System Center Configuration Manager (Current Branch) Latest Topicshttps://www.windows-noob.com/forums/forum/116-system-center-configuration-manager-current-branch/System Center Configuration Manager (Current Branch) Latest TopicsenManagement points critical 0mbhttps://www.windows-noob.com/forums/topic/23967-management-points-critical-0mb/ I've upgraded our configuration manager server OS from 2019 to 2022 and after running the CM reset and reinstalling wsus the main server and distribution points are all working, however all the management points apart from the CM server are showing critical and 0mb under Site Status.

The message log is showing Site System Status Summarizer detected that the storage object on site system has 0 KB of free storage space, which is less than or equal to the Critical Free Space Threshold of 5242880 KB.

The error only occurred after the OS upgrade, there's space on the servers which also act as distributions points which show the correct space in the site status. Removing and reinstalling the MP role hasn't made a difference.

Currently the MP role has been removed from the servers so the clients can communicate.

]]>23967Thu, 30 Jul 2026 09:13:43 +0000SCCM on Prem and Download Settings on ADRhttps://www.windows-noob.com/forums/topic/23966-sccm-on-prem-and-download-settings-on-adr/ Hi,

I am using SCCM on Prem and not Cloud

I have created an ADR for Windows 11 monthly update. 

image.png.3cc1633b2df4bbf532681ed199d0179f.png

 

image.png.17c6e7771dadd31c9c3b45727122cc58.png

 

Some Clients machine does not get any Windows updates. I have checked all log files, UpdatesDeployment.log, ScanAgent.log,UpdatesStore.log,UpdatesDeploymentAgent.log,

It display the updates is  "not Applicable" even the build version on the client is from may and I have deployed the KB5101650 from JULY.

 

What is if I check the following options on the "download setting"

image.png.5a252e05fef619eef4a863b37104dc82.png

does it mean, the client will download the update from internet? Or does it means the SCCM Client download from internet immediately and ignore the ADR from SCCM and Software Center?

does display the Windows update on the Software Center or not any more? because I have checked that options?

Thank for help

 

 

]]>23966Wed, 22 Jul 2026 17:52:01 +0000SCCM on Prem and Cloud attach questionhttps://www.windows-noob.com/forums/topic/23963-sccm-on-prem-and-cloud-attach-question/ Hi,

I am using SCCM version 2603 on Prem and want to know what is more value to enable Cloud Attach on the SCCM Server.

- Does it mean my SCCM on Prem is now in the Cloud? 

- Could I deploy better Windows Clients and Server Updates?

- Does it publish my Collections or my data or application in the Cloud?

- Is publish any Windows Clients or Server Data in the Cloud?

 

Regards

 

]]>23963Wed, 08 Jul 2026 16:18:53 +0000SCCM and ADR Settings Questionshttps://www.windows-noob.com/forums/topic/23960-sccm-and-adr-settings-questions/ Hi,

I have created an ADR for monthly Windows 11 Update and have select the following settings:

Evolution Schedule:

Monthly the second Tuesday

image.png.cb76d6df9b0eaaf1923a57ed805698f9.png

image.png.7234d9b930cd9cbb2fd021e0038d1912.png

image.png.697c4f558698cfca56fa46c0f072f9e4.png

My Questions about:

Evolution Schedule:

base of my settings, it should be run every the second Tuesday of month automatically, but it does not. I have to run it as manually. Any Idea why?

Deployment Schedule:

base of my setting, it should be run 7 days after the second Tuesday of month and should available on the Software Center.

But every time I have to set it "as soon as Possible" and after that it downloaded the content. Should be not run automatically and download the content?

Download Setting:

My ADR was enabled and it downloaded no Content and the Package Source of the Deployments was empty.

I saw many clients has downloaded the Content and install it, the Update was not available on the software center.

Could you tell my why and Where did my updates download from?

is that setting the reason?

If software updates are not available on distribution point in current, neighbor or site boundary groups, download content from Microsoft Updates.

Thank you for help

 

]]>23960Wed, 17 Jun 2026 05:10:30 +0000Problem downloading updates software update deployment(SCCM and ADR) specfiy Windows 11 build 25 H2https://www.windows-noob.com/forums/topic/23956-problem-downloading-updates-software-update-deploymentsccm-and-adr-specfiy-windows-11-build-25-h2/ I'm in the process of deploying windows updates to Windows Clients (Windows 11 build 25H2) Windows servers(2019,2022,2025) in my environment with SCCM and ADRs and most of the client computers have installed updates just fine however around 50 or so client computers are not installing updates and the updates are not getting downloaded. When I click to install updates it just stays stuck at 0% downloading and never installs until eventually it times out

My Boundary and Boundary Groups

the updates have been distributed to the DP servers. The boundaries are configured to include the clients in the scope. All of my boundary groups are set up with the Active Directory site only.

We have the following IP Range

192.168.0.0, 172.20.0.0, 172.10.0.0. 172.40.0.0

But I set my My Boundary and Boundary Groups with the Active Directory site only.

Is that the my issue?

Should/Could I create or add some new Boundary with IP address Range(what we have see above IP Range) additionally to my Active Directory site?

Could you please help me?

Regards

]]>23956Fri, 05 Jun 2026 08:03:58 +0000How to change easy on the SCCM Server , the WSUS Server from http to httpshttps://www.windows-noob.com/forums/topic/23948-how-to-change-easy-on-the-sccm-server-the-wsus-server-from-http-to-https/ Hi,

 

I have a SCCM Server with WSUS Server on the same machine with Windows Server 2025. Now I want to change the WSUS Server from http to https.

Is that easy or is there any step by step guide?

I have to be 100% sure after change from HTTP to HTTPS, my SCCM and WSUS Server work fine

Regards

Keywan

]]>23948Wed, 20 May 2026 12:55:09 +0000How do we go about building a new SCCM server from scratch and remove the old SCCM Serverhttps://www.windows-noob.com/forums/topic/23953-how-do-we-go-about-building-a-new-sccm-server-from-scratch-and-remove-the-old-sccm-server/ Hi,

my SCCM Server does not work fine like before many years. I want to building a new SCCM server from scratch

can I still use the old container (called System Management) and delegate control by adding the new server without necessarily extending the AD schema?

Could I let running it the old SCCM server and install a new one fresh instillation of SCCM Server?

Regards

Nick

]]>23953Thu, 28 May 2026 15:50:51 +0000Automatic Deploment Rules (ADR) SCCM does not RUN automaticallyhttps://www.windows-noob.com/forums/topic/23951-automatic-deploment-rules-adr-sccm-does-not-run-automatically/ Hi,

I have created some ADRs for Windows Server and Clients Updates with following settings

Software Updates

image.png.dd89ffdc13ddca15e34c2e30c3efcefc.png

Deployment Schedule

If I understand this option correctly, it should run automatically after 7 Days and deploy it to Distribution Server

 

 

image.png.736ca4849967a11866f0e49a3867c5b5.png

Evaluation Schedule, every month on second Tuesday

image.png.788f5a99c2198884c7201e5eeba3556f.png

 

Could you tell me please why it is not running automatically evey month? What is here wrong?

Thank you

Regards

 

]]>23951Fri, 22 May 2026 08:33:48 +0000Automatic Deploment Rules (ADR) SCCM does not RUN automaticallyhttps://www.windows-noob.com/forums/topic/23950-automatic-deploment-rules-adr-sccm-does-not-run-automatically/ Hi,

I have created some ADRs for Windows Server and Clients Updates with following settings

Software Updates

image.png.dd89ffdc13ddca15e34c2e30c3efcefc.png

Deployment Schedule

If I understand this option correctly, it should run automatically after 7 Days and deploy it to Distribution Server

 

 

image.png.736ca4849967a11866f0e49a3867c5b5.png

Evaluation Schedule, every month on second Tuesday

image.png.788f5a99c2198884c7201e5eeba3556f.png

 

Could you tell me please why it is not running automatically evey month? What is here wrong?

Thank you

Regards

 

]]>23950Fri, 22 May 2026 08:32:48 +0000Issue with Windows Defender and SCCM Deplomenthttps://www.windows-noob.com/forums/topic/23949-issue-with-windows-defender-and-sccm-deploment/ Hi,

I have created a ADR for Windows Defender to deploy every day the new security intelligence update on Windows Client and Windows Server.

It works fine, but only one machine (windows server 2025) does not get the security intelligence update. But if I go the device and proprieties, I see on the Deployment, the security intelligence update is there, but not install.

How and where check it why?

Regards

]]>23949Thu, 21 May 2026 14:15:20 +0000The rise and fall of SCCM Technical Previewhttps://www.windows-noob.com/forums/topic/23923-the-rise-and-fall-of-sccm-technical-preview/

Introduction

Microsoft recently released a blog post outlining predictable changes to the cadence of update releases for SCCM formally known as System Center Configuration Manager. The pinned tweet below had some interesting replies which you can read yourself here.

tweet.png

The blog post didn’t even mention SCCM Technical Preview at all, but did TAG it as you can see here.

tagged.png

What exactly is SCCM Technical Preview ?

SCCM Technical Preview has been a test release of Configuration Manager that has been released very regularly (at first) and developed for years allowing SCCM admins to test the latest and greatest features coming to the product in advance, and allowing them to give valuable feedback to the product team, thereby shaping the mainstream product (Microsoft Configuration Manager) into what it is today.

product feedback.png

Technical Preview launched publicly in May 2015 and that journey started a decade long coding frenzy, where a large team of motivated developers led by none other than the great David James (djammmer) developed great features at an outstanding pace, at least until the last few years when things slowed down to a noticeable crawl about a year after David left in October 2021.

Without the Technical Preview releases you could argue that the move to the Cloud would have taken a lot longer.

Moving forward to today, the last documented release of SCCM Technical Preview was 2411 and you can still (at the time of writing) read documentation about that version here.

learn docs.png

I’ve personally tested and blogged about most of those releases over the last 10 years. Below you can see the timeline of upgrades I’ve done in my lab via the History feature within Configuration Manager.

Note how it states Evaluation, 8 days left.

And below are my many blog posts on the subject:

Who cares ?

My trusty SCCM Technical Preview lab support is coming to an end, and currently there’s no sign that Microsoft will do anything about it. It has 8 days left of support and after that, if Microsoft doesn’t release an update for Technical Preview, then it will become unsupported and unusable.

I’ve pinged some of the official product teams on Twitter, asking if SCCM Technical Preview is dead but so far, there is no response. If they do update or reply I’ll post it here.

This IMHO is a crying shame as many dedicated SCCM admins like me have updated these labs for years, and now those very same labs are left to die by the very company that encouraged us to not only use them, but to provide ongoing feedback.

My Technical Preview lab shown below, was used for things like setting up bitlocker management via Configuration Manager, Co-Management setup, Cloud Managed Gateway (CMG), hybrid management of Windows 365 Cloud PCs, tenant attach, OSD via CMG and most recently the integration of Microsoft Intune’s Cloud PKI & SCEP when I technically reviewed this great book from my friends Paul & David.

my tp lab.png

But now the clock is ticking and soon I won’t be able to even use the console.

8 days left.png

Is this the end of Configuration Manager Technical Preview ? it certainly looks like it and based on this quote in their opening paragraph, I think the answer is yes.

Microsoft Intune is the future of device management, and all new innovations will occur there.

Update: No sooner than I posted this I got an reply on Twitter from Arnie, and here it is, confirmation from Jason Sandys @ Microsoft that Technical Preview is no more.

RIP

Screenshot 2025-11-20 195556.png

 

]]>23923Sat, 22 Nov 2025 12:14:37 +0000SCCM Content Library Cleanuphttps://www.windows-noob.com/forums/topic/15331-sccm-content-library-cleanup/ Hi all!

So I am working to migrate my old SCCM 2012 R2 install to a new server while also upgrading to the 1702 version on a new Server 2016 install.  I have the new server setup and upgraded to 1702.  I also upgraded my old system to the 1606 version.  Before I actually migrate my data, I am trying to do some cleanup on the old server so I don't bring over all the extra "fluff" that I don't need from the old system.  So, thankfully, I am trying the new ContentLibraryCleanup tool in 1702 and running it against my "old" 1606 install.  The tool seems to run fine, but I am getting the following error and, thus, not able to run the full tool:

  

Analyzing local files, 100.00 % complete...
Loading package data from provider...
Loading local package data...
Analyzing local files, 98.82 % complete...
Loading distributed packages from provider...
System.InvalidOperationException: This content library cannot be cleaned up right now because package SC100020 is not fully installed.
   at Microsoft.ConfigurationManager.ContentLibraryCleanup.CLContentLibrary.LoadDistributedPackagesFromProvider()
   at Microsoft.ConfigurationManager.ContentLibraryCleanup.CLContentLibrary.LoadValidContentData()
   at Microsoft.ConfigurationManager.ContentLibraryCleanup.CLContentLibrary..ctor(String remoteDPFqdn, String primarySiteServerFqdn, String primarySiteCode)
   at Microsoft.ConfigurationManager.ContentLibraryCleanup.Program.Main(String[] args)

Odd thing is that I do not see that Package ID anywhere in SCCM.  After doing some Google searching, I was led to do a SQL query for the package ID and I did in fact find it in the SQL database and it seems to refer to a deployment I made of Adobe Reader a while back. However, I have since retired and then deleted that deployment, so it shouldn't be there anymore I would think to prevent the CleanupTool from running.  

So, the question is: Does anyone know how to get rid of it so that I can succussfully run the ContentCleanupTool before I do my migration?

Thanks

]]>15331Tue, 09 May 2017 19:37:56 +0000Windows 11 24H2 slow to restart task sequence task execution following reboot task in bare metal OS deploymenthttps://www.windows-noob.com/forums/topic/23908-windows-11-24h2-slow-to-restart-task-sequence-task-execution-following-reboot-task-in-bare-metal-os-deployment/ When comparing OS deployment bare metal task sequence times between Windows 11 24H2 and Windows 10 22H2 I could see that 24H2 was considerably slower even though the task sequences were almost identical other than the OS being laid down on the device. I did a timing comparison and noticed two things in particularly that were taking considerably longer on the 24H2 device: 1) reboot tasks 2) time to finish up the task sequence work after the last step. For reboot tasks, I can see that the delay is between these two events in the SMSTS.log log:
Waiting for policy to be compiled in 'root\ccm\policy\machine' namespace and Policy verification done within the OSDSetupHook component.

On the Windows 10 device the time between those log entries was 1 second, but on Windows 11 24H2 those log entries vary, but it's usually around 2 minutes.

At the end of the task sequence, after executing the last task, following The task execution engine successfully completed the current task sequence step smsts.log entry to when the smsts.log stops being written to, it takes 14 seconds for the Windows 10 device, but it takes 4:29 seconds for the Windows 11 device. The delays are similar, between these two events in SMSTS.log (see attached screen shot):
End Task Sequence policy cleanup and Policy evaluation initiated within the TSManager component.

Any reason policy work should take considerably longer on Win11 24H2? Any suggestions on where I can look to see as to why it's taking such a longer time to deal with policy work in 24H2? Is this a Win11 24H2 issue, a ConfigMan issue, or ConfigMan configuration issue? I am welcome to entertain any thoughts or suggestions folks have. Anyone else seeing this issue in their environment?

Environment details: CM 2503 (5.0.9135.1000) without KB33177653 or KB34503790 installed. Windows 11 = 24H2 customized reference image built from August 2025 ISO. ADK = 21H2 (10.1.22000.1).

SMSTS.log comparison 22H2 vs 24H2.jpg

]]>23908Fri, 19 Sep 2025 10:49:26 +0000SCCM 2 Domains in 2 Forestshttps://www.windows-noob.com/forums/topic/22758-sccm-2-domains-in-2-forests/
0 Votes"0
blacksuit07 asked • 14 hours ago | blacksuit07 edited • 0 secs ago
Actions

SCCM Client Management 2 separate domains with two-way trust

I am trying to manage a 2nd domain, separate forest with two-way domain trust but I cannot install the SCCM Client.

Setup:
Domain A (SCCM Server, etc.)
PKI CA configuration
SCCM CB with HTTPS communication

Domain B:
Handful of workstations and 4 Servers
No CA in the domain

Domain A is working fine and has been for over a year.

We setup a two-way trust with Domain B
Added DNS secondary zones between both domains
Established site to site VPN and routing. I can ping and RDP to either domain from either domain.
Added Domain A SCCM Service accounts to a security group on Domain B for necessary permissions to manage the client.
Extended the Schema on Domain B and imported the PKI CA from Domain A into Domain B for Cross-Forest PKI implementation. (AD CS: Deploying Cross-forest Certificate Enrollment | Microsoft Docs)
Added Domain B into the Hierarchy configuration on SCCM, I can see users and computers imported from AD on Domain B
I push client install to a couple of machines for testing but they fail.

CCMSetup Error Snippet: 

Sending message body '<ContentLocationRequest SchemaVersion="1.00"  BGRVersion="1">
  <AssignedSite SiteCode="111"/>
  <ClientPackage RequestForLatest="0" DeploymentFlags="4098"/>
  <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseAzure="1" DPTokenAuth="1" UseInternetDP="0">
    <ADSite Name="Domain.B"/>
    <Forest Name="Domain.B"/>
    <Domain Name="Domain.B"/>
<IPAddresses><IPAddress SubnetAddress="172.16.1.0" Address="172.16.1.238"/></IPAddresses><Adapters><Adapter Name="Ethernet" IfType="6" PhysicalAddressExists="1" DnsSuffix="" Description="Realtek PCIe GBE Family Controller" /></Adapters>  </ClientLocationInfo>
</ContentLocationRequest>
'	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Sending location request to 'SCCM.Domain.A' with payload '<ContentLocationRequest SchemaVersion="1.00"  BGRVersion="1">
  <AssignedSite SiteCode="111"/>
  <ClientPackage RequestForLatest="0" DeploymentFlags="4098"/>
  <ClientLocationInfo LocationType="SMSPACKAGE" DistributeOnDemand="0" UseProtected="0" AllowCaching="0" BranchDPFlags="0" AllowHTTP="1" AllowSMB="0" AllowMulticast="0" UseAzure="1" DPTokenAuth="1" UseInternetDP="0">
    <ADSite Name="Domain.B"/>
    <Forest Name="Domain.B"/>
    <Domain Name="Domain.B"/>
<IPAddresses><IPAddress SubnetAddress="172.16.1.0" Address="172.16.1.238"/></IPAddresses><Adapters><Adapter Name="Ethernet" IfType="6" PhysicalAddressExists="1" DnsSuffix="" Description="Realtek PCIe GBE Family Controller" /></Adapters>  </ClientLocationInfo>
</ContentLocationRequest>
'	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
IsSslClientAuthEnabled - Determining provisioning mode state failed with 80070002. Defaulting to state of 480.	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
MapNLMCostDataToCCMCost() returning Cost 0x1	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Failed to connect to machine policy namespace. 0x8004100e	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Client is on internet	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Client is set to use webproxy if available.	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Client is not allowed to use or doesn't have PKI cert while talking to HTTPS server.	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
[CCMHTTP] ERROR: URL=https://SCCM.Domain.A/ccm_system/request, Port=0, Options=480, Code=0, Text=CCM_E_NO_CLIENT_PKI_CERT	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
[CCMHTTP] ERROR INFO: StatusCode=200 StatusText=	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Failed (0x87d00454) to send location request to 'SCCM.Domain.A'. StatusCode 200, StatusText ''	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Failed to send location message to 'HTTPS://SCCM.Domain.A'. Status text ''	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
GetDPLocations failed with error 0x87d00454	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Failed to get DP locations as the expected version from MP 'HTTPS://SCCM.Domain.A'. Error 0x87d00454	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Sending state '101'...	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Updating MDM_ConfigSetting.ClientDeploymentErrorCode with value 0	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Failed to get client version for sending state messages. Error 0x8004100e	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
[] Params to send '5.0.9068.1008 Deployment Error: 0x0, '	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
Sending Fallback Status Point message to 'SCCM.Domain.A', STATEID='101'.	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
<ClientDeploymentMessage ErrorCode="0"><Client Baseline="1" BaselineCookie="" Platform="2" Langs=""/></ClientDeploymentMessage>	ccmsetup	2/14/2022 5:46:48 PM	12672 (0x3180)
State message with TopicType 800 and TopicId {7E7B1ABB-69EC-477A-B8AE-C55E383EBE6D} has been sent to the FSP	FSPStateMessage	2/14/2022 5:46:48 PM	12672 (0x3180)

I know it is a Cert issue at this point but I am lost on what else I would need to do to get this fixed. Should I create deploy CA in Domain B but then that brings me to the issue on how to add that Cert into SCCM without hijacking the Domain A Cert....

 

Any guidance is greatly appreciated!

]]>22758Tue, 15 Feb 2022 16:57:57 +0000SCCM D: drive is inaccessiblehttps://www.windows-noob.com/forums/topic/23903-sccm-d-drive-is-inaccessible/ I am facing an issue with our SCCM environment. Please find the details below:

  • SCCM Version: 2403

  • License Model: 3-year subscription (renewable yearly)

  • License Renewal: Expired last year. I renewed my license last month. However, since my previous environment is in production, I did not proceed with setting up a new environment.

Issue Summary:

  • The D: drive on our SCCM server, which is configured for both the SCCM database and SUP, is showing “Access is denied” when accessed directly from the system.

  • The same D: drive works normally when connected to another workstation.

  • Attempts to take ownership of the drive result in the same “Access is denied” error.

  • This issue is isolated to the SCCM server only.

Impact:

  • High – as the D: drive hosts both the database and SUP, no updates are currently being distributed to clients.

Troubleshooting Performed:

  • Verified drive connectivity.

  • Attempted to reassign ownership of the drive → failed with “Access is denied.”

  • Tested drive functionality on another workstation → works without issues.

Could anyone investigate and advise on the root cause and next steps? 

]]>23903Wed, 10 Sep 2025 05:29:21 +0000