Forums on Intune, SCCM, and Windows 11

Welcome to the forums. Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your topics and posts, as well as connect with other members through your own private inbox!

PENDING Unable to install sccm client agent on Domain Controller

Hussain Al Sayed

Active Member
Messages
26
Reaction score
0
Points
1
Hello,
I'm trying to push SCCM agent and EndPoint protection to our domain controllers but I'm unable to do so. I have changed the settings to Always install the Configuration Manager client on domain controller in the client installation, and also I have added the SCCM Admin user account part of the default domain controller policy, Allow remote login I thought perhaps this is the issue, but still nothing works, nor a folder/logs is being created on the target Domain Controllers.

Any help, much appreciated.

Regards,
 
Could you upload ccm.log file from the SCCM server ?. Do you see ccmsetup folder in windows directory on AD server ?.
 
Hi Prajwal,
No logs or ccmsetup folder is being created under the Server/DC..

Here's what in the ccmLogs related to the target server'

---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:54 11576 (0x2D38)
---> Attempting to connect to administrative share '\\V-MUBPRODADC01\admin$' using account 'Domain\sccmadmin' SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:54 11576 (0x2D38)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account Domain\sccmadmin (0000052e) SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Attempting to connect to administrative share '\\V-MUBPRODADC01\admin$' using machine account. SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Failed to connect to \\V-MUBPRODADC01\admin$ using machine account (5) SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> ERROR: Failed to connect to the \\V-MUBPRODADC01\admin$ share using account 'Machine Account' SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Attempting to connect to administrative share '\\v-MUBPRODADC01.Domain.com\admin$' using account 'Domain\sccmadmin' SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account Domain\sccmadmin (0000052e) SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Attempting to connect to administrative share '\\v-MUBPRODADC01.Domain.com\admin$' using machine account. SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Failed to connect to \\v-MUBPRODADC01.Domain.com\admin$ using machine account (5) SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> ERROR: Failed to connect to the \\v-MUBPRODADC01.Domain.com\admin$ share using account 'Machine Account' SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Attempting to connect to administrative share '\\V-MUBPRODADC01\admin$' using account 'Domain\sccmadmin' SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account Domain\sccmadmin (0000052e) SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Attempting to connect to administrative share '\\V-MUBPRODADC01\admin$' using machine account. SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> Failed to connect to \\V-MUBPRODADC01\admin$ using machine account (5) SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> ERROR: Failed to connect to the \\V-MUBPRODADC01\admin$ share using account 'Machine Account' SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
---> ERROR: Unable to access target machine for request: "2097154044", machine name: "V-MUBPRODADC01", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
Execute query exec [sp_CP_SetLastErrorCode] 2097154044, 5 SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
Stored request "2097154044", machine name "V-MUBPRODADC01", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097154044, 2 SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
Execute query exec [sp_CP_SetLatest] 2097154044, N'09/26/2016 08:41:55', 187 SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
<======End request: "2097154044", machine name: "V-MUBPRODADC01". SMS_CLIENT_CONFIG_MANAGER 26/09/2016 11:41:55 11576 (0x2D38)
 
Could you check if you are able to access \\V-MUBPRODADC01\admin$ from SCCM server ?. Also, I see the error
WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account Domain\sccmadmin (0000052e)
Failed to connect to \\V-MUBPRODADC01\admin$ using machine account (5)

Error code 5 is an Access Denied error. The Advanced Client Push Installation account must have administrative credentials on the computers where you want to install the SMS Advanced Client components.
Check this thread where the issue is already resolved - http://prajwaldesai.com/community/threads/application-deployment-issue.203/
 
Hi Prajwal,
Yes, that's right... after reactifying the SCCMADMIN Account I was able to push the agent to the domain controller. But the problem is among the three DCs, only one DC is getting the EndPoint protection definition.

Any help on this please?

Regards,
 
Okay so we are left with 2 DC's which are not receiving endpoint protection updates. check WUAHandler.log on one of your clients and see what that says. Most of the times the GPO conflicts are the reason for this.
 
You are right... now I have removed it and i'm tying to get the update... will update you in a while...
Group policy settings were overwritten by a higher authority (Domain Controller) to: Server http://v-prodwsus01 and Policy ENABLED WUAHandler 02/10/2016 14:55:47 4552 (0x11C8)
 
Hi Prajwal,
Unfortunately, still the same issue.. not getting updates but now doesn't give TIme-Out or Internet Connectivity Issue.

Any further help please?

Regards,
 

Forum statistics

Threads
7,135
Messages
27,868
Members
18,159
Latest member
jordysmits
Back
Top