Re: Need help badly!!! Please....

From: John Guderian (lanadmin_at_avrinc.com)
Date: 02/03/05


Date: Thu, 3 Feb 2005 13:57:51 -0700

Shoot, I meant to type "server has not been renamed", as I did realize that
would add to the problem before I started down the re-install path. Sorry.

Essentially I did a re-installation with all settings exactly as they were
originally (site, code, site name, server name).

The systems that are not working at all are Windows 2000. Out of the 30
systems that are XP 6 have been established as clients and assigned the site
code. Having said this, there are still XP machines that are experiencing
issues. So its not as cut & dry as all 2k systems dont work, and all xp
systems do. All the log info I have provide up to this point is from a
Windows 2000 machine.

I checked all the same logs on an XP machine that I referenced below, and
noticed that I am not receiving all the same errors. However the client does
not appear as a "client" in the SMS console.

For example below is an excerpt from datatransferservice.log. Everything
works where the 2000 machine failed. Its the same story for the other logs.

Why would my XP machines not have the same errors, but still not show up as
clients? Ive even re-installed the client on these as well.
**************************************************************************
DTSJob {376E34EA-7C86-4C0F-A179-16A24E94F9CB} in state 'RetrievedData'.
DataTransferService 2/2/2005 2:32:44 PM 1968 (0x07B0)
DTSJob {376E34EA-7C86-4C0F-A179-16A24E94F9CB} successfully completed
download. DataTransferService 2/2/2005 2:32:44 PM 1968 (0x07B0)
DTSJob {376E34EA-7C86-4C0F-A179-16A24E94F9CB} in state 'NotifiedComplete'.
DataTransferService 2/2/2005 2:32:44 PM 3024 (0x0BD0)
DTS job {376E34EA-7C86-4C0F-A179-16A24E94F9CB} has completed:
 Status : SUCCESS
 Start time : 02/02/2005 14:32:18
 Completion time : 02/02/2005 14:32:44
 Elapsed time : 26 seconds DataTransferService 2/2/2005 2:32:44 PM 3024
(0x0BD0)
DTSJob {F3107829-9B00-457D-9A94-D0764D0E84E3} in state 'RetrievedData'.
DataTransferService 2/2/2005 2:32:46 PM 1652 (0x0674)
DTSJob {F3107829-9B00-457D-9A94-D0764D0E84E3} successfully completed
download. DataTransferService 2/2/2005 2:32:46 PM 1652 (0x0674)
DTSJob {F3107829-9B00-457D-9A94-D0764D0E84E3} in state 'NotifiedComplete'.
DataTransferService 2/2/2005 2:32:46 PM 2000 (0x07D0)
DTS job {F3107829-9B00-457D-9A94-D0764D0E84E3} has completed:
 Status : SUCCESS
 Start time : 02/02/2005 14:32:18
 Completion time : 02/02/2005 14:32:46
 Elapsed time : 27 seconds DataTransferService 2/2/2005 2:32:46 PM 2000
(0x07D0)
**************************************************************************

"Stan White [MS]" <stanwh@microsoft.com> wrote in message
news:ekhbK9iCFHA.2512@TK2MSFTNGP15.phx.gbl...
> Actually you did not mention renaming the site server in this thread -
> that can add to the problems.
> ccmdelcert is what you need for the certificate error below.
>
> What OS are the machines you are having trouble with if the working ones
> are XP?
>
> --
> --
> Stan [MSFT]
> --
> --
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> --
> --
>
> "John Guderian" <lanadmin@avrinc.com> wrote in message
> news:OIEE17hCFHA.2960@TK2MSFTNGP14.phx.gbl...
>>I actually did run both tools. PolicySpy shows that the clients with
>>issues are all assigned to the correct site & MP. MPTroubleshooter passes
>>all test. I also should point out that within the SMS console, most client
>>show "yes" for "assigned", but show "no" in "client", and dont have a site
>>code. The only systems that show "yes" in "client", have been windows xp
>>systems.
>>
>> I have also run ccmclean on one of the clients, and even removed bits.
>> After the successful re-install of the client, I am receving the same
>> errors.
>>
>> There are no errors in the IIS log, just a lot of these:
>> **************************************************************************
>> 2005-02-03 18:25:16 172.16.10.23 CCM_POST /ccm_system/request - 80 -
>> 172.16.10.98 ccmhttp 200 0 0
>> **************************************************************************
>> Within the certificatemaintenance.log I have found these errors, that may
>> provide some info.
>> Failed to find the certificate in the store, retry 1.
>> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
>> Failed to find the certificate in the store, retry 2.
>> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
>> Failed to find the certificate in the store, retry 3.
>> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
>> Failed to find the certificate in the store, retry 4.
>> CertificateMaintenance 2/3/2005 11:13:37 AM 1124 (0x0464)
>> Failed to find the certificate in the store, retry 5.
>> CertificateMaintenance 2/3/2005 11:13:38 AM 1124 (0x0464)
>> Creating Signing Certificate... CertificateMaintenance 2/3/2005 11:13:38
>> AM 1124 (0x0464)
>> Crypt acquire context failed with 0x8009000f. CertificateMaintenance
>> 2/3/2005 11:13:38 AM 1124 (0x0464)
>> Failed to create certificate 8009000f CertificateMaintenance 2/3/2005
>> 11:13:38 AM 1124 (0x0464)
>> CCMDoCertificateMaintenance failed (0x8009000f). CertificateMaintenance
>> 2/3/2005 11:13:38 AM 1124 (0x0464)
>> **************************************************************************
>>
>> Any ideas? I believe this is absolutely a client issue, as my MP is
>> running, and I am not receiving any errors on the site. However I dont
>> know why my clients would be experiencing this. Like I said before the
>> server name has renamed as I never re-installed the OS just the site. And
>> the site code, and site are all named the same.
>>
>> Thanks
>>
>> "Stan White [MS]" <stanwh@microsoft.com> wrote in message
>> news:OZJk0ThCFHA.3324@TK2MSFTNGP15.phx.gbl...
>>> You should take a look at some troubleshooting tools from the SMS web
>>> site to help narrow down the problem first.
>>>
>>> MP troubelshooter
>>> Policyspy
>>>
>>> The software inventory problem is a different one than the certificate
>>> and DTS issue, the execmgr log entry is just because you have no policy
>>> from the MP.
>>> Try ccmdelcert and ccmclean on a client machine and re-push to see if
>>> that fixes the client side problems.
>>>
>>> Are there errors on your MP as well or in the IIS logs on the MP?
>>>
>>>
>>> --
>>> --
>>> Stan [MSFT]
>>> --
>>> --
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>> --
>>> --
>>>
>>> "John Guderian" <lanadmin@avrinc.com> wrote in message
>>> news:%23wcqpQXCFHA.328@tk2msftngp13.phx.gbl...
>>>> Ok heres the scenario. Ive been trying to post individual problems, but
>>>> Im getting nowhere.
>>>>
>>>> Set-up
>>>>
>>>> Windows 2003 server standard
>>>> Sql 2000 sp3 (same box)
>>>> SMS 2003 SP1 (site server with all roles, same box)
>>>>
>>>> I had to re-install the site. The process I took was directly out of
>>>> the following site.
>>>>
>>>> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/deploy/spgsms03/spsms14.mspx
>>>>
>>>> I even removed the WMI namespace.
>>>>
>>>> The installation went very smooth, and I was receiving 0 errors after
>>>> the installation of all the roles. All settings are the same(site code,
>>>> etc.), this is simply a re-install. After I initialized a discovery
>>>> method, I began receiving errors for the
>>>> SMS_SOFTWARE_METERING_PROCESSOR saying:
>>>> **************************************************************************
>>>> MS Software Inventory Processor failed to process software inventory
>>>> file "D:\SMS\inboxes\auth\sinv.box\yumttqqu.SID" because the file does
>>>> not have a corresponding discovery record. SMS Software Inventory
>>>> Processor has moved this file to the Orphans directory as file
>>>> "D:\SMS\inboxes\auth\sinv.box\Orphans\ccv51zg5.SID" and will retry
>>>> processing it later.
>>>> **************************************************************************
>>>>
>>>> The problem is that after there were discovery records...Out of 70
>>>> clients only two successfully became official "clients" within the
>>>> console.
>>>>
>>>> I enabled client push, but this did nothing. The install was successful
>>>> on the clients that I checked, however they still are not "clients".
>>>>
>>>> I checked the locationservices.log and they are finding the MP from AD.
>>>> I can see in Policyevaluator.log that clients are downloading policies.
>>>> However in datatransferservice.log I get the following errors:
>>>> **************************************************************************
>>>> DTSJob {F390E42E-A220-441F-BAD3-977B844BF344} in state 'Error'.
>>>> DataTransferService 2/2/2005 2:59:46 PM 1584 (0x0630)
>>>> DTSJob {F390E42E-A220-441F-BAD3-977B844BF344} in state
>>>> 'NotifiedComplete'. DataTransferService 2/2/2005 2:59:46 PM 1584
>>>> (0x0630)
>>>> DTS job {F390E42E-A220-441F-BAD3-977B844BF344} has completed:
>>>> Status : ERROR (0x800706b5)
>>>> Start time : 02/02/2005 14:59:44
>>>> Completion time : 02/02/2005 14:59:46
>>>> Elapsed time : 2 seconds DataTransferService 2/2/2005 2:59:46 PM 1584
>>>> (0x0630)
>>>> DTSJob {E1661CCF-3D0D-41D1-A677-16E436F5B3A6} in state 'Error'.
>>>> DataTransferService 2/2/2005 2:59:46 PM 1424 (0x0590)
>>>> DTSJob {E1661CCF-3D0D-41D1-A677-16E436F5B3A6} in state
>>>> 'NotifiedComplete'. DataTransferService 2/2/2005 2:59:46 PM 1424
>>>> (0x0590)
>>>> DTS job {E1661CCF-3D0D-41D1-A677-16E436F5B3A6} has completed:
>>>> Status : ERROR (0x800706b5)
>>>> Start time : 02/02/2005 14:59:44
>>>> Completion time : 02/02/2005 14:59:46
>>>> Elapsed time : 2 seconds DataTransferService 2/2/2005 2:59:46 PM 1424
>>>> (0x0590)
>>>> **************************************************************************
>>>>
>>>> Im getting this error in ccmexec.log
>>>> **************************************************************************
>>>> EndpointMessage(Queue='CertificateMaintenanceEndpoint',
>>>> ID={73CC371A-0EBC-4D1D-A974-334DA9D661A9}): Will be discarded
>>>> (0x8009000f). CcmExec 2/2/2005 2:13:39 PM 1512 (0x05E8)
>>>> **************************************************************************
>>>> And this in execmgr.log
>>>> **************************************************************************
>>>> Software Distribution Site Settings for the client are missing from
>>>> WMI. execmgr 2/2/2005 1:57:15 PM 1680 (0x0690)
>>>> **************************************************************************
>>>>
>>>> Im at the end of my rope. I have no idea how to get things working
>>>> again. Any help would be most appreciated.
>>>>
>>>> Thanks,
>>>> John
>>>>
>>>
>>>
>>
>>
>
>



Relevant Pages

  • Re: SMS 2003: advanced client wont start, CryptGenKey failed error
    ... Just search for "Failed to create certificate". ... Our clients are Windows XP SP2 machines. ... I'm still having problems with some machines where the Advanced Client ... Certificates MMC plug-in but I don't see any SMS certificates in it. ...
    (microsoft.public.sms.admin)
  • Re: SMS 2003 SP1 Client Install Problem or Policy Retreival Problem?
    ... > Failed to find running shell process ... >> It is possible that the crypto store has somehow been corrupted. ... >>> The MP is setup and thousands of other clients have access. ... >>> Failed to find the certificate in the store, ...
    (microsoft.public.sms.admin)
  • Re: Dummies Guide for RADIUS/Certs
    ... I have set up IAS. ... client computers impacts certificate enrollment. ... configure Group Policy for domain member wireless clients so ... Cert Templates that is now enrolled on the IAS server. ...
    (microsoft.public.internet.radius)
  • Re: Need help badly!!! Please....
    ... ccmdelcert is what you need for the certificate error below. ... > I have also run ccmclean on one of the clients, ... > Failed to find the certificate in the store, retry 1. ... >> The software inventory problem is a different one than the certificate ...
    (microsoft.public.sms.admin)
  • Re: Can this be done? Wireless Access w/o the use if CERTs
    ... a default certificate is being sent to user ... Could not retrieve the Remote Access Server's certificate due to the ... to use EAP-TLS but you don't have a server certificate. ... EAP-TLS requires certificates on clients and on the IAS server. ...
    (microsoft.public.internet.radius)

Loading