 0
- Points
- 1
We recently implemented a Cloud Management Gateway within our SCCM installation of a single Site Server. We use this for a small company that has sub-500 users. At first we were having issues with the cloud management gateway and client certificates, but I figured out that I had to put the whole certificate chain in the CA root into the CMG configuration for clients. Once we had that figured out, I was trying to deploy packages to some test collections that contained devices that we had forced to be connected to the internet only and they weren't coming through, we thought the issue was still CMG related until I tried to target some devices located in our on-premise environment, and no software deployments were getting through to intranet devices.
I'm not sure how long the environment has been like this. However, if a software deployment doesn't show up for an intranet connected device, I don't think I can expect to see it show up for a vpn-connected device or internet connected device.
I've checked many logs and am not finding anything that appears to be unhealthy, and the software has definitely been successfully distributed to the site server and the CMG we've enabled for cloud distribution. When I came to this environment the Boundary Groups were a mess and disorganized, I reconfigured all of the using IP address ranges, including the vpn subnet. The vpn is set to prefer cloud distribution points over regular distribution points. We've redeployed the Management Point role, but haven't done that to the distribution point role yet, but I want to see if I might be able to get some sort of direction to try before doing that.
I searched the forum for people having similar issues, and a lot if the threads I found were about software updates not showing up in the software center, I want to try and resolve the issue with any software deployments at all not showing up before I try to tackle that potential issue. I'm no SCCM guru, but I've worked around in it long enough to be dangerous. I had one of our support companies look at this with me and $645 later they were stumped and we're looking at escalating it to Microsoft Professional Services, but I'd rather avoid that if I can help it because the rate is quite a bit higher than the consultant I worked on this issue with cost me.
I'm not sure how long the environment has been like this. However, if a software deployment doesn't show up for an intranet connected device, I don't think I can expect to see it show up for a vpn-connected device or internet connected device.
I've checked many logs and am not finding anything that appears to be unhealthy, and the software has definitely been successfully distributed to the site server and the CMG we've enabled for cloud distribution. When I came to this environment the Boundary Groups were a mess and disorganized, I reconfigured all of the using IP address ranges, including the vpn subnet. The vpn is set to prefer cloud distribution points over regular distribution points. We've redeployed the Management Point role, but haven't done that to the distribution point role yet, but I want to see if I might be able to get some sort of direction to try before doing that.
I searched the forum for people having similar issues, and a lot if the threads I found were about software updates not showing up in the software center, I want to try and resolve the issue with any software deployments at all not showing up before I try to tackle that potential issue. I'm no SCCM guru, but I've worked around in it long enough to be dangerous. I had one of our support companies look at this with me and $645 later they were stumped and we're looking at escalating it to Microsoft Professional Services, but I'd rather avoid that if I can help it because the rate is quite a bit higher than the consultant I worked on this issue with cost me.
Last edited:
