Re: Need help badly!!! Please....

From: Stan White [MS] (stanwh_at_microsoft.com)
Date: 02/03/05 

Date: Thu, 3 Feb 2005 12:31:06 -0800

Actually you did not mention renaming the site server in this thread - that
can add to the problems.
ccmdelcert is what you need for the certificate error below.

What OS are the machines you are having trouble with if the working ones are
XP? 

-- 
-- 
Stan [MSFT]
--
--
This posting is provided "AS IS" with no warranties, and confers no rights.
--
--
"John Guderian" <lanadmin@avrinc.com> wrote in message 
news:OIEE17hCFHA.2960@TK2MSFTNGP14.phx.gbl...
>I actually did run both tools. PolicySpy shows that the clients with issues 
>are all assigned to the correct site & MP. MPTroubleshooter passes all 
>test. I also should point out that within the SMS console, most client show 
>"yes" for "assigned", but show "no" in "client", and dont have a site code. 
>The only systems that show "yes" in "client", have been windows xp systems.
>
> I have also run ccmclean on one of the clients, and even removed bits. 
> After the successful re-install of the client, I am receving the same 
> errors.
>
> There are no errors in the IIS log, just a lot of these:
> **************************************************************************
> 2005-02-03 18:25:16 172.16.10.23 CCM_POST /ccm_system/request - 80 - 
> 172.16.10.98 ccmhttp 200 0 0
> **************************************************************************
> Within the certificatemaintenance.log I have found these errors, that may 
> provide some info.
> Failed to find the certificate in the store, retry 1. 
> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
> Failed to find the certificate in the store, retry 2. 
> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
> Failed to find the certificate in the store, retry 3. 
> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
> Failed to find the certificate in the store, retry 4. 
> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
> Failed to find the certificate in the store, retry 5. 
> CertificateMaintenance 2/3/2005 11:13:38 AM 1124 (0x0464)
> Creating Signing Certificate... CertificateMaintenance 2/3/2005 11:13:38 
> AM 1124 (0x0464)
> Crypt acquire context failed with 0x8009000f. CertificateMaintenance 
> 2/3/2005 11:13:38 AM 1124 (0x0464)
> Failed to create certificate 8009000f CertificateMaintenance 2/3/2005 
> 11:13:38 AM 1124 (0x0464)
> CCMDoCertificateMaintenance failed (0x8009000f). CertificateMaintenance 
> 2/3/2005 11:13:38 AM 1124 (0x0464)
> **************************************************************************
>
> Any ideas? I believe this is absolutely a client issue, as my MP is 
> running, and I am not receiving any errors on the site. However I dont 
> know why my clients would be experiencing this. Like I said before the 
> server name has renamed as I never re-installed the OS just the site. And 
> the site code, and site are all named the same.
>
> Thanks
>
> "Stan White [MS]" <stanwh@microsoft.com> wrote in message 
> news:OZJk0ThCFHA.3324@TK2MSFTNGP15.phx.gbl...
>> You should take a look at some troubleshooting tools from the SMS web 
>> site to help narrow down the problem first.
>>
>> MP troubelshooter
>> Policyspy
>>
>> The software inventory problem is a different one than the certificate 
>> and DTS issue, the execmgr log entry is just because you have no policy 
>> from the MP.
>> Try ccmdelcert and ccmclean on a client machine and re-push to see if 
>> that fixes the client side problems.
>>
>> Are there errors on your MP as well or in the IIS logs on the MP?
>>
>>
>> -- 
>> -- 
>> Stan [MSFT]
>> --
>> --
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>> --
>> --
>>
>> "John Guderian" <lanadmin@avrinc.com> wrote in message 
>> news:%23wcqpQXCFHA.328@tk2msftngp13.phx.gbl...
>>> Ok heres the scenario. Ive been trying to post individual problems, but 
>>> Im getting nowhere.
>>>
>>> Set-up
>>>
>>> Windows 2003 server standard
>>> Sql 2000 sp3 (same box)
>>> SMS 2003 SP1 (site server with all roles, same box)
>>>
>>> I had to re-install the site. The process I took was directly out of 
>>> the following site.
>>>
>>> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/deploy/spgsms03/spsms14.mspx
>>>
>>> I even removed the WMI namespace.
>>>
>>> The installation went very smooth, and I was receiving 0 errors after 
>>> the installation of all the roles. All settings are the same(site code, 
>>> etc.), this is simply a re-install. After I initialized a discovery 
>>> method, I began receiving errors for the SMS_SOFTWARE_METERING_PROCESSOR 
>>> saying:
>>> **************************************************************************
>>> MS Software Inventory Processor failed to process software inventory 
>>> file "D:\SMS\inboxes\auth\sinv.box\yumttqqu.SID" because the file does 
>>> not have a corresponding discovery record. SMS Software Inventory 
>>> Processor has moved this file to the Orphans directory as file 
>>> "D:\SMS\inboxes\auth\sinv.box\Orphans\ccv51zg5.SID" and will retry 
>>> processing it later.
>>> **************************************************************************
>>>
>>> The problem is that after there were discovery records...Out of 70 
>>> clients only two successfully became official "clients" within the 
>>> console.
>>>
>>> I enabled client push, but this did nothing. The install was successful 
>>> on the clients that I checked, however they still are not "clients".
>>>
>>> I checked the locationservices.log and they are finding the MP from AD. 
>>> I can see in Policyevaluator.log that clients are downloading policies. 
>>> However in datatransferservice.log I get the following errors:
>>> **************************************************************************
>>> DTSJob {F390E42E-A220-441F-BAD3-977B844BF344} in state 'Error'. 
>>> DataTransferService 2/2/2005 2:59:46 PM 1584 (0x0630)
>>> DTSJob {F390E42E-A220-441F-BAD3-977B844BF344} in state 
>>> 'NotifiedComplete'. DataTransferService 2/2/2005 2:59:46 PM 1584 
>>> (0x0630)
>>> DTS job {F390E42E-A220-441F-BAD3-977B844BF344} has completed:
>>> Status : ERROR (0x800706b5)
>>> Start time : 02/02/2005 14:59:44
>>> Completion time : 02/02/2005 14:59:46
>>> Elapsed time : 2 seconds DataTransferService 2/2/2005 2:59:46 PM 1584 
>>> (0x0630)
>>> DTSJob {E1661CCF-3D0D-41D1-A677-16E436F5B3A6} in state 'Error'. 
>>> DataTransferService 2/2/2005 2:59:46 PM 1424 (0x0590)
>>> DTSJob {E1661CCF-3D0D-41D1-A677-16E436F5B3A6} in state 
>>> 'NotifiedComplete'. DataTransferService 2/2/2005 2:59:46 PM 1424 
>>> (0x0590)
>>> DTS job {E1661CCF-3D0D-41D1-A677-16E436F5B3A6} has completed:
>>> Status : ERROR (0x800706b5)
>>> Start time : 02/02/2005 14:59:44
>>> Completion time : 02/02/2005 14:59:46
>>> Elapsed time : 2 seconds DataTransferService 2/2/2005 2:59:46 PM 1424 
>>> (0x0590)
>>> **************************************************************************
>>>
>>> Im getting this error in ccmexec.log
>>> **************************************************************************
>>> EndpointMessage(Queue='CertificateMaintenanceEndpoint', 
>>> ID={73CC371A-0EBC-4D1D-A974-334DA9D661A9}): Will be discarded 
>>> (0x8009000f). CcmExec 2/2/2005 2:13:39 PM 1512 (0x05E8)
>>> **************************************************************************
>>> And this in execmgr.log
>>> **************************************************************************
>>> Software Distribution Site Settings for the client are missing from WMI. 
>>> execmgr 2/2/2005 1:57:15 PM 1680 (0x0690)
>>> **************************************************************************
>>>
>>> Im at the end of my rope. I have no idea how to get things working 
>>> again. Any help would be most appreciated.
>>>
>>> Thanks,
>>> John
>>>
>>
>>
>
>

Relevant Pages

  • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
    ... The MP is setup and thousands of other clients have access. ... Failed to find the certificate in the store, retry 1. ... > see if there are errors connecting and finding site assignment. ...
    (microsoft.public.sms.admin)
  • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
    ... > Failed to find running shell process ... >> It is possible that the crypto store has somehow been corrupted. ... >>> The MP is setup and thousands of other clients have access. ... >>> Failed to find the certificate in the store, ...
    (microsoft.public.sms.admin)
  • Re: Dummies Guide for RADIUS/Certs
    ... I have set up IAS. ... client computers impacts certificate enrollment. ... configure Group Policy for domain member wireless clients so ... Cert Templates that is now enrolled on the IAS server. ...
    (microsoft.public.internet.radius)
  • Re: Can this be done? Wireless Access w/o the use if CERTs
    ... a default certificate is being sent to user ... Could not retrieve the Remote Access Server's certificate due to the ... to use EAP-TLS but you don't have a server certificate. ... EAP-TLS requires certificates on clients and on the IAS server. ...
    (microsoft.public.internet.radius)
  • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
    ... It is possible that the crypto store has somehow been corrupted. ... These clients> show as assigned to the site in the admin console, ... > Failed to find the certificate in the store, retry 1. ...
    (microsoft.public.sms.admin)