synwiz

** Resolved ** Before i contacted CSS, i had one last bash at troubleshooting the chain. What i didn't mention in the original query was that the environment is purely Internet ONLY, and hence uses PKI Certificates. i had created a generic certificate with the HTTPS FDQN details of the MP & Site Server installed under the SAN criteria of the certificates. i then proceeded to roll this certificate out to all clients..... 66% of the clients all reported in fine to the Admin Console and managed to find a unique SMS GUID, 33% of the clients which prompted this query suffered with using the same SMS GUID. It was a simple case of recreating the certificates for the existing clients including the client FDQN within the SAN also. i then followed in most cases the process above of stopping the service, using TRANGUID / R then restarting the service. for the most part the clients collected a new SMS GUID and reported OK.

this appears right now to be an issue with Duplicate GUIDs, which i am having problems dealing with

i have a number of clients all conflicting for status within the Admin Console because they have Duplicate GUID. The problem is that whatever method i try to resolve the issues results in the client still picking up the same duplicate GUID again & again i have tried the following methods stop ccmexec service ccmsetup /uninstall ccmdelcert.exe del SMSCFG.INI del SMS Registry Key ccmclean.exe /ALL ccmsetup install. also, stop ccmexec tranguid.exe /R start ccmexec also, stop ccmexec ccmdelcert.exe del SMSCFG.ini start ccmexec non of which work!!!! i have looked at countless sites for some answers, but nothing works. i cannot see the clients in the SCCM Admin Console, after their initial setup where the details are not assicated with the client. The client eventually disappears from the console.

This is because the Client installation "CCMSETUP.exe" is trying to download the client.msi and associated content from the Distribution Point. the error indicates that either the content is not available on the DP or that the version is an older or newer version to the current install. i would suggest making sure that the actual "Client Package" within SCCM is successfully distributed to the DP in your location, and that you are trying to install a new client using ccmsetup.exe from the same version.

OK, although that doesn't make sense because i have for example (EXCHANGE), 4 instances appearing under "All Systems" all with different GUID, IP, MAC, SID, ID etc.. except Name. along with this i have (DOMAIN, SHARE) which appear more than once. The setup is purely over HTTPS (internet).

I am managing clients using PKI over HTTPS. the problem i am facing is that some clients although on seperate domains or workgroups may have the same netbios(hostname). because of this they fight for a space within SCCM admin console, and invariably do not appear. e.g CLIENT1 - netbios name (DOMAIN) CLIENT2 - netbios name (DOMAIN) both are completly different (GUID, MAC, IP, DOMAIN or WORKGROUP) but have problems co-existing. what is the solution? i cannot rename the hosts, and why cannot they co-exist if all other data is different...

ClientIDManagerStartup.log -------------------------------------- <![LOG[[RegTask] - Client is not registered. Sending registration request for GUID:1183E6EB-46BA-4C35-AF34-33375666C38F ...]LOG]!><time="17:03:27.099-60" date="06-19-2012" component="ClientIDManagerStartup" context="" type="1" thread="5612" file="regtask.cpp:1595"> <![LOG[RegTask: Failed to send registration request message. Error: 0x87d00231]LOG]!><time="17:03:27.163-60" date="06-19-2012" component="ClientIDManagerStartup" context="" type="3" thread="5612" file="regtask.cpp:1283"> <![LOG[RegTask: Failed to send registration request. Error: 0x87d00231]LOG]!><time="17:03:27.163-60" date="06-19-2012" component="ClientIDManagerStartup" context="" type="3" thread="5612" file="regtask.cpp:1469"> LocationServices.log ---------------------------- <![LOG[Failed to send management point list Location Request Message to XXXXXXXXXXXXXXX.Local]LOG]!><time="16:59:26.594-60" date="06-19-2012" component="LocationServices" context="" type="2" thread="5612" file="lssecurity.cpp:5258"> <![LOG[LSUpdateInternetManagementPoints: No internet MPs were retrieved from internet MP, retaining previous list.]LOG]!><time="16:59:26.594-60" date="06-19-2012" component="LocationServices" context="" type="2" thread="5612" file="lsad.cpp:2405"> <![LOG[There is no AMP for site code 'LO1'. Nulling existing entry in WMI]LOG]!><time="16:59:26.594-60" date="06-19-2012" component="LocationServices" context="" type="1" thread="5612" file="lsad.cpp:3536"> <![LOG[Persisted Default Management Point Locations locally]LOG]!><time="16:59:26.626-60" date="06-19-2012" component="LocationServices" context="" type="1" thread="5612" file="lsad.cpp:3630"> <![LOG[unable to retrieve AD site membership]LOG]!><time="16:59:26.667-60" date="06-19-2012" component="LocationServices" context="" type="1" thread="5612" file="lsad.cpp:606"> <![LOG[begin checking Alternate Network Configuration]LOG]!><time="16:59:26.668-60" date="06-19-2012" component="LocationServices" context="" type="1" thread="5612" file="ccmiputil.cpp:1069"> <![LOG[Finished checking Alternate Network Configuration]LOG]!><time="16:59:26.678-60" date="06-19-2012" component="LocationServices" context="" type="1" thread="5612" file="ccmiputil.cpp:1146"> ClientLocation.log ------------------------- ]LOG]!><time="16:56:56.004-60" date="06-19-2012" component="ClientLocation" context="" type="1" thread="6232" file="event.cpp:729"> <![LOG[Current Internet Management Point is XXXXXXXXXXXXXXX.SYN.Local with Version 0 and Capabilities: <Capabilities SchemaVersion ="1.0"><Property Name="SSL" Version="1" /></Capabilities>]LOG]!><time="16:59:26.574-60"

OK, i got the client and the SCCM to do an initial handshake and SCCM Client was installed. i simply did not create the appropriate Certificate for a machine in a worksgroup. the following link helped http://www.jamesbannanit.com/2012/05/how-to-build-and-capture-in-configuration-manager-2012-using-https/ http://www.petervanderwoude.nl/post/how-to-install-a-configmgr-client-on-a-workgroup-computer-when-the-configmgr-site-is-in-native-mode/ moved on a step, although i got them talking as such, i am now challenged witg getting the policies to sync etc... as the final communication is not happening....!!!

"C:\Windows\CCM\Logs" on the client is where you want to start looking: * check "LocationServices.log" - See whether it is picking up a Site Code or Not.And check any errors. * check "ccmexec.log" - for any issues or errors. this is also a very good source of info http://support.microsoft.com/kb/925282, although it says 2007, the principles remain the same. another good source is http://wmug.co.uk/wmug/b/eskonr/archive/2010/11/16/smssccm_2d00_clients_2d00_installation_2d00_troubleshooting_2d00_check_2d00_list.aspx

I am having great problems trying to install SCCM 2012 client onto a computer with a network connection to the internet, but NOT a member of a domain. i am using the PKI setup within SCCM2012 and have created a RootCA and deployed certificates throughout the local AD and assigned to Group Policies. The machines on the local AD network which receive the policies seem to have a great "handshake" and end up connecting to SCCM and appearing in the main console. Laptops, Computers that are roaming, and not part of my local AD Network are not having such a good time. i believe it is the Certificate communication which is not working. i am exporting the Certificate from the "Certificate Services" within SCCM Server, and then copying this file over to the clients using a USB key. i am then importing the certificate with Private keys into their local certificate store, and all appears fine. until i run ccmsetp.exe. Excerpt from the ccmsetup.log attached, i need ur help <![LOG[Only one MP https://syna01vsscc001d.syn.local is specified. Use it.]LOG]!><time="15:46:04.339-60" date="06-15-2012" component="ccmsetup" context="" type="1" thread="7832" file="ccmsetup.cpp:8763"> <![LOG[Have already tried all MPs. Couldn't find DP locations.]LOG]!><time="15:46:04.339-60" date="06-15-2012" component="ccmsetup" context="" type="3" thread="7832" file="ccmsetup.cpp:9647"> <![LOG[GET 'https://syna01vsscc001d.syn.local/CCM_Client/ccmsetup.cab']LOG]!><time="15:46:04.339-60" date="06-15-2012" component="ccmsetup" context="" type="1" thread="7832" file="httphelper.cpp:802"> <![LOG[begin searching client certificates based on Certificate Issuers]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="1" thread="7832" file="ccmcert.cpp:3759"> <![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="1" thread="7832" file="ccmcert.cpp:3918"> <![LOG[begin to select client certificate]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="1" thread="7832" file="ccmcert.cpp:3999"> <![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:4031"> <![LOG[3 certificate(s) found in the 'MY' certificate store.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:4060"> <![LOG[The 'MY' of 'Local Computer' store has 3 certificate(s). Using custom selection criteria based on the machine name.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:4099"> <![LOG[Machine name is 'SYN-L3-NMS-01'.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:2174"> <![LOG[There are no certificate(s) that meet the criteria.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:2003"> <![LOG[Performing search that includes SAN2 extensions...]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:2210"> <![LOG[Certificate [Thumbprint 498357A12555F1D7EE8DFA009D39965880431790] doesn't have SAN2 extension.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:1563"> <![LOG[Certificate [Thumbprint 235A98C6BB65429BAF75F303B2CB66204AE20090] doesn't have SAN2 extension.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:1563"> <![LOG[Found a certificate with subject name as ‘SYNA01VSSCC001D.SYN.local’, but will continue to look for the certificate with subject name as ‘SYN-L3-NMS-01’.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:1540"> <![LOG[using custom selection criteria based on the machine NetBIOS name.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:4119"> <![LOG[Machine name is 'SYN-L3-NMS-01'.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:2174"> <![LOG[There are no certificate(s) that meet the criteria.]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="0" thread="7832" file="ccmcert.cpp:2003"> <![LOG[GetSSLCertificateContext failed with error 0x87d00281]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="3" thread="7832" file="ccmsetup.cpp:5356"> <![LOG[GetHttpRequestObjects failed for verb: 'GET', url: 'https://syna01vsscc001d.syn.local/CCM_Client/ccmsetup.cab']LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="3" thread="7832" file="httphelper.cpp:942"> <![LOG[DownloadFileByWinHTTP failed with error 0x87d00281]LOG]!><time="15:46:04.340-60" date="06-15-2012" component="ccmsetup" context="" type="3" thread="7832" file="httphelper.cpp:1076"> <![LOG[CcmSetup failed with error code 0x87d00281]LOG]!><time="15:46:04.341-60" date="06-15-2012" component="ccmsetup" context="" type="1" thread="3144" file="ccmsetup.cpp:9454">