SOLVED Unable to install the SCCM client on win10 and win11

[Pennyworth]

Hello everyone, My name is Enyel, and I’m currently setting up an SCCM home lab to learn the deployment and management process. This is my first time working with SCCM, and I'm facing several blocking issues before I can even start using it. I found the SCCM server was unable to push install the SCCM client to the Win11 and Win10 clients. it did install on the domain server.

After reviewing logs, I found the following problems:

Issues Found from Log Reviews​

SCCM Client Installation Fails

• Error: "Cannot get version of client installation file: C:\Program Files\Microsoft Configuration Manager\client\I386\Client.msi"
• Possible cause: Missing or inaccessible Client.msi
• Solution Tried: Checked file existence and permissions.

Default Management Point Keeps Switching to [None]

• SCCM1.cyberguard.local is set as MP, but then switches to [None] repeatedly.
• Possible cause: MP not properly registered / communication failure.
• Solution Tried: Verified MP role but still seeing issues.

Certificate Issues (SSL State: 1504)

• PKI configuration appears present, but:
  
  • Certificate Issuers list is empty
  • Certificate Store information missing
• Solution Tried: Verified PKI certificates using certlm.msc.

Inbox Errors (Missing SCCM Processing Folders)

• "Can't find the SMS_INBOX_CLIENT_CCR_INCOMING inbox"
• "Can't find the SMS_INBOX_CLIENT_CCR_RETRY inbox"
• Solution Tried: Checked "C:\Program Files\Microsoft Configuration Manager\inboxes\", but some folders seem to be missing.

No Fallback Status Point (FSP) Installed

• SCCM does not currently have an FSP, making troubleshooting client installation failures more difficult.
• Potential Fix: Considering setting up an FSP to capture detailed failure reports.

Logs Reviewed​

• mpcontrol.log → Management Point Errors
• ccmsetup.log → Client Installation Issues
• ccmexec.log → Client Configuration & Site Assignment Failures
• smsexec.log → SCCM Server Service Execution

Request for Guidance​

I’d really appreciate any help or troubleshooting suggestions from experienced SCCM users! Since this is a home lab, I might be missing some critical configuration steps. What should I check or modify to resolve these installation and site communication issues?

Thanks in advance for your time! Best regards, Enyel

 

[Stanley Road]

I thought as much, if you cant reach them then nor can the client push. Have a look at dns

 

[Garth]

Hey sorry for the delayed to respond. I was working on a school paper.
here are some screenshots showing that the client is not install on any of the computers I had include the domain server. I'll also include the boundaries I'm using. the IP subnets you may see within the NYC Site were created as one of the steps when I was configuring the SCCM server. But none of the computers on the Active Directories have IP from these boundaries' ranges.

View attachment 7252
View attachment 7253
View attachment 7254
View attachment 7255



View attachment 7252

This clearly does not make any sense, You say that the log show an exit code of 0 but you are also saying that you do not see the control panel app. You will need read the setup log more closely.

 

[Garth]

View attachment 7256
View attachment 7257
View attachment 7258

Only IP Ranges are the only boundaries that will always be 100% correct. both subnet and AD sites can have problems.

 

[Garth]

Stanley hi.

Sorry for the belated answer I did what you said and cleaned up the log results.

here is what I got:

Summary of Key Errors and Issues​

​

1. WIN11DESK:
   • Failure using both:
     • CYBERGUARD1\Enyel with error code 00000043
     • Machine account with error code 67
   • Result: Access denied or invalid network path
   • ️Stored back in "Retry" queue
2. WIN10DESK:
   • Failure using:
     • CYBERGUARD1\Enyel with error code 00000043
     • Machine account with error code 67
   • Result: Access denied or invalid network path
   • ️Stored back in "Retry" queue
3. WIN10:
   • Failure using:
     • CYBERGUARD1\Enyel with error code 00000043
     • Machine account with error code 67
   • Result: Access denied or invalid network path
   • ️Stored back in "Retry" queue

Error Code	Meaning
00000043	The network name cannot be found (likely DNS or name resolution issue)
00000035	The network path was not found
67	The network name cannot be found (usually returned by WNetAddConnection2)

Hang on, you said that the logs showed that the setup completed with an exit code of 0, But the above is saying that it didn't install. Did you disable the firewall on these device and push the client? Did you check DNS to confirm that things are working correctly?

 

[Pennyworth]

Hang on, you said that the logs showed that the setup completed with an exit code of 0, But the above is saying that it didn't install. Did you disable the firewall on these device and push the client? Did you check DNS to confirm that things are working correctly?

Hello again. I noticed that I cannot ping Windows 10 and 11 by their names but only by IP addresses. Regarding the firewall, I didn't disable it; I didn't know I had to. Which port will I have to open for SCCM to reach the Windows host? Also, the scc.log showed there was an issue with DNS during the installation.
These errors showed up

Error Code	Meaning
00000043	The network name cannot be found (likely DNS or name resolution issue)
00000035	The network path was not found
67	The network name cannot be found (usually returned by WNetAddConnection2)

 

[Garth]

Hello again. I noticed that I cannot ping Windows 10 and 11 by their names but only by IP addresses. Regarding the firewall, I didn't disable it; I didn't know I had to. Which port will I have to open for SCCM to reach the Windows host? Also, the scc.log showed there was an issue with DNS during the installation.
These errors showed up

Error Code	Meaning
00000043	The network name cannot be found (likely DNS or name resolution issue)
00000035	The network path was not found
67	The network name cannot be found (usually returned by WNetAddConnection2)

if you can't resolve the name you need to fix DNS first.

 

[Pennyworth]

Hang on, you said that the logs showed that the setup completed with an exit code of 0, But the above is saying that it didn't install. Did you disable the firewall on these device and push the client? Did you check DNS to confirm that things are working correctly?

Only IP Ranges are the only boundaries that will always be 100% correct. both subnet and AD sites can have problems.

Hello again. I noticed that I cannot ping Windows 10 and 11 by their names but only by IP addresses. Regarding the firewall, I didn't disable it; I didn't know I had to. Which port will I have to open for SCCM to reach the Windows host? Also, the scc.log showed there was an issue with DNS during the installation.
These errors showed up

Error Code	Meaning
00000043	The network name cannot be found (likely DNS or name resolution issue)
00000035	The network path was not found
67	The network name cannot be found (usually returned by WNetAddConnection2)

Only IP Ranges are the only boundaries that will always be 100% correct. both subnet and AD sites can have problems.

Ok so what you're saying is that I shall try to figure out a way to associate my The devices on the network to use IP FROM subnet ranges I created on SCCM sites to use those IP Instead of the current ones and not to rely on the AD sites. and I'm assuming i can just assign those IP manually to each host or is there any tutorial you may recommend to follow? I'll also try to fix the DNS issues and disable the firewall before I install the client as well as to figure out which ports shall be permanently open for SCCM to communicate.

 

[Pennyworth]

Guys Thank you for the help and guidance. i did managed to use your help. I fixed the DNS it was working fine. the firewalls was a fact. but the real problem was that the host machines were going in auto pause because the VMware settings. so it was blocking the network communications. thank you very much.