Skip to main content

Posts

Showing posts from March, 2016

SCCM WSUS WCM.log - System.Net.WebException: The request failed with HTTP status 404

System.Net.WebException: The request failed with HTTP status 404: Not Found.~~   at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~   at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber) Overview: I was recently working with a customer who was receiving a HTTP 404 error in the WCM.log. Confirmed the following ports are open (80,443,135,445,8530,8531) WSUS sites are accessible via URL HTTP Boundaries and Boundary groups for content and site assignment are configured correctly for DEV domain. Distribution Point and Management Point roles are fully functionality WSUS on Server2.dev.local manually synchronized from the Internet Remote Registry and remote WMI tested with success. Lab Environment Expected behaviour: In my lab environment I have two forests/domains “Contoso.local” and “DEV20.local”; untrusted; Windows firewall ON with default values. I have added the Site System ser

SCCM WSUS WCM.log - System.Net.WebException: The request failed with HTTP status 404

System.Net.WebException: The request failed with HTTP status 404: Not Found.~~   at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~   at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber) Overview: I was recently working with a customer who was receiving a HTTP 404 error in the WCM.log. Confirmed the following ports are open (80,443,135,445,8530,8531) WSUS sites are accessible via URL HTTP Boundaries and Boundary groups for content and site assignment are configured correctly for DEV domain. Distribution Point and Management Point roles are fully functionality WSUS on Server2.dev.local manually synchronized from the Internet Remote Registry and remote WMI tested with success. Lab Environment Expected behaviour: In my lab environment I have two forests/domains “Contoso.local” and “DEV20.local”; untrusted; Windows firewall ON with default values. I hav

SCCM - Create Client Authentication Certificate for Workgroup machine

Content of ConfigMgrClientCertificateWorkgroup.inf [NewRequest] Subject = "CN=WorkgroupServerName" MachineKeySet = True Exportable = TRUE KeyLength = 2048 [RequestAttributes] CertificateTemplate = ConfigMgrClientCertificateWorkgroup Certreq -new ConfigMgrClientCertificateWorkgroup.inf ConfigMgrClientCertificateWorkgroup.req certreq -submit ConfigMgrClientCertificateWorkgroup.req ConfigMgrClientCertificateWorkgroup.cer Select DomainControllerName certreq -accept ConfigMgrClientCertificateWorkgroup.cer Open MMC Certificates Machine and export Cert with private keys Import New Cert into into Workgroup system certificate store Import Trusted Root Cert - Local-CA Install CCMSetup with following command line ccmsetup.exe SMSSITECODE=P01 DNSSUFFIX=domain.co.uk /UsePKICert /NOCRLCheck CCMHOSTNAME="IBCM.domain.co.uk" Open LocationServices.log and look for the following entry LSUpdateInternetManagementPoints: Successfully refreshed internet MPs from MP ibcm.domain.co.uk.

SCCM - Create Client Authentication Certificate for Workgroup machine

Content of ConfigMgrClientCertificateWorkgroup.inf [NewRequest] Subject = "CN=WorkgroupServerName" MachineKeySet = True Exportable = TRUE KeyLength = 2048 [RequestAttributes] CertificateTemplate = ConfigMgrClientCertificateWorkgroup Certreq -new ConfigMgrClientCertificateWorkgroup.inf ConfigMgrClientCertificateWorkgroup.req certreq -submit ConfigMgrClientCertificateWorkgroup.req ConfigMgrClientCertificateWorkgroup.cer Select DomainControllerName certreq -accept ConfigMgrClientCertificateWorkgroup.cer Open MMC Certificates Machine and export Cert with private keys Import New Cert into into Workgroup system certificate store Import Trusted Root Cert - Local-CA Install CCMSetup with following command line ccmsetup.exe SMSSITECODE=P01 DNSSUFFIX=domain.co.uk /UsePKICert /NOCRLCheck CCMHOSTNAME="IBCM.domain.co.uk" Open LocationServices.log and look for the following entry LSUpdateInternetManagementPoints: Successfully refreshed internet MPs fr

SCCM Client Certificate (PKI) Value is None

SCCM Client Certificate (PKI) Value is None Stopping WMI service Stopping CCMExec SC Delete any sccm services (ccmexec, smstsmgr, cmecservice, ccmsetup) Delete C:\windows\ccm, C:\windows\ccmsetup, C:\windows\ccmcache, C:\Windows\SMSCFG.ini Go into regedit and remove: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCMSetup HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS Then restart WMI, and reinstall the client. You shouldn't need a reboot to complete this. Once this has been done the client will install and pick up the cert. https://www.windows-noob.com/forums/topic/12644-sccm-2012-client-certificate-pki-value-is-none/

SCCM Client Certificate (PKI) Value is None

SCCM Client Certificate (PKI) Value is None Symptoms: Are you seeing the following errors logged? ClientIDManagerStartup.log - Error: 0x87d00231 [RegTask] - Client is not registered. Sending registration request for GUID:12345678...98C1AE ... RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup RegTask: Failed to send registration request. Error: 0x87d00231 ClientIDManagerStartup LocationServices.log Failed to send management point list Location Request Message to SiteServer.Domain.local 1 assigned MP errors in the last 10 minutes, threshold is 5. CcmMessaging.log Status Agent hasn't been initialized yet. Attempting to create pending event. Successfully queued event on HTTP/HTTPS failure for server 'SiteServer.Domain.local'. Post to https://SiteServer.Domain.local/ccm_system_windowsauth/request failed with 0x87d00231. Failed to open to WMI namespace '\\.\root\ccm' (80041003) Failed in WinHttpSendRequest API, ErrorCode =

SCCM Client Certificate (PKI) Value is None

SCCM Client Certificate (PKI) Value is None Symptoms: Are you seeing the following errors logged? ClientIDManagerStartup.log - Error: 0x87d00231 [RegTask] - Client is not registered. Sending registration request for GUID:12345678...98C1AE ... RegTask: Failed to send registration request message. Error: 0x87d00231 ClientIDManagerStartup RegTask: Failed to send registration request. Error: 0x87d00231 ClientIDManagerStartup LocationServices.log Failed to send management point list Location Request Message to SiteServer.Domain.local 1 assigned MP errors in the last 10 minutes, threshold is 5. CcmMessaging.log Status Agent hasn't been initialized yet. Attempting to create pending event. Successfully queued event on HTTP/HTTPS failure for server 'SiteServer.Domain.local'. Post to https://SiteServer.Domain.local/ccm_system_windowsauth/request failed with 0x87d00231. Failed to open to WMI namespace '\\.\root\ccm' (80041003) Failed in WinHtt

SCCM Task Sequence with automated AD Computer naming Web Services

Maik Koster created a wonderful Deployment Web Service which can help an admin automate many AD, SCCM, and MDT tasks within a Task Sequence.  This blog entry is specifically around producing a Computer Name in Active directory and passing this staged computer name into the OSDComputerName TS variable. 1 Download the DWS from here  and extract to a directory on your webserver 2 Open IIS Manager and expand Sites. 3 Right click on Default Web Site and choose Add Application 4 Specify an Alias and point the physical path to the extracted directory. 5 Right Click the applications Pools and choose "Add Application Pool" 6 Provide an Application Pool Name 7 Click on Application Pools 8 Right click on your Application Pool and select Advanced Settings 9 In the Process Model area click into the Identity field and then click on the ... Button 10 Choose Custom account and click on Set... 11 Enter a valid Username and Password and click OK 12 Expand Default Web Site and select the new Ap

SCCM Task Sequence with automated AD Computer naming Web Services

Maik Koster created a wonderful Deployment Web Service which can help an admin automate many AD, SCCM, and MDT tasks within a Task Sequence.  This blog entry is specifically around producing a Computer Name in Active directory and passing this staged computer name into the OSDComputerName TS variable. 1 Download the DWS from here  and extract to a directory on your webserver 2 Open IIS Manager and expand Sites. 3 Right click on Default Web Site and choose Add Application 4 Specify an Alias and point the physical path to the extracted directory. 5 Right Click the applications Pools and choose "Add Application Pool" 6 Provide an Application Pool Name 7 Click on Application Pools 8 Right click on your Application Pool and select Advanced Settings 9 In the Process Model area click into the Identity field and then click on the ... Button 10 Choose Custom account and click on Set... 11 Enter a valid Username and Password and click OK 12 Expand Default Web Site and sel

sql

f:\setup.exe /q /ACTION=Install /ERRORREPORTING="False" /FEATURES=SQLENGINE,RS,IS,SSMS,TOOLS,ADV_SSMS,CONN /INSTANCENAME=MSSQLSERVER /INSTANCEDIR="C:\Program Files\Microsoft SQL Server" /SQLSVCACCOUNT="NT AUTHORITY\System" /SQLSYSADMINACCOUNTS="BUILTIN\ADMINISTRATORS" " contoso2\labadmin " /SQLSVCSTARTUPTYPE=Automatic /AGTSVCACCOUNT="NT AUTHORITY\SYSTEM" /AGTSVCSTARTUPTYPE=Automatic /RSSVCACCOUNT="NT AUTHORITY\System" /RSSVCSTARTUPTYPE=Automatic /ISSVCACCOUNT="NT AUTHORITY\System" /ISSVCSTARTUPTYPE=Disabled /ASCOLLATION="Latin1_General_CI_AS" /SQLCOLLATION="SQL_Latin1_General_CP1_CI_AS" /TCPENABLED="1" /NPENABLED="1" /IAcceptSQLServerLicenseTerms

sql

f:\setup.exe /q /ACTION=Install /ERRORREPORTING="False" /FEATURES=SQLENGINE,RS,IS,SSMS,TOOLS,ADV_SSMS,CONN /INSTANCENAME=MSSQLSERVER /INSTANCEDIR="C:\Program Files\Microsoft SQL Server" /SQLSVCACCOUNT="NT AUTHORITY\System" /SQLSYSADMINACCOUNTS="BUILTIN\ADMINISTRATORS" " contoso2\labadmin " /SQLSVCSTARTUPTYPE=Automatic /AGTSVCACCOUNT="NT AUTHORITY\SYSTEM" /AGTSVCSTARTUPTYPE=Automatic /RSSVCACCOUNT="NT AUTHORITY\System" /RSSVCSTARTUPTYPE=Automatic /ISSVCACCOUNT="NT AUTHORITY\System" /ISSVCSTARTUPTYPE=Disabled /ASCOLLATION="Latin1_General_CI_AS" /SQLCOLLATION="SQL_Latin1_General_CP1_CI_AS" /TCPENABLED="1" /NPENABLED="1" /IAcceptSQLServerLicenseTerms