I'm really hoping someone on this forum can help. I used the Anyweb guides to configure SCCM 2007 (R2 though). I also modified it slightly to turn it into Native Mode, but I have all the certs installed on the endpoints and server instances.
I'm running everything in a lab environment and all the various SCCM components (DP, MP, Site Server, etc.) are running on one Server 2008 R2 instance. I've spent literally weeks working through various issues, but I feel that I'm extremely close to getting it working on the LAN at the moment. Currently, I have 2 Windows 7 clients that are members of the domain, have client certs, and the SCCM client push is working correctly to them.
At least some communication is working as I'm getting hardware and software inventory in the reporting console, but no matter what I do, I can not seem to push any updates or software out to the sccm clients. I followed the guide posted by Anyweb on how to configure Firefox, but just no luck.
I've poured through logs on both the server and the console and these are the only real errors that I can seem to find. These may be red herrings, but wanted to be thorough.
On the client side, seeing this error and similar a bunch in PolicyAgent.log:
Signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}
On the server side, seeing this error in the MP_Status.log:
Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN7ENTTEST1]LOG
Also seeing this in the CAS.log:
GetLogonUserSid failed at GetTokenSids 0x800703f0
Also, the PolicyAgent.log:
Signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.
More detail:
Client Logs
Client PolicyAgent.log
<![LOG[Cleaning policy for 'SMS:FLK' in '\\WIN7ENTTEST1\ROOT\ccm\Policy\S_1_5_21_1459899864_4149357974_4185135662_1000\RequestedConfig' ()]LOG]!><time="14:56:38.577+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="312" file="policyutil.cpp:6912">
<![LOG[Requesting Machine policy assignments]LOG]!><time="15:56:37.578+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="3504" file="requestassignmentstask.cpp:1448">
<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="15:56:37.593+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="3504" file="requestassignmentstask.cpp:1508">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsRequested
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215637.687000+000";
ProcessID = 1172;
ResourceName = "WIN7ENTTEST1";
ResourceType = "Machine";
ThreadID = 3504;
};
]LOG]!><time="15:56:37.687+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="3504" file="event.cpp:525">
<![LOG[Requesting User policy assignments for 'S-1-5-21-1459899864-4149357974-4185135662-1000']LOG]!><time="15:56:37.844+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="728" file="requestassignmentstask.cpp:1452">
<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="15:56:37.890+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="728" file="requestassignmentstask.cpp:1508">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsRequested
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215638.094000+000";
ProcessID = 1172;
ResourceName = "S-1-5-21-1459899864-4149357974-4185135662-1000";
ResourceType = "User";
ThreadID = 728;
};
]LOG]!><time="15:56:38.094+360" date="12-04-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="728" file="event.cpp:525">
<![LOG[Processing Machine assignments from 'SMS:FLK'. The new cookie is '2009-12-04 10:01:54.743'.]LOG]!><time="15:56:38.156+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="replyassignmentsendpoint.cpp:970">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsReceived
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215638.172000+000";
ProcessID = 1172;
ReplyType = "Full";
ResourceName = "WIN7ENTTEST1";
ResourceType = "Machine";
ThreadID = 956;
};
]LOG]!><time="15:56:38.172+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">
<![LOG[Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
{
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215638.281000+000";
HRESULT = "0x00000000";
ProcessID = 1172;
ThreadID = 956;
};
]LOG]!><time="15:56:38.281+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">
<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="15:56:38.328+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="15:56:38.328+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="15:56:38.344+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">
<![LOG[Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
{
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215638.516000+000";
HRESULT = "0x00000000";
ProcessID = 1172;
ThreadID = 956;
};
]LOG]!><time="15:56:38.516+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">
<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="15:56:38.547+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="15:56:38.547+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="15:56:38.562+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="956" file="replyassignmentsendpoint.cpp:439">
<![LOG[Raising event:
instance of CCM_PolicyAgent_PolicyAuthorizationFailure
{
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215638.578000+000";
PolicyNamespace = "\\\\WIN7ENTTEST1\\ROOT\\ccm\\Policy\\Machine\\RequestedConfig";
PolicySource = "SMS:FLK";
ProcessID = 1172;
ThreadID = 956;
};
]LOG]!><time="15:56:38.578+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="956" file="event.cpp:525">
<![LOG[Processing User assignments from 'SMS:FLK'. The new cookie is ''.]LOG]!><time="15:56:38.594+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="replyassignmentsendpoint.cpp:970">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsReceived
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:C18A6EDB-965F-445D-A763-0CDE63EC284D";
DateTime = "20091204215638.594000+000";
ProcessID = 1172;
ReplyType = "Full";
ResourceName = "S-1-5-21-1459899864-4149357974-4185135662-1000";
ResourceType = "User";
ThreadID = 3504;
};
]LOG]!><time="15:56:38.594+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="event.cpp:525">
<![LOG[Received full policy update with 0 assignments]LOG]!><time="15:56:38.609+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="replyassignmentsendpoint.cpp:1429">
<![LOG[Cleaning policy for 'SMS:FLK' in '\\WIN7ENTTEST1\ROOT\ccm\Policy\S_1_5_21_1459899864_4149357974_4185135662_1000\RequestedConfig' ()]LOG]!><time="15:56:38.609+360" date="12-04-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="3504" file="policyutil.cpp:6912">
Server Logs
MP_Status on Server:
<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN7ENTTEST1]LOG]!><time="06:56:49.742+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4996" file="stattran.cpp:1565">
<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\VUN2V116.SVF"]LOG]!><time="06:56:49.742+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4996" file="stattran.cpp:959">
<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN2K8R2-1]LOG]!><time="07:03:48.867+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4592" file="stattran.cpp:1565">
<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\JVC4DNHW.SVF"]LOG]!><time="07:03:48.867+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4592" file="stattran.cpp:959">
<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN7ENTTEST1]LOG]!><time="07:56:49.837+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4772" file="stattran.cpp:1565">
<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\3NNLAQ7G.SVF"]LOG]!><time="07:56:49.838+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4772" file="stattran.cpp:959">
<![LOG[Mp Status: processing event: SMS_PolicyAgent_PolicyAuthorizationFailure, for machine: WIN2K8R2-1]LOG]!><time="08:03:48.931+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4892" file="stattran.cpp:1565">
<![LOG[MP Status: SVF file written successfully to "C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\statmgr.box\statmsgs\AOVFDCRT.SVF"]LOG]!><time="08:03:48.932+360" date="12-07-2009" component="MP_StatusManager" context="Event processing" type="1" thread="4892" file="stattran.cpp:959">
CAS.LOG on server:
<![LOG[GetLogonUserSid failed at GetTokenSids 0x800703f0]LOG]!><time="08:27:32.801+360" date="12-02-2009" component="ContentAccess" context="" type="2" thread="6432" file="contentaccessservice.cpp:202">
PolicyAgent.log on server:
<![LOG[Requesting Machine policy assignments]LOG]!><time="08:03:48.394+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5636" file="requestassignmentstask.cpp:1448">
<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="08:03:48.400+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5636" file="requestassignmentstask.cpp:1508">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsRequested
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140348.483000+000";
ProcessID = 5200;
ResourceName = "WIN2K8R2-1";
ResourceType = "Machine";
ThreadID = 5636;
};
]LOG]!><time="08:03:48.484+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5636" file="event.cpp:525">
<![LOG[Processing Machine assignments from 'SMS:FLK'. The new cookie is '2009-12-06 17:00:33.170'.]LOG]!><time="08:03:48.625+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="replyassignmentsendpoint.cpp:970">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsReceived
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140348.626000+000";
ProcessID = 5200;
ReplyType = "Full";
ResourceName = "WIN2K8R2-1";
ResourceType = "Machine";
ThreadID = 5636;
};
]LOG]!><time="08:03:48.626+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">
<![LOG[Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
{
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140348.632000+000";
HRESULT = "0x00000000";
ProcessID = 5200;
ThreadID = 5636;
};
]LOG]!><time="08:03:48.632+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">
<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="08:03:48.652+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="08:03:48.655+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="08:03:48.660+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">
<![LOG[Raising event:
instance of CCM_ServiceHost_CertRetrieval_Status
{
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140348.676000+000";
HRESULT = "0x00000000";
ProcessID = 5200;
ThreadID = 5636;
};
]LOG]!><time="08:03:48.676+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">
<![LOG[signature verification failed for PolicyAssignmentID {1968583e-8024-484b-bfe7-55baf78da077}.]LOG]!><time="08:03:48.695+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {68a1761d-66b2-4ced-8304-e88ba79cf865}.]LOG]!><time="08:03:48.698+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">
<![LOG[signature verification failed for PolicyAssignmentID {dcbf6228-0739-4c0a-a7aa-9583ec6d48d0}.]LOG]!><time="08:03:48.703+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="3" thread="5636" file="replyassignmentsendpoint.cpp:439">
<![LOG[Raising event:
instance of CCM_PolicyAgent_PolicyAuthorizationFailure
{
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140348.705000+000";
PolicyNamespace = "\\\\WIN2K8R2-1\\ROOT\\ccm\\Policy\\Machine\\RequestedConfig";
PolicySource = "SMS:FLK";
ProcessID = 5200;
ThreadID = 5636;
};
]LOG]!><time="08:03:48.705+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="5636" file="event.cpp:525">
<![LOG[Requesting User policy assignments for 'S-1-5-21-2157139612-4035527790-3516504348-500']LOG]!><time="08:03:49.422+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5912" file="requestassignmentstask.cpp:1452">
<![LOG[Requesting policy from authority 'SMS:FLK']LOG]!><time="08:03:49.432+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5912" file="requestassignmentstask.cpp:1508">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsRequested
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140349.541000+000";
ProcessID = 5200;
ResourceName = "S-1-5-21-2157139612-4035527790-3516504348-500";
ResourceType = "User";
ThreadID = 5912;
};
]LOG]!><time="08:03:49.541+360" date="12-07-2009" component="PolicyAgent_RequestAssignments" context="" type="1" thread="5912" file="event.cpp:525">
<![LOG[Processing User assignments from 'SMS:FLK'. The new cookie is ''.]LOG]!><time="08:03:49.670+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="replyassignmentsendpoint.cpp:970">
<![LOG[Raising event:
instance of CCM_PolicyAgent_AssignmentsReceived
{
AuthorityName = "SMS:FLK";
ClientID = "GUID:BE924183-2E95-4C0A-BEB7-58E83BB2BA3E";
DateTime = "20091207140349.671000+000";
ProcessID = 5200;
ReplyType = "Full";
ResourceName = "S-1-5-21-2157139612-4035527790-3516504348-500";
ResourceType = "User";
ThreadID = 4892;
};
]LOG]!><time="08:03:49.671+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="event.cpp:525">
<![LOG[Received full policy update with 0 assignments]LOG]!><time="08:03:49.673+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="replyassignmentsendpoint.cpp:1429">
<![LOG[Cleaning policy for 'SMS:FLK' in '\\WIN2K8R2-1\ROOT\ccm\Policy\S_1_5_21_2157139612_4035527790_3516504348_500\RequestedConfig' ()]LOG]!><time="08:03:49.673+360" date="12-07-2009" component="PolicyAgent_ReplyAssignments" context="" type="1" thread="4892" file="policyutil.cpp:6912">
