ThomasBNewcastle

Hello Well I think I know what the issue is - I think my Certificate I installed on my DP is wrong :-( This is the Guide I used and followed. . . https://technet.microsoft.com/en-gb/library/gg682023.aspx The reason why I think its the Certificate is looking at my MPCONTROL.log (attached) I see the below Skipping this certificate which is not valid for ConfigMgr usage. SMS_MP_CONTROL_MANAGER 22/01/2017 19:59:50 4136 (0x1028) >>> Selected Certificate [Thumbprint 6e3efaeb2e391716e8a2ada8963d6cb4f390db52] issued to 'TSB-SCCM01.Thomasroom.local' for HTTPS Client Authentication SMS_MP_CONTROL_MANAGER 22/01/2017 19:59:50 4136 (0x1028) WINHTTP_CALLBACK_STATUS_SECURE_FAILURE SMS_MP_CONTROL_MANAGER 22/01/2017 19:59:50 4136 (0x1028) [bASEUTIL] AsyncCallback(): ----------------------------------------------------------------- SMS_MP_CONTROL_MANAGER 22/01/2017 19:59:50 4136 (0x1028) [bASEUTIL] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered SMS_MP_CONTROL_MANAGER 22/01/2017 19:59:50 4136 (0x1028) [bASEUTIL] : dwStatusInformationLength is 4 SMS_MP_CONTROL_MANAGER 22/01/2017 19:59:50 4136 (0x1028) What would happen If I deleted all of my certificates from my Certificate server and started again or would building a new SCCM server be better. I mpcontrol.txt

Hello Thank you for reading my post. I been looking into this issue for days with no happy ending I have recently rebuild my SCCM 2012 R2 envirement (lab) to get a better understanding of pki certificates. I have followed the microsoft guide and thought it went well untill it came to installing my SCCM client on a windows 7 computer. Failed to receive ccm message response. Status code = 403 GetDPLocations failed with error 0x80004005 Failed to get DP locations as the expected version from MP 'HTTPS://TSB-SCCM01.Thomasroom.local'.Error 0x80004005 Failed to find DP locations from MP 'HTTPS://TSB-SCCM01.Thomasroom.local'with error 0x80004005, status code 403. Check next MP. Only one MP HTTPS://TSB-SCCM01.Thomasroom.local is specified. Use it. Have already tried all MPs. Couldn't find DP locations. ccmsetup GET 'HTTPS://TSB-SCCM01.Thomasroom.local/CCM_Client/ccmsetup.cab' Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 403 DownloadFileByWinHTTP failed with error 0x80004005 My certificate seems to be working Completed searching client certificates based on Certificate Issuers Begin to select client certificate The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'. 1 certificate(s) found in the 'MY' certificate store. Only one certificate present in the certificate store. Begin validation of Certificate [Thumbprint AD4FD62F66DB6388BC7FB21B4983DAB439DB3B91] issued to 'TR-WINBACKUP.Thomasroom.local' The Certificate [Thumbprint AD4FD62F66DB6388BC7FB21B4983DAB439DB3B91] issued to 'TR-WINBACKUP.Thomasroom.local' has 'Client Authentication' capability Completed validation of Certificate [Thumbprint AD4FD62F66DB6388BC7FB21B4983DAB439DB3B91] issued to 'TR-WINBACKUP.Thomasroom.local' >>> Client selected the PKI Certificate [Thumbprint AD4FD62F66DB6388BC7FB21B4983DAB439DB3B91] issued to 'TR-WINBACKUP.Thomasroom.local From what I have been reading on other forms It could be an IIS permission error (I dont know enough about IIS - but the log looks ok) - attached My boundries are not setup - they are DNS is working I can nslookup my SCCM server from the client has anyone got any thoughts thank you ccmsetup.log u_ex170121.log

Hello Thanks for getting back to me, I tried to use the WIM file to install windows 7 and we get an errror 0x80070490 I am running VMESXI - I have googed this and updated my network drivers to VMWNet3 and updated my boot image to suport the drivers I followed this guilde https://technet.microsoft.com/en-us/library/bb633285.aspx- still no joy Failbuild.log

Hello Thank you for reading my post, I have been following your guide to set up a building and capture a Windows 7 computer. So far so good until I came to building and capturing, the process works in two stages 1) Builds the windows 7 system. 2) Captures the system into a WIM file and saved a new WIM file When running this process I don’t see any errors or fail messages (so I was thinking that’s it’s worked) Until I noticed that the SMSTSLog folder is still on the root of C:\ (Attached) Things that I have done Made sure that my boot files have been distributed Windows Operating system Image has been distributed Network Access account works and can access the shared folder (where I am saving the WIM file, everyone has access) Changed the installed drive to C:\ Anyone see what I ma missing smsts.log smsts-20150427-090921.log wpeinit.log

Hello thanks for reading my post trying to get a build and capture working on my test VM lab with out much joy From what I can see from my logs (attahced) the drivers are not installing - but the PC boots into Windows and all drivers are installed I also seem to have a number of errors thank you for any advise wpeinit.log smsts-20150209-112234.log smsts.log

Hello Not sure where to post this so sorry if in worng place Thank you for reading my post. I am brand new to scripting so my apologies if this is rather basic – But everyone starts somewhere. We are running Windows 7 desktop on a 2003 Enterprise domain. I need to copy some short cuts files (eod8 extension) to the start menu under “All Programs” in a folder called “EOD”. The users must be able to save and open the shortcuts (so using the All Users folder did not work since a standard user can’t save to that location) So I am copying the files to the local user profile. My Script setlocal set Installpath=%~dp0 mkdir "C:\Users\%username%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EOD" echo "No" | xcopy "%Installpath%*.eod8" "C:\Users\%username%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EOD" /d ENDLOCAL Timeout /T 1 When I run the script locally it works – When I deploy through SCCM It fails “Unable to find the file *.eod8” – What I have noticed is that If I go to C:\Windows\ccmcache\XX And edit then close the script file (no change has been made) it works through the Software Center From my limited knowledge I think my issue could be with the location\path of my script Thanks for your advice

Hello I am setting up trust between two test domains both running in VMwhere on two diffrent boxes 1. called ThomasNetwork.local = DC is DCCORE ip address 192.168.0.222 2 called Newcompany.com DC is MynewDC ip address 192.168.0.240 I have set up continal forwading on both DNS and have set up the trusts on both DCs - eveything seems to be working I can validate the trust But when I try to add a user, I see my new domain but I cant find any users I talking some screen shots of my setup (done the same on both DCs)

Hello Thanks for reading my post I have set up my own test lab for SCCM R2 and Windows 2012 R2 to learn how to suppprt and to install both - so far I have got everything working - Bar two things (I am posting both issues in separete posts). To make life simple I have broen this down into sections to help give people the right infomaction to help me 1. A bit of info about my setup My test lab has is called thomasnetwork.local 1. Windows 2012R2 DC (Core) 1 Windows 2012 R2 - SCCM Server alos has SQL running (SCCMSERVER.thomasnetwork.local) 2 Windows 8.1 and 2 Windows 7 client computers 2. This Issue When I installed my WSUS rule (using port 8530) I also configured a GP to point to tell my clients to use http://sccmserver.local:8530 in the "Specify Intranet Microsoft Update service location" . I have Sysnc and downloaded my updates from Microsoft website and created a deployent called "Microsoft Software Updates - 2014-07-25 12:12:42 A" and deployed this to my Windows 8.1 computers. Nothing happened. . . . :-( so I looked at my log files and in the WUAHandler.log I found this Group policy settings were overwritten by a higher authority (Domain Controller) to: Server https://sccmserver.local:8530 and Policy ENABLED WUAHandler 26/07/2014 19:27:46 1940 (0x0794) Failed to Add Update Source for WUAgent of type (2) and id ({1983F5C0-9C8D-4C52-A34F-FFC33525F042}). Error = 0x87d00692. WUAHandler 26/07/2014 19:27:46 1940 (0x0794) after a few hours of google the error most of the Microsoft and other posts told me to remove my GP setting and try agin - so I have disabled that GP and one of my windows 8.1 computers started getting updates - but not from the Softwear center but through Microsoft update section in the control panal but when I look at the setting for Microsoft update I cant change anything. My WUAHandler.log now says Unable to read existing WUA resultant policy. Error = 0x80070002. WUAHandler 27/07/2014 10:20:27 3268 (0x0CC4) Group policy settings were overwritten by a higher authority (Domain Controller) to: Server and Policy NOT CONFIGURED WUAHandler 27/07/2014 10:20:27 3268 (0x0CC4) Failed to Add Update Source for WUAgent of type (2) and id ({1983F5C0-9C8D-4C52-A34F-FFC33525F042}). Error = 0x87d00692. WUAHandler 27/07/2014 10:20:27 3268 (0x0CC4) so google now tells me to make a GP for Specify Intranet Microsoft Update service location and point it to my sever with the port after it :-( when I look at my Deployment its still shown 0% and no other info other then "Client check\passed active" I have attched some client log files to help people help me thank you for you time and help :-) CAS.log UpdatesDeployment.log UpdatesHandler.log WUAHandler.log

Hello Thanks for getting back to me I can ping the SCCMSERVER - I am getting a IP address from my DHCP I have attached my log file smstserror.log

Hello Thanks for reading my post I have been setting up a test SCCM 2012 R2 Environment - managed to get everything working :-) Apart from my Build and Capture I am running a V-Sphere environment, no issues to date I have made a "Build and Capture task Sequence" using the windows 7 CD When I boot the "test PC" I get the F12 for Network prompt Windows PE loads, I see the Password prompt and then I select my Task sequence Then the Task Sequence starts to run until 15% of "Applying Operating System" then I get an error message saying that the task sequence failed 0x80070002 Troubleshooting that I have done 1) looked at the SMSPXE log - all seems to be working fine 2) looked at the SMS log on the X: of my test computer (attached) - I cant find anything :-( 3) Made sure that my boot images, Windows installer and Operating system image are all on my DP with 100% 4) thinking that the issue was with my Operating image I have used another CD to import a different OS image - Same thing 5) I found the back up boot images on my hard drive so I have used them to - no change 6) made a new task sequance - same thing Since I cant see any error messages in the SMS.log file I am unsure on what to do next ( I cant see any error codes) but I am not sure what else to look for Anyone got any thoughts

Hello Thanks for getting back to me, I have reformatted my test server and installed afresh - Same thing happened under Site I get this error " WSUS Configuration Manager failed to configure upstream server settings on WSUS Server "Thomas-SCCM.Thomas-2013.local". Possible cause: WSUS Server version 3.0 SP2 or above is not installed or cannot be contacted. Solution: Verify that the WSUS Server version 3.0 SP2 or greater is installed. Verify that the IIS ports configured in the site are same as those configured on the WSUS IIS website." So it must need WSUS Server ver 3 or above for it to work

Hello Thanks for reading my post. I am setting up a test SCCM system but I am having an issue with WSUS setup I am running a Windows 2012 Server, I am going to Server manager - Add rules and features Wizard - Adding "Windows Server Update Service" adding both WID Database and WSUS Service, the Wizard runs, then in the Server Manager I run post install tasks - but nothing happens - from the documentation a "Windows Server Update Services 3.0 SP2 setup wizard" is supposed to run, I have tried remove and reinstall the Service. I have ran MS update - that did not help - Anyone got any thoughts

Hello Thanks for reading my post To start with some basic info about my VM test lab Part one – My Lab I have two Windows 2012 Servers: Main DC called – NEW-DC01-W12 – Running DHCP – IP address 10.0.0.1 SCCM Server called – NEW-SCCM-W12 10.0.0.1 On my DC I made a container called System Management and give the SCCM server (NEW-SCCM-W12$) and my SCCM admin (SCCMADMIN) account full Control permissions to the System Management container and all its child objects. Not sure where the $ came from but it adds it when I enter my SCCM server name. I used http://technet.microsoft.com/en-gb/library/bb680711.aspx Here is a copy of the file after I ran the file on the CD to extended Active Directory schema <03-17-2013 00:04:45> Modifying Active Directory Schema - with SMS extensions. <03-17-2013 00:04:45> DS Root:CN=Schema,CN=Configuration,DC=Thomas-NEW,DC=local <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-Site-Code. <03-17-2013 00:04:46> Defined attribute cn=mS-SMS-Assignment-Site-Code. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-Site-Boundaries. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-Roaming-Boundaries. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-Default-MP. <03-17-2013 00:04:46> Defined attribute cn=mS-SMS-Device-Management-Point. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-MP-Name. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-MP-Address. <03-17-2013 00:04:46> Defined attribute cn=mS-SMS-Health-State. <03-17-2013 00:04:46> Defined attribute cn=mS-SMS-Source-Forest. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-Ranged-IP-Low. <03-17-2013 00:04:46> Defined attribute cn=MS-SMS-Ranged-IP-High. <03-17-2013 00:04:46> Defined attribute cn=mS-SMS-Version. <03-17-2013 00:04:46> Defined attribute cn=mS-SMS-Capabilities. <03-17-2013 00:04:46> Defined class cn=MS-SMS-Management-Point. <03-17-2013 00:04:47> Defined class cn=MS-SMS-Server-Locator-Point. <03-17-2013 00:04:47> Defined class cn=MS-SMS-Site. <03-17-2013 00:04:47> Defined class cn=MS-SMS-Roaming-Boundary-Range. <03-17-2013 00:04:47> Successfully extended the Active Directory schema. <03-17-2013 00:04:47> Please refer to the ConfigMgr documentation for instructions on the manual <03-17-2013 00:04:47> configuration of access rights in active directory which may still <03-17-2013 00:04:47> need to be performed. (Although the AD schema has now be extended, <03-17-2013 00:04:47> AD must be configured to allow each ConfigMgr Site security rights to <03-17-2013 00:04:47> publish in each of their domains.) I can see the System Management in ad but there is nothing in it I then installed SQL server and SCCM – after adding all the windows features it needs I am now trying to install the client on to a Windows 8 VM and its not working. Looking at the log file for ccmsetup – see below <![LOG[==========[ ccmsetup started in process 2236 ]==========]LOG]!><time="18:00:02.464+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:8115"> <![LOG[CcmSetup version: 5.0.7711.0000]LOG]!><time="18:00:02.479+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:761"> <![LOG[Running on OS (6.2.9200). Service Pack (0.0). SuiteMask = 256. Product Type = 1]LOG]!><time="18:00:02.479+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:894"> <![LOG[Ccmsetup command line: "C:\Windows\SysWOW64\CCMSetup\ccmsetup.exe"]LOG]!><time="18:00:02.479+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3030"> <![LOG[DhcpGetOriginalSubnetMask entry point is supported.]LOG]!><time="18:00:02.479+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="ccmiputil.cpp:117"> <![LOG[begin checking Alternate Network Configuration]LOG]!><time="18:00:02.479+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmiputil.cpp:1069"> <![LOG[Finished checking Alternate Network Configuration]LOG]!><time="18:00:02.495+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmiputil.cpp:1146"> <![LOG[Adapter {17619596-8225-4A57-99B8-59401B9ED738} is DHCP enabled. Checking quarantine status.]LOG]!><time="18:00:02.495+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="ccmiputil.cpp:416"> <![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="18:00:02.635+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="lsad.cpp:601"> <![LOG[Attempting to query AD for assigned site code]LOG]!><time="18:00:02.635+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="lsad.cpp:1610"> <![LOG[Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=167772190)(MSSMSRangedIPHigh>=167772190))))]LOG]!><time="18:00:02.791+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="lsad.cpp:1645"> <![LOG[Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.0.0.0)(mSSMSRoamingBoundaries=Default-First-Site-Name)))]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="lsad.cpp:1706"> <![LOG[Failed to get assigned site from AD. Error 0x80004005]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="2" thread="1260" file="ccmsetup.cpp:363"> <![LOG[GetADInstallParams failed with 0x80004005]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="3" thread="1260" file="ccmsetup.cpp:403"> <![LOG[sslState value: 224]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="ccmsetup.cpp:3646"> <![LOG[Ccmsetup was run without any user parameters specified. Running without registering ccmsetup as a service.]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3698"> <![LOG[No sitecode is specified or detected. Assume AUTO sitecode.]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3703"> <![LOG[CCMHTTPPORT: 80]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:7336"> <![LOG[CCMHTTPSPORT: 443]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:7351"> <![LOG[CCMHTTPSSTATE: 224]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:7369"> <![LOG[CCMHTTPSCERTNAME: ]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:7387"> <![LOG[FSP: ]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:7439"> <![LOG[CCMFIRSTCERT: 1]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:7497"> <![LOG[No MP or source location has been explicitly specified. Trying to discover a valid content location...]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3907"> <![LOG[Looking for MPs from AD...]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3916"> <![LOG[DHCP entry points already initialized.]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="ccmiputil.cpp:75"> <![LOG[begin checking Alternate Network Configuration]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmiputil.cpp:1069"> <![LOG[Finished checking Alternate Network Configuration]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmiputil.cpp:1146"> <![LOG[Adapter {17619596-8225-4A57-99B8-59401B9ED738} is DHCP enabled. Checking quarantine status.]LOG]!><time="18:00:02.838+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="ccmiputil.cpp:416"> <![LOG[Current AD site of machine is Default-First-Site-Name]LOG]!><time="18:00:02.854+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="lsad.cpp:601"> <![LOG[Attempting to query AD for assigned site code]LOG]!><time="18:00:02.854+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="lsad.cpp:1610"> <![LOG[Executing query (&(ObjectCategory=MSSMSRoamingBoundaryRange)(|(&(MSSMSRangedIPLow<=167772190)(MSSMSRangedIPHigh>=167772190))))]LOG]!><time="18:00:02.854+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="lsad.cpp:1645"> <![LOG[Executing query (&(ObjectCategory=mSSMSSite)(|(mSSMSRoamingBoundaries=10.0.0.0)(mSSMSRoamingBoundaries=Default-First-Site-Name)))]LOG]!><time="18:00:02.854+00" date="03-23-2013" component="ccmsetup" context="" type="0" thread="1260" file="lsad.cpp:1706"> <![LOG[Failed to get assigned site from AD. Error 0x80004005]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="2" thread="1260" file="ccmsetup.cpp:363"> <![LOG[GetADInstallParams failed with 0x80004005]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="3" thread="1260" file="ccmsetup.cpp:403"> <![LOG[Couldn't find an MP source through AD. Error 0x80004005]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3935"> <![LOG[Current directory 'C:\Windows\SysWOW64\CCMSetup' is not a valid source location.]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:3975"> <![LOG[No valid source or MP locations could be identified to download content from. Ccmsetup.exe cannot continue.]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="3" thread="1260" file="ccmsetup.cpp:3985"> <![LOG[invalid ccmsetup command line: ]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="3" thread="1260" file="ccmsetup.cpp:3789"> <![LOG[A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:8443"> <![LOG[A Fallback Status Point has not been specified. Message with STATEID='307' will not be sent.]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:8443"> <![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="18:00:02.869+00" date="03-23-2013" component="ccmsetup" context="" type="1" thread="1260" file="ccmsetup.cpp:9454"> I am runing this command CCMsetup.exe /mp:NEW-SCCM-W12 SMSSITECODE=PRI FSP=NEW-SCCM-W12 Under Active Directory Forests I have the message “Insufficient access rights under Publishing Status” And in Site under messages I have “Configuration Manager could not locate the "System Management" container in Active Directory (Thomas-NEW.local). Nor could it create a default container. This will prevent Site Component Manager and Hierarchy Manager from updating or adding any objects to Active Directory. Possible cause: The site server's machine account might not have the correct rights to update active directory. Solution: Either give the Service Account rights to update the domain's System Container, or manually create the "System Management" container in this domain's Active Directory system container, and give the site server computer account full rights to that container (and all children objects.)" I am not sure why my site can’t talk to AD - What account is the "The site server's machine account" Thanks for your help