All Activity

I can see the client is not getting registered (log file clientidmanagerstartup.log), this could be an indication of Boundary / boundary group not correctly setup. Kindly verify IP address / range of workgroup device has a boundary and associated with boundary group to report to Management Point. There are multiple command lines which can be used for client install, kindly check the link Install SCCM Client on Workgroup Computer | Configuration Manager ManishBangia

Hello everybody, I've a problem with configure the SCCM environ and also the Workgroup clients. My clients can be open connection to the SCCM site server. Configuration Manager General Client Certificate: None Connection Type: Currently Internet Version: 5.00.9096.1024 Actions Machine Policy Retrieval & Evaluation Cycle User Policy Retrieval & Evaluation Cycle none more entries Certificates in the local computer SMS\Certificates SMS: SMS Encryption Certificate SMS: SMS Signing Certificate ccmsetup: "C:\Temp\SccmClient\Client\ccmsetup.exe" /source:"C:\Temp\SccmClient\Client" /mp:https://my_mp.fqdn SMSMP=my_mp.fqdn SMSSITECODE=my_sitecode CCMLOGMAXSIZE=10485760 CCMLOGMAXHISTORY=5 ClientLocation.log Status Agent hasn't been initialized yet. Attempting to create pending event. ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) Raising pending event: instance of CCM_CcmHttp_Status { DateTime = "20230310052622.992000+000"; HostName = "my_mp.fqdn"; HRESULT = "0x87d0027e"; ProcessID = 1544; StatusCode = 403; ThreadID = 3908; }; ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) Successfully queued event on HTTP/HTTPS failure for server 'my_mp.fqdn'. ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) Workgroup client is in Unknown location ClientLocation 10/03/2023 06:26:22 3908 (0x0F44) LocationServices.log Failed to send site information Location Request Message to my_mp.fqdn LocationServices 09/03/2023 17:56:24 336 (0x0150) LSIsSiteCompatible : Failed to get Site Version from all directories LocationServices 09/03/2023 17:56:24 336 (0x0150) Won't send a client assignment fallback status point message because the last assignment error matches this one. LocationServices 09/03/2023 17:56:24 336 (0x0150) Failed to execute task 'LSSiteRoleCycleTask'. Error 0x80004005 LocationServices 09/03/2023 17:56:24 5344 (0x14E0) CSiteRoleCycleTask::Execute failed (0x80004005). LocationServices 09/03/2023 17:56:24 5344 (0x14E0) Processing pending site assignment. LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Assigning to site 'my_sitecode' LocationServices 10/03/2023 06:26:23 3908 (0x0F44) LSIsSiteCompatible : Verifying Site Compatibility for <my_sitecode> LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No INF MP available LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Retrieved MP [my_mp.fqdn] from Registry LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) DNS Suffix not specified LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Policy prevents failover to WINS for lookup LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve site information from lookup MP(s) LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No INF MP available LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Retrieved MP [my_mp.fqdn] from Registry LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) DNS Suffix not specified LocationServices 10/03/2023 06:26:23 3908 (0x0F44) No lookup MP(s) from DNS LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Policy prevents failover to WINS for lookup LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Attempting to retrieve site information from lookup MP(s) LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Failed to send site information Location Request Message to my_mp.fqdn LocationServices 10/03/2023 06:26:23 3908 (0x0F44) LSIsSiteCompatible : Failed to get Site Version from all directories LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Won't send a client assignment fallback status point message because the last assignment error matches this one. LocationServices 10/03/2023 06:26:23 3908 (0x0F44) Failed to execute task 'LSSiteRoleCycleTask'. Error 0x80004005 LocationServices 10/03/2023 06:26:23 4900 (0x1324) CSiteRoleCycleTask::Execute failed (0x80004005). LocationServices 10/03/2023 06:26:23 4900 (0x1324) Successfully queued RefreshSecuritySettingsEvent event. CcmMessaging 10/03/2023 06:31:23 3908 (0x0F44) Successfully queued event on HTTP/HTTPS failure for server 'HDHX5911.euro1.voith.net'. CcmMessaging 10/03/2023 06:31:23 3908 (0x0F44) Post to http://my_mp.fqdn/ccm_system/request failed with 0x87d00231. CcmMessaging 10/03/2023 06:31:23 3908 (0x0F44) ClientIDManagerStartup.log Sleeping for 224 seconds before refreshing location services. ClientIDManagerStartup 10/03/2023 06:27:38 3908 (0x0F44) RegTask: Failed to refresh site code. Error: 0x8000ffff ClientIDManagerStartup 10/03/2023 06:31:23 3908 (0x0F44) Sleeping for 223 seconds before refreshing location services. ClientIDManagerStartup 10/03/2023 06:32:39 3908 (0x0F44) Firewall: is disabled local user: local administrator acount OS: Windows 10 22H2 Enterprise Domain/Workgroup: Workgroup Network: Public (not connected to the Internet) The SCCM site server is available over the network (ping). I hope you can help me on this issue. BR Lucky

Run the following PowerShell command: (New-Object -ComObject "Microsoft.Update.ServiceManager").Services | Select Name, IsDefaultAUService, IsRegisteredWithAU If it shows Windows Server Update Service's IsDefaultAUService as True then device is getting updates from WSUS.

Yes, we can remotely run the Powershell command for these devices. https://www.manishbangia.com/initiate-sccm-client-actions-cmd-line/

Here is the customsettings.ini specifically created for Lenovo model. It will pick OSDCOMPUTERNAME as first 4 characters of Model along with serial number of the device. ;Generate Hostname for Lenovo as: first 4 digits of Model and serialnumber ;Generate Hostname based upon Laptop/Desktop with SerialNumber ;Generate Hostname based upon VM with MacAddress [Settings] Priority=Default,ByModel,ByLaptop,ByVM,ByDesktop Properties=CustomSerialNumber,CustomMacAddress,CustomModel [Default] CustomSerialNumber=#Right(Replace("%SERIALNUMBER%","-",""),13)# CustomMacAddress=#Right(Replace("%MacAddress001%",":",""),13)# CustomModel=#Left("%Model%",4)# [ByModel] Subsection=%Make% [Lenovo] OSDCOMPUTERNAME=%CustomModel%-%SerialNumber% [20K5] [ByLaptop] Subsection=LP-%IsLaptop% [LP-True] OSDCOMPUTERNAME=LP-%SERIALNUMBER% [ByDesktop] Subsection=DP-%IsDesktop% [DP-True] OSDCOMPUTERNAME=DP-%SERIALNUMBER% [ByVM] Subsection=VM-%IsVM% [VM-True] OSDCOMPUTERNAME=VM%CustomMacAddress% OSDomainOUName=LDAP://OU=Virtual,OU=Workstations,DC=MANBAN,DC=COM

On Hyper-V settings, uncheck the option for “Enhanced session”.

I have configured windows hello for business policy through Intune. It does work fine with laptop, but cannot see it working with virtual machine. I am using hyper-v and windows hello setup never launches.

I have no access too the SCCM console. Those that do seem to prefer to "Advertise" rather than "Assign" updates. I have several hundred users who are reluctant to apply application and OS updates. Once the packages are advertised, is there a command line, powershell, or vb script I can use as an administrator to remotely instruct Software Center to download and install whatever updates are advertised?

I wanted to understand if device is getting patch either through Intune or through WSUS. What is the easiest way to check it.

Hi Nitin, Update ring has the feature to uninstall the most recent patch. You can’t remove the patch from the ring but can uninstall it on the groups targeted by the ring.

Hi Manish, If we are doing the Autopatch by the ring if we need to remove the Patch from the ring if 2 KB is not required for the client can we remove it from the ring.If yes please share us the details. Please let me know if you need any more info. Thanks, Nitin A

Following is the query to be used: Select * from dbo.Collections where flags like '6' Note: Meaning of flag is 'Collection Refresh Settings' and it can have following values along with meaning: 1 = Manual Update 2 = Periodic Update 4 = Incremental Updates 6 = Incremental and Periodic Updates

I verified the SQL services, I can see "SQL Server (MSSQLSERVER)" services is up and running along with other SQL Server CEIP Service, SQL Server Integration Services, SQL Server Reporting Services, all of them are set to automatic and running. Could you please share the screenshot of what is not working ?

Sorry for the late reply, I was on holiday. I am about to publish the video on this (MEM Evaluation Kit configuration) and will check and share the results.

Hi, I downloaded the SCCM Lab using MEM Evaluation Lab Kit, but SQL server could not start, evaluation is not valid. I made a try with a serial number for sql server 2017, but no more I want to train on this lab kit.. Thanks for your help

Dear Manish, Hope you are doing good. Your videos are amazing especially your latest video "How to learn Intune - Strategy that works". I'm unable to get interview questions for Intune. Is there any chance to send interview questions for Intune? It could be really helpful for my preparation.

1)Kindly share windows 10 custom task sequence zip format which consist powershel script/MDT setting package customization like computer name based on location/country/default gateway and joining to specific OU based on location

We have thousands of collection in sccm and lots of them have incremental setting enabled. I have to perform cleanup, how to find list of all collections with incremental setting?

I have to exclude a windows defender check on a specific folder. This can be done by GPO windows defender >exclusion >path How can I do it by SCCM? Thanks

I am looking at some logs. I have noticed for example distmgr.log does't have date incremental I mean I can see only the data of the day I can't see historical movements.

The easiest way to understand this - is to distribute a small package and monitor the progress through distmgr.log immediately with time stamp. I hope you are using cmtrace.exe tool (not notepad), also make a note of thread ID in distmgr when you start distributing the content, so that you are 100% sure you are tracking the same package. It's not difficult, the content info for distribution will not be too much, once you go through it couple of times you will be easily able to understand it.

Thank you Manush, I was looking for at the wrong place then.... I found smsdpprov.log. it was in another folder (in the new DP) but it was there 😉 The logs at my eyes are are a data tangle. How can I move and find what I need in those logs. For example, distmgr.log present in the Primary site is a large file and it grows more and more. Could you please sugggest me where to find a guide or tutorial where to start understanding how to interpret all data?

If DP is installed on a server which is not a primary site, then look for distmgr.log on Primary site. On Distribution point look for smsdpprov.log under d:\SMS_CCM\logs. It seems the DP installation went fine as SCCM content library folder and all supported folders got created. Check the installation status through smsdpprov.log. Another way to check installation status is through Monitoring \ Distribution status \ distribution point configuration status

I have created a new DP choosing as primary content and packages D:\ drive. At the end of the wizard process I went to the new DP at D:\ to check the logs but I couldn't find it because the program files (D:\program files\Microsoft Configuration Manager \logs) was not in the D drive. I couldn't find distmgr.log. In D drive I found only this folders: -remoteinstall -SCCMContentLib -SMS -SMS_CCM -SMS_DP$ -SMSPKGD$ -SMSSIG$ Something went wrong or do I need to do something more? Thanks

Global Administrator role is must to configure Automatic enrollment for Windows devices. Intune Administrator role is not sufficient. For more details check: https://docs.microsoft.com/bs-latn-ba/mem/intune/enrollment/quickstart-setup-auto-enrollment