nicka

Ah I am a fool, I did not approve the servers in sccm (did not know that was needed). Working great now.

Currently I have an SCCM environment that is working fine for 2 domains, the one the server is located in and a second that has a one way trust to the first. When I try to add a third, non-trusted domain, I can add all of the servers through discovery, and they add correctly to the site (both in SCCM console and in the SCCM clients), however they do not seem to retrieve any policies. Setup: Dom1 = domain SCCM 2012 SP1 server is located in Dom2 = one way trust of Dom1 Dom3 = no trust (problem domain) The client is deployed using WSUS, and installs fine. When I go to the client everything looks ok except for in the Action tab, where only the 2 default actions are there (Machine + User Policy Retrieval) The firewall is not the issue, as I have opened up all ports in both directions (for the time being for testing). The boundaries seem to be setup fine, as the clients are assigned to the correct site (I also assign the site through Group policy, same as I do in Dom1) There is a client setting assigned to the collection that the clients are in, the same one that is assigned to a working collection in Dom1 The one thing I can think of is that a FQDN is required for Dom3, but not Dom1 or Dom2, but that does not seem to be valid, as the site is connecting properly, it is just the policies that are missing. I have gone through pretty much all of the logs on the clients, but to no avail From policyevaluator.log on one of the Clients in Dom3 Evaluating policy in \\server\ROOT\ccm\Policy\Machine\RequestedConfig Evaluation not required. No changes detected. Raising event: instance of CCM_PolicyAgent_PolicyEvaluationComplete P.S. sorry if I missed anything, I had a longer post written up, but accidentally refreshed the page and lost it, and I feel this one is shorter..

Hey all, I am working on a new SCCM infrastructure, and am currently testing out application deployment using SCCM 2012, and I am new to Config Manager. I am deploying applications to computers (not users) and setting it to required and to install ASAP. That has been going well most of the time, but sometimes, for various reasons, it will fail to deploy. In such occasions, it shows as an "error" in sccm when I view it in the monitoring area, but I cannot figure out how to retry this. Does anyone here know how? I feel like I am missing something very basic Edit: I was lacking in details so just a bit of clarification. I created a collection named "Office" and moved a computer into it. I have deployed the application to the collection, and it is set to required. Because of something non-related to SCCM, it failed. At this point I am not able to retry the installation. Please let me know if any more details are needed. Thanks in advance, Nick

I was not using client push, but instead using WSUS to push them as is shown in the tutorials on this site, also for some reason I cannot get client push to work. That being said, after adding them to SCCM, I pointed them to the new WSUS server using a GPO and they moved accordingly. Thanks for your help.

I have been following the steps in these guides to setup my SCCM server, and I am also testing a move to a new server. I am just curious if there is a method to move the clients to the new server, and actually have the guests respond accordingly. I can add them to the new one, but as far as I understand, they will not follow it unless I actually change the server they are pointing at through the control panel on the guest server. I am sure there is some way to do so, but I am not sure what it is. Maybe editing a setting through group policy or something. Thanks

Thanks, I somehow missed the lines showing the logs to check, so I will need to go through them to see anything. One question though, the user I am installing with (SMSadmin) is a domain admin, but *not* an admin and the servers that will be getting the clients installed. Could that be causing them to not install? I will be checking the logs, maybe I will find something there. Thanks again. Edit: tried adding the SMSadmin user I am using as an admin and still no go, now log checking time.

Hi, System center noob here and I have a question. First things first, I am running RTM, not RC, just in case that matters. I have followed all the steps above, except the alerting, as this is just a test environment, I have no need for alerting at this time. When I install the endpoint protection point role, from all the other tutorials I have seen online, it should give me some packages for endpoint protection to deploy to the clients (In software library > application management > packages) , which hopefully will link endpoint on the clients back to this server. This tutorial shows no such thing, so I feel like there is something I am missing. I have also searched for quite some time online, and found nothing about how these packages are created. Unfortunately, I do not see how to create these packages to deploy, without manually doing them, and when I tried that, they did not deploy at all, it sat at 0%. Any advice would be extremely helpful, maybe I need to go through one of the other "parts" of this tutorial series to creat those (part 9?), but I see nothing specific to endpoint protection, and it only seems to work for MSIs, but endpoint is an exe. Thanks, Nick