samadam

Hello, We have a site with two MP's, one used for a DMZ (behind fire wall) and one for the production environment. When installing the SCCM client for the production computers they connect to the correct MP but then quickly change to the wrong MP behind the firewall. MS explained that all MP's for a site are listed and the SCCM client choose one of them and then tries to connect. Then it tries another. Our problem is that it takes hours before the client changes MP again and it doesn't stay connected to the correct more than a couple of minutes. This causes the client not to register ok with the site and it doesnt receive the policy ok. Boundaries are ok and boundarie groups points to the correct MP. What could cause this issue and how could we solve it? Would a secondary site setup for our DMZ MP behind the fire wall solve this or would our production clients still try to connect to the DMZ MP? Any help would be appreciated! /Sam A.

Thanks. But what does this mean then: Management Point < -- > Site Server (See note 5, Communication between the site server and site systems) Description UDP TCP RPC Endpoint mapper -- 135 RPC -- DYNAMIC Server Message Block (SMB) -- 445

Due to firewalls rules I tried to limit the dynamic port range for tcp/ip and set a specific span of ports. To do it works fine but I think I get some issues both with my reports and management points and the file replication to the distribution points due to this change. Just wanted to see if anyone else have tried this and if it works or not for you!? To limit the ports I run the netsh (http://support.microsoft.com/kb/929851) command on all management servers and have this specific limitation set to be allowed in our firewalls.... Can't find any usefull information about limiting these ports for Config Mgr, it seems like it's a common thing to do with other System Center products though...Makes me wonder.. Any ideas/feedback is much appreciated! Thanks! /Sam

Changed my tcp dynamic port range in order to be able to please the firewall administrators. After doing this the reports are troubeling me, I guess it could do with this or? srsrp.log Reporting Services URL from Registry [https://server.domain.com/ReportServer/ReportService2005.asmx] Reporting Services is running Retrieved datasource definition from the server. Retrieved datasource definition from the server. Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_XXX Loading localization resources from directory [F:\SMS_SRSRP\SrsResources.dll] Looking for 'Swedish (Sweden)' resources Looking for 'Swedish' resources Falling back to 'en' resource set Confirmed the configuration of SRS role [ConfigMgr Report Users]. Confirmed the configuration of SRS role [ConfigMgr Report Administrators]. Confirmed the security policy for folder [/]. Confirmed the security policy for folder [/ConfigMgr_XXX]. Confirmed the security policy for folder [/ConfigMgr_XXX/Asset Intelligence]. Confirmed the security policy for folder [/ConfigMgr_XXX/Compliance and Settings Management]. Confirmed the security policy for folder [/ConfigMgr_XXX/Administrative Security]. Confirmed the security policy for folder [/ConfigMgr_XXX/Operating System]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Updates - A Compliance]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Updates - B Deployment Management]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Updates - C Deployment States]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Updates - D Scan]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Updates - E Troubleshooting]. Confirmed the security policy for folder [/ConfigMgr_XXX/Driver Management]. Confirmed the security policy for folder [/ConfigMgr_XXX/Task Sequence - Deployment Status]. Confirmed the security policy for folder [/ConfigMgr_XXX/Task Sequence - Deployments]. Confirmed the security policy for folder [/ConfigMgr_XXX/Task Sequence - Progress]. Confirmed the security policy for folder [/ConfigMgr_XXX/Task Sequence - References]. Confirmed the security policy for folder [/ConfigMgr_XXX/State Migration]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Distribution - Application Monitoring]. Confirmed the security policy for folder [/ConfigMgr_XXX/Virtual Applications]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Distribution - Package and Program Deployment Status]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Distribution - Package and Program Deployment]. Confirmed the security policy for folder [/ConfigMgr_XXX/User - Device Affinity]. Confirmed the security policy for folder [/ConfigMgr_XXX/Software Metering]. Confirmed the security policy for folder [/ConfigMgr_XXX/Status Messages]. Confirmed the security policy for folder [/ConfigMgr_XXX/Migration]. Confirmed the security policy for folder [/ConfigMgr_XXX/Device Management]. Confirmed the security policy for folder [/ConfigMgr_XXX/Status Messages - Audit]. Confirmed the security policy for folder [/ConfigMgr_XXX/Alerts]. Confirmed the security policy for folder [/ConfigMgr_XXX/Client Status]. Confirmed the security policy for folder [/ConfigMgr_XXX/Client Push]. Confirmed the security policy for folder [/ConfigMgr_XXX/Hardware - CD-ROM]. Confirmed the security policy for folder [/ConfigMgr_XXX/Hardware - Disk]. Confirmed the security policy for folder [/ConfigMgr_XXX/Hardware - General]. Confirmed the security policy for folder [/ConfigMgr_XXX/Hardware - Memory]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Hardware - Modem]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Hardware - Network Adapter]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Hardware - Processor]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Hardware - SCSI]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Hardware - Sound Card]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Hardware - Video Card]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Site - Client Information]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Site - Discovery and Inventory Information]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Site - General]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Site - Server Information]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Network Access Protection]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Power Management]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Wake On LAN]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Upgrade Assessment - Windows 7]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Network]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software - Files]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software - Companies and Products]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Users]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Distribution - Collections]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Distribution - Content]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Out Of Band Management]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Endpoint Protection]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Status Messages/Status Messages - Hidden]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Endpoint Protection/Endpoint Protection - Hidden]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Distribution - Application Monitoring/Software Distribution - Application Monitoring - Hidden]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Network Access Protection]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Asset Intelligence]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Compliance and Settings Management]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Administrative Security]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Operating System]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Updates - A Compliance]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Updates - B Deployment Management]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Updates - C Deployment States]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Updates - D Scan]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Software Updates - E Troubleshooting]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Driver Management]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Task Sequence - Deployment Status]. Unable to connect to the remote server Failed to retrieve existing folder security for folder [/ConfigMgr_XXX/Task Sequence - Deployments]. Unable to connect to the remote ----- Cant see any reports in my console.... Any help appreciated! Cheers, SamAdam