SCCM 2012 - Manual Client Install Fails with error 0x80004005

BrimbankCC
BrimbankCC used Ask the Experts™
on
Team,

We have SCCM 2012 deployed in a one site, one AD setup.

We have our boundaries setup and IIS up and running.

Client push works via the MP console. If I deploy the client to a collection then it eventually installs the client on those devices.

However now we need to have the client installed manually for faster deployment of devices out in the field.

If I manually try and execute the ccmsetup.exe on a workstation I am getting errors. Here is the command I am executing:

\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC

This process correctly creates a C:\Windows\CCMSETUP folder.

ccmsetup.log shows that the client is downloading correctly. But I am getting these noticeable errors:

![LOG[Found remote location 'http://SUNSCCM.brimbank.vic.gov.au/SMS_DP_SMSPKG$/BCC00003']LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="0" thread="2096" file="siteinfo.cpp:356">
<![LOG[Could not find local DP locations from all MPs. Will fallback to MP download.]LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="2" thread="2096" file="ccmsetup.cpp:10822">
<![LOG[GET 'HTTP://SUNSCCM/CCM_Client/ccmsetup.cab']LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="httphelper.cpp:807">
<![LOG[Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 500)]LOG]!><time="16:47:51.272-660" date="10-09-2013" component="ccmsetup" context="" type="3" thread="2096" file="httphelper.cpp:1013">
<![LOG[DownloadFileByWinHTTP failed with error 0x80004005]LOG]!><time="16:47:51.272-660" date="10-09-2013" component="ccmsetup" context="" type="3" thread="2096" file="httphelper.cpp:1081">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='308' will not be sent.]LOG]!><time="16:47:51.273-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="ccmsetup.cpp:9428">
<![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="16:47:51.274-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="ccmsetup.cpp:10544">

The client does not install, even after a reboot.

Any advice would be greatly appreciated.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2012
Top Expert 2014

Commented:
Hi, something that immediately jumps out at me is that error 80004005 is "access denied".  When you run
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC

are you running that with elevated privileges?  Try running command prompt "as administrator", then run that command from there.

Rob.

Author

Commented:
Thanks Rob, but I am logged in as domain admin on the client (windows 7 sp1).

I kicked off CMD with admin privileges but I got the same error.

Also, if I navigate to HTTP://SUNSCCM/CCM_Client/ccmsetup.cab via a browser I simply get a white blank page rather than any error.

Daniel
Most Valuable Expert 2012
Top Expert 2014

Commented:
OK, there's a potential solution here:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_27580470.html

to do with the ACL of the client folder.

Another one talks about setting a couple of properties in the deployment share, namely CCMHTTPSSTATE and CCMFIRSTCERT to 63 and 1 respectively:
http://www.bibble-it.com/2012/10/14/sccm-2012-client-deployment-fails-in-https-mode

but the comment at the bottom of that latest one suggests to pass CCMHTTPSSTATE at the command line, so you can try:
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC CCMHTTPSSTATE=63

and maybe try
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC CCMHTTPSSTATE=63 CCMFIRSTCERT=1


Regards,

Rob.
HTML5 and CSS3 Fundamentals

Build a website from the ground up by first learning the fundamentals of HTML5 and CSS3, the two popular programming languages used to present content online. HTML deals with fonts, colors, graphics, and hyperlinks, while CSS describes how HTML elements are to be displayed.

Author

Commented:
Hi Rob,

I added SUNSCCM AD object to the ACL list, giving it Full Control.

I also tried the install with the additional  CCMHTTPSSTATE=63 and CCMFIRSTCERT=1.

The install still fails with the below:


<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{D0E86750-C65C-437C-B521-47B53B835C68}</ID><SourceHost>IT4545</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IT4545:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://SUNSCCM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-10-09T23:35:08Z</SentTime><Body Type="ByteRange" Offset="0" Length="1122"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="10:35:08.583-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:35:08.583-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="httphelper.cpp:807">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:4073">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="ccmcert.cpp:4109">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:4131">
<![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="ccmsetup.cpp:6025">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='315' will not be sent.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmsetup.cpp:9428">
<![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="httphelper.cpp:947">
<![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://SUNSCCM'. Error 0x87d00280]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="2" thread="4280" file="ccmsetup.cpp:10926">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="ccmsetup.cpp:8498">

Thanks
Most Valuable Expert 2012
Top Expert 2014

Commented:
OK, does changing your config from HTTPS to HTTP help in this situation?
Most Valuable Expert 2012
Top Expert 2014
Commented:
Another thing I've seen from http://www.experts-exchange.com/Microsoft/Applications/Q_28218393.html


The last thing I have done was going to IIS  manager and shared the folder "Client"
 gave  full control share permissions on the CCCM_CLient virtual directory to everyone, then restarted the website

Author

Commented:
Unfortunately not.

']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="siteinfo.cpp:96">
<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{E94FC654-FE34-4912-A33F-73978F3DD76C}</ID><SourceHost>IT4545</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IT4545:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://SUNSCCM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-10-09T23:51:15Z</SentTime><Body Type="ByteRange" Offset="0" Length="1122"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="httphelper.cpp:807">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:4073">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="ccmcert.cpp:4109">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:4131">
<![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="ccmsetup.cpp:6025">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='315' will not be sent.]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmsetup.cpp:9428">
<![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="httphelper.cpp:947">
<![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://SUNSCCM'. Error 0x87d00280]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="2" thread="4944" file="ccmsetup.cpp:10926">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="ccmsetup.cpp:8498">

I am able to push the client via the console on the site server (right click device -> install client). I have also allowed new devices to have the client installed manually for the site.

This morning I noticed that the client is getting installed on workstations.

But I just cant get this to work manually. We are about to roll out 350 machines and simply want to add the SCCM client install to the installation script the helpdesk guys run when finishing off a workstation rollout.
Most Valuable Expert 2012
Top Expert 2014

Commented:
OK, the only thing I can find is that maybe there is a DNS issue.  Can you resolve SUNCCM properly?  You could try the FQDN in the command:
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM.domain.com /logon SMSSITECODE=BCC

where SUNSCCM.domain.com is your FQDN.

I did notice too though, that your original log used HTTP, so I guess you already had it configured for HTTP, but when you add CCMHTTPSSTATE=63, it tried to use HTTPS, so leave the CCMHTTPSSTATE=63 off from the command, and try with the FQDN.

Rob.

Author

Commented:
Thanks Rob,

When I gave Everyone access to the said virtual directory it started flowing through and installing.

Your help and advice is greatly appreciated.

Daniel
Most Valuable Expert 2012
Top Expert 2014

Commented:
OK great.  Glad I could help.

Rob.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial