IanLeach

September 17, 2014

Hi Garth and thanks for your reply.

The built-in report for "Count of all instances of software registered with Add/Remove programs" returns the list of discovered apps but doesn't provide me with a corresponding exe. I'm trying to source them so I can run the PowerShell script to generate Software Metering rules.

I agree, SINV reports a load of chaff that you have to wade through but given that I've around 300 apps to establish rules for, I'm happy to locate each from the endless list of executables...

Any other thoughts?

Ian.

September 16, 2014

Hi there,

I'm trying to find a way to produce an extract of all inventoried executables and then tie them back to a common application name, for example;

WINWORD.EXE - Microsoft Office Word 2013

Has anyone any thoughts or queries they can share?

Ian.

May 8, 2014

Thanks for your answer Garth and I figured there wasn't a statement as I can usually dig and find most things, but not that.

The ConfigMgr admin is looking to block access to the DB for a third party asset management tool that seems to want to access the CM12 DB directly. He's concerned about performance and stability of the tool and wanted to find an official out that he could leverage to block it.

I'll advise him to speak with his TAM.

May 8, 2014

Hi guys,

Hopefully this will be a really simple question to answer.

A customer has just asked me if I can provide the official statement from Microsoft that states what kind of CM12 database access and manipulation would make this an unsupported configuration. Whilst those of us long enough in the tooth know better than to pry too far into the database using anything other than the ConfigMgr console, I wondered if anyone had a link to the official steer from Microsoft?

Thanks,

Ian.

March 25, 2013

Sorted this - The clients were left in provisioning mode at the end of the task sequence which prevented normal operation of the client. This only occurred for clients that failed to run a controlled shutdown at the end of the task sequence.

February 26, 2013

EVERY instance is misleading. :rolleyes:

After further investigation, the clients on the CAS and PRIMARY are fully built out but not receiving AMW definitions. There are selected clients from the ones tested that are built out and don't receive AMW definition updates. The other clients exhibit the limitations highlighted in my previous post...

All in all, a real mixed bag - the common theme is a lack of AMW definitions...

Ian.

February 26, 2013

Hi Guys,

I'm experiencing some pretty funky anomalies with System Center Endpoint Protection 2012 and wondered if anyone could point me in the right direction. We are running CM12 RTM on Windows 2008 R2 SP1.

My SUP, Antimalware definition updates, Policy application, client deployment (etc) have worked autonomously and reliably for quite a while now. Over the past day or so, the propagation of updates to my clients has ceased and EVERY instance of the client has the same anomaly.

When I open the 'About SCEP' element of the client that displays the engines, product versions, NIS versions and so on, instead of seeing it fully populated with that information all I see is...

System Center Endpoint Protection Version: 2.2.903.0

Antimalware Client Version: 3.0.8410.0

These are clients that have worked flawlessly and also those currently being installed as a part of OSD.

It's important to note that this has only occurred since the CAS and PRIMARY site servers were rebooted a day or so ago. The SUP synchronization works fine, there are no component errors and the ADR is running and downloading a package that's set to deploy and is distributed to all DPs accordingly.

Does anyone have any ideas?

Ian. <_<

February 26, 2013

Cheers BinaryMime - it worked a treat!

Ian.

February 26, 2013

I always like to try and tie up forum posts when I have the resolution, so here goes...

There was no Software Update Point configured on the Primary Site Server and the minute I installed and configured this role, the clients received their Antimalware definitions.

Thanks for your help guys,

Ian.

February 26, 2013

Cheers Guys, the logic behind what you've said is sound. It's always best to throw something like this out there and see what comes back.

Ian.

January 9, 2013

Hi Guys,

This is a really simple question I think and wondered if anyone had a definitive answer...

If a user sets their business hours as 00:00 to 00:00 for every day of the week, does this mean that the machine believes it's in use 24/7 and no software updates etc are deployed to the client? Or does it mean that effectively the user has no business hours?

I just don't want anyone to have the ability to block any critical management activities.

Thanks,

Ian.

December 19, 2012

I'm triggering it manually using the Update button after ensuring any policy changes are applied to the client. The machines that are policy-triggered are failing similarly...

December 19, 2012

Right. I've got something further to add to this. After completing some reading about SCEP, I think my initial question regarding MMPC has been answered. It would appear that the initial client definitions are updated from whichever of the five sources it has success with, whether they are specified in the AMW policy or not.

My problem is now with the error code I stated in my initial message. The WindowsUpdate.log shows numerous failures (all with error code 0x8024402c) and the WUAHandler.log doesn't vaguely reflect that shown in the troubleshooting example.

This is the WUAHandler.log content...

<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:05:19.684+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="1320" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:05:29.793+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="2820" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:08:50.703+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="2184" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:13:02.524+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="2220" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:18:33.714+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="2960" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:22:46.929+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="2996" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="21:30:15.190+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="688" file="cwuahandler.cpp:2452">
<![LOG[CWuaHandler::SetCategoriesForLeafStateReportingExclusion called with E0789628-CE08-4437-BE74-2495B842F43B]LOG]!><time="22:14:11.522+00" date="12-18-2012" component="WUAHandler" context="" type="1" thread="2148" file="cwuahandler.cpp:2452">

The WindowsUpdate.log shows the following:

2012-12-19	15:17:41:150	 996	12d0	Agent	** START **  Agent: Finding updates [CallerId = System Center 2012 Endpoint Protection (1F383481-F70E-4E7A-8B69-C4B4A23928E3)]
2012-12-19	15:17:41:150	4528	13b4	COMAPI	<<-- SUBMITTED -- COMAPI: Search [ClientId = System Center 2012 Endpoint Protection (1F383481-F70E-4E7A-8B69-C4B4A23928E3)]
2012-12-19	15:17:41:150	 996	12d0	Agent	*********
2012-12-19	15:17:41:150	 996	12d0	Agent	  * Online = Yes; Ignore download priority = No
2012-12-19	15:17:41:150	 996	12d0	Agent	  * Criteria = "(IsInstalled = 0 and IsHidden = 0 and CategoryIDs contains 'a38c835c-2950-4e87-86cc-6911a52c34a3' and CategoryIDs contains 'e0789628-ce08-4437-be74-2495b842f43b')"
2012-12-19	15:17:41:150	 996	12d0	Agent	  * ServiceID = {7971F918-A847-4430-9279-4A52D1EFE18D} Third party service
2012-12-19	15:17:41:150	 996	12d0	Agent	  * Search Scope = {Machine}
2012-12-19	15:17:52:199	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:199	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:199	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.windowsupdate.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.wind...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:199	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:199	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:199	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:221	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:221	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:221	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.windowsupdate.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.wind...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:221	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:221	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:221	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:242	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:242	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:242	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.windowsupdate.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.wind...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:242	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:242	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:242	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.windowsupdate.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.wind...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:263	 996	12d0	Misc	WARNING: DownloadFileInternal failed for [url="http://download.windowsupdate.com/v9/windowsupdate/redir/muv4wuredir.cab:"]http://download.wind...uv4wuredir.cab:[/url] error 0x8024402c
2012-12-19	15:17:52:284	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:284	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:284	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.micr...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:284	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:284	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:284	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:305	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:305	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:305	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.micr...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:305	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:305	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:305	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:325	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:325	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:325	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.micr...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:325	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:325	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:325	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://download.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://download.micr...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:347	 996	12d0	Misc	WARNING: DownloadFileInternal failed for [url="http://download.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab:"]http://download.micr...uv4wuredir.cab:[/url] error 0x8024402c
2012-12-19	15:17:52:368	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:368	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:368	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://www.update.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://www.update.mi...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:368	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:368	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:368	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:389	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:389	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:389	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://www.update.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://www.update.mi...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:389	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:389	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:389	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:411	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:411	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:411	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://www.update.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://www.update.mi...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:411	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:411	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:411	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: WinHttp: SendRequestUsingProxy failed for <[url="http://www.update.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab>."]http://www.update.mi...v4wuredir.cab>.[/url] error 0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Misc	WARNING: DownloadFileInternal failed for [url="http://www.update.microsoft.com/v9/windowsupdate/redir/muv4wuredir.cab:"]http://www.update.mi...uv4wuredir.cab:[/url] error 0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Agent	WARNING: Failed to obtain the authorization cab URLs, hr=0x8024402c
2012-12-19	15:17:52:432	 996	12d0	Agent	  * WARNING: Online service registration/service ID resolution failed, hr=0x8024402C
2012-12-19	15:17:52:433	 996	12d0	Agent	  * WARNING: Exit code = 0x8024402C
2012-12-19	15:17:52:433	 996	12d0	Agent	*********
2012-12-19	15:17:52:433	 996	12d0	Agent	**  END  **  Agent: Finding updates [CallerId = System Center 2012 Endpoint Protection (1F383481-F70E-4E7A-8B69-C4B4A23928E3)]
2012-12-19	15:17:52:433	 996	12d0	Agent	*************
2012-12-19	15:17:52:433	 996	12d0	Agent	WARNING: WU client failed Searching for update with error 0x8024402c
2012-12-19	15:17:52:434	4528	13c4	COMAPI	>>--  RESUMED  -- COMAPI: Search [ClientId = System Center 2012 Endpoint Protection (1F383481-F70E-4E7A-8B69-C4B4A23928E3)]
2012-12-19	15:17:52:435	4528	13c4	COMAPI	  - Updates found = 0
2012-12-19	15:17:52:435	4528	13c4	COMAPI	  - WARNING: Exit code = 0x00000000, Result code = 0x8024402C
2012-12-19	15:17:52:435	4528	13c4	COMAPI	---------
2012-12-19	15:17:52:435	4528	13c4	COMAPI	--  END  --  COMAPI: Search [ClientId = System Center 2012 Endpoint Protection (1F383481-F70E-4E7A-8B69-C4B4A23928E3)]
2012-12-19	15:17:52:435	4528	13c4	COMAPI	-------------
2012-12-19	15:17:52:435	4528	10bc	COMAPI	WARNING: Operation failed due to earlier error, hr=8024402C
2012-12-19	15:17:52:435	4528	10bc	COMAPI	FATAL: Unable to complete asynchronous search. (hr=8024402C)
2012-12-19	15:18:32:789	 996	a6c	AU	AU received policy change subscription event
2012-12-19	15:38:39:430	 996	e0c	Misc	WARNING: Send failed with hr = 80072ee7.
2012-12-19	15:38:39:430	 996	e0c	Misc	WARNING: SendRequest failed with hr = 80072ee7. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <>
2012-12-19	15:38:39:430	 996	e0c	PT	  + Last proxy send request failed with hr = 0x80072EE7, HTTP status code = 0
2012-12-19	15:38:39:430	 996	e0c	PT	  + Caller provided credentials = No
2012-12-19	15:38:39:430	 996	e0c	PT	  + Impersonate flags = 0
2012-12-19	15:38:39:430	 996	e0c	PT	  + Possible authorization schemes used =
2012-12-19	15:38:39:430	 996	e0c	PT	WARNING: GetConfig failure, error = 0x8024402C, soap client error = 5, soap error code = 0, HTTP status code = 200
2012-12-19	15:38:39:430	 996	e0c	PT	WARNING: PTError: 0x8024402c
2012-12-19	15:38:39:430	 996	e0c	PT	WARNING: GetConfig_WithRecovery failed: 0x8024402c
2012-12-19	15:38:39:430	 996	e0c	PT	WARNING: RefreshConfig failed: 0x8024402c
2012-12-19	15:38:39:430	 996	e0c	PT	WARNING: RefreshPTState failed: 0x8024402c
2012-12-19	15:38:39:430	 996	e0c	PT	WARNING: PTError: 0x8024402c
2012-12-19	15:38:39:430	 996	e0c	Report	WARNING: Reporter failed to upload events with hr = 8024402c.
2012-12-19	15:42:04:407	 996	a6c	AU	AU received policy change subscription event

I believe the first set of failures represent the failure to connect to Microsoft Update. I've changed the policy to remove MU as a source and have instead added MMPC as we've obviously a route to this we can use as a fallback. The main issue remains with SCCM as the update source and I believe this is reflected in the last entries.

My only parting thought is that I need to get a proxy exception created for the SUP/EPP server to enable clients to reach it.

Any help you can provide would be fantastic.

Ian.

December 19, 2012

Cheers Niall. I'll run through the troubleshooting and post an update here ASAP.

December 19, 2012

OK, a little bit of further testing has revealed the following:

Clients with a valid proxy server update their definitions when the proxy configuration is enabled. When the proxy is disabled, the client fails to update.

To me, this points at MMPC being credible as the update source but doesn't explain why the SUP isn't servicing requests from the SCEP clients...

Ian.

December 19, 2012

Hi guys,

I wondered if someone here can provide clarity regarding update sources for the SCEP client as I've hit a brick wall this side of the wire!

We have implemented the EPP role, configured AMW policies and deployed, setup ADR and tested and up until recently had no issues with SCEP or AMW update functionality. The SCEP clients are now failing to update their definitions. The updates sources, and order, are:

1. SCCM

2. Microsoft Update

Clients fail to update and provide the following error:

CODE: 0x8024402c

MESSAGE: System Center Endpoint Protection couldn't install the definition updates because the proxy server or target server names can't be resolved.

Having removed Microsoft Update from the Update Sources (as I believe there's no route to it), clients update their policies and now receive their updated definitions. When I examine the MPxxxxxx.log in ProgramData\Microsoft\Microsoft Antimalware\Support, it shows that the definitions were updated via MMPC. This causes a quandary because it isn't in the sources list.

I think my question is relatively straight forward... Are the definitions being updated from SCCM but incorrectly reported as MMPC or is there a default position within SCEP 2012 whereby it checks the MMPC regardless of what the configuration is set at?

Thanks,

Ian.

September 25, 2012

Just to clear this issue up:

The problem came from an incorrectly formatted data feed prepared by another team for importation into MDT/SCCM. MDT was pre-populated with the package requirements of each machine and each package was named perfectly. HOWEVER, each program wasn't and this was purely human error resulting in installation failures.

Ian.

September 25, 2012

Hi guys,

I've got an issue that I'd like to run by you if I may?

I deployed a CAS to a Windows 2008 R2 server and used the default instance on a SQL 2008 R2 SP2 server. This worked just fine with SPNs registered for both FQDN and NETBIOS.

The issue arises when I try to use a named SQL instance on the same server as the default instance to deploy a Primary server to. The installer reports that it is unable to hit this server and given that the default instance is using Port 1433, I can see why.

How do I prep this instance for SCCM and install the primary to it?

Thanks,

Ian.

December 6, 2011

Good morning guys,

We are deploying various apps by SCCM as you can imagine and I just wanted to run this by you as it is a behaviour I haven't seen.

The CitrixICA client installs perfectly when manually deployed, but when deployed by SCCM, all spaces in the application path are replaced by underscores. As you can imagine, this makes the path of any shortcuts and start menu items invalid.

Any suggestions?

Ian.

November 24, 2011

Just as an aside, I have made sure that the Courier Sender has a higher priority than the Standard Sender under the Address node of the Secondary site.

November 24, 2011

Good morning all,

I've a question regarding Courier Sender parcel creation and wondered if you could help?

I've set up a courier sender between site PRI (Primary) and site SEC (Secondary) as the link is woefully slow between these two sites. I've also specified the preferred sender for the packages to be Courier Sender.

All packages that have not been previously distributed to the SEC DP are presented in Courier Sender Manager and I can parcel and distribute them no problems at all.

Any packages that have previously had the SEC DP assigned and have begun to copy to this location are not visible for parcel creation in the Courier Sender Manager.

If I remove the SEC DP from the package, change the sender preference and re-add the DP so that it shows install pending I am still not presented with the option to parcel it. There appear to be no SRQ files being generated for this kind of package.

Can anyone suggest the best approach to take to ensure all packages can be parcelled and sent by Courier?

Thanks,

Ian.

November 24, 2011

I can tell you what I was missing in case anyone else has this issue: Remote Differential Compression is the answer!

The server was missing this pre-requisite, even though the prereq checker ran without issues and proceeded to install the site systems.

November 11, 2011

Good morning guys,

I'm having problems getting a DP to behave as expected. Let me explain...

We have a Primary site server and have attempted to create a DP on another server. The site server registers under the PRI site code in Site Systems but doesn't show up as a Site Component whos status I can check. The DP role has been added in the usual fashion.

When I try to distribute packages to the new DP, it tries to install the package but then moves to a status of Install Retrying and does not create the SMSPKG$ share on the DP server.

The Primary has the machine account of the DP server in local admins and the 2 SMS groups. The DP server has the Primary's machine account in local admins.

What am I missing guys?

Ian.

November 11, 2011

Thanks Peter, I'll read through the examples and see how I get on. You're a star.

November 10, 2011

Good morning guys,

I've a quick question for you and wondered if you could assist?

Given the sheer volume of applications we create and deploy as ConfigMgr guys, does anyone have or know of a mechanism to automate the following:

1. Point to a package application MSI file

2. Create the application in SCCM

3. Create the programs associated with the application

Cheers,

Ian.

Sign In

IanLeach

Posts

Joined

Last visited

Content Type

Profiles

Forums

Posts posted by IanLeach

SQL Query to return collected filenames and titles

SQL Query to return collected filenames and titles

Official Statement regarding Unsupported Modification on CM12

Official Statement regarding Unsupported Modification on CM12

SCEP 2012 Clients Missing Configuration on About Screen

SCEP 2012 Clients Missing Configuration on About Screen

SCEP 2012 Clients Missing Configuration on About Screen

SCCM 2012 and SQL Named Instances

SCEP 2012 Update Sources

Software Center, Business Hours and Impact to Client

Software Center, Business Hours and Impact to Client

SCEP 2012 Update Sources

SCEP 2012 Update Sources

SCEP 2012 Update Sources

SCEP 2012 Update Sources

SCEP 2012 Update Sources

SCCM inserts underscores in application path

SCCM 2012 and SQL Named Instances

SCCM inserts underscores in application path

Courier Sender Not Presenting Packages

Courier Sender Not Presenting Packages

Distribution Point Creation Error

Distribution Point Creation Error

Automated Package Creation Scripts?

Automated Package Creation Scripts?

Browse

Activity

Important Information