SCCM 2012 - Manual Client Install Fails with error 0x80004005

Team,

We have SCCM 2012 deployed in a one site, one AD setup.

We have our boundaries setup and IIS up and running.

Client push works via the MP console. If I deploy the client to a collection then it eventually installs the client on those devices.

However now we need to have the client installed manually for faster deployment of devices out in the field.

If I manually try and execute the ccmsetup.exe on a workstation I am getting errors. Here is the command I am executing:

\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC

This process correctly creates a C:\Windows\CCMSETUP folder.

ccmsetup.log shows that the client is downloading correctly. But I am getting these noticeable errors:

![LOG[Found remote location 'http://SUNSCCM.brimbank.vic.gov.au/SMS_DP_SMSPKG$/BCC00003']LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="0" thread="2096" file="siteinfo.cpp:356">
<![LOG[Could not find local DP locations from all MPs. Will fallback to MP download.]LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="2" thread="2096" file="ccmsetup.cpp:10822">
<![LOG[GET 'HTTP://SUNSCCM/CCM_Client/ccmsetup.cab']LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="httphelper.cpp:807">
<![LOG[Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 500)]LOG]!><time="16:47:51.272-660" date="10-09-2013" component="ccmsetup" context="" type="3" thread="2096" file="httphelper.cpp:1013">
<![LOG[DownloadFileByWinHTTP failed with error 0x80004005]LOG]!><time="16:47:51.272-660" date="10-09-2013" component="ccmsetup" context="" type="3" thread="2096" file="httphelper.cpp:1081">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='308' will not be sent.]LOG]!><time="16:47:51.273-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="ccmsetup.cpp:9428">
<![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="16:47:51.274-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="ccmsetup.cpp:10544">

The client does not install, even after a reboot.

Any advice would be greatly appreciated.
BrimbankCCAsked:
Who is Participating?
 
RobSampsonConnect With a Mentor Commented:
Another thing I've seen from http://www.experts-exchange.com/Microsoft/Applications/Q_28218393.html


The last thing I have done was going to IIS  manager and shared the folder "Client"
 gave  full control share permissions on the CCCM_CLient virtual directory to everyone, then restarted the website
0
 
RobSampsonCommented:
Hi, something that immediately jumps out at me is that error 80004005 is "access denied".  When you run
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC

are you running that with elevated privileges?  Try running command prompt "as administrator", then run that command from there.

Rob.
0
 
BrimbankCCAuthor Commented:
Thanks Rob, but I am logged in as domain admin on the client (windows 7 sp1).

I kicked off CMD with admin privileges but I got the same error.

Also, if I navigate to HTTP://SUNSCCM/CCM_Client/ccmsetup.cab via a browser I simply get a white blank page rather than any error.

Daniel
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
RobSampsonCommented:
OK, there's a potential solution here:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_27580470.html

to do with the ACL of the client folder.

Another one talks about setting a couple of properties in the deployment share, namely CCMHTTPSSTATE and CCMFIRSTCERT to 63 and 1 respectively:
http://www.bibble-it.com/2012/10/14/sccm-2012-client-deployment-fails-in-https-mode

but the comment at the bottom of that latest one suggests to pass CCMHTTPSSTATE at the command line, so you can try:
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC CCMHTTPSSTATE=63

and maybe try
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC CCMHTTPSSTATE=63 CCMFIRSTCERT=1


Regards,

Rob.
0
 
BrimbankCCAuthor Commented:
Hi Rob,

I added SUNSCCM AD object to the ACL list, giving it Full Control.

I also tried the install with the additional  CCMHTTPSSTATE=63 and CCMFIRSTCERT=1.

The install still fails with the below:


<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{D0E86750-C65C-437C-B521-47B53B835C68}</ID><SourceHost>IT4545</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IT4545:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://SUNSCCM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-10-09T23:35:08Z</SentTime><Body Type="ByteRange" Offset="0" Length="1122"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="10:35:08.583-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:35:08.583-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="httphelper.cpp:807">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:4073">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="ccmcert.cpp:4109">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:4131">
<![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="ccmsetup.cpp:6025">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='315' will not be sent.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmsetup.cpp:9428">
<![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="httphelper.cpp:947">
<![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://SUNSCCM'. Error 0x87d00280]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="2" thread="4280" file="ccmsetup.cpp:10926">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="ccmsetup.cpp:8498">

Thanks
0
 
RobSampsonCommented:
OK, does changing your config from HTTPS to HTTP help in this situation?
0
 
BrimbankCCAuthor Commented:
Unfortunately not.

']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="siteinfo.cpp:96">
<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{E94FC654-FE34-4912-A33F-73978F3DD76C}</ID><SourceHost>IT4545</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IT4545:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://SUNSCCM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-10-09T23:51:15Z</SentTime><Body Type="ByteRange" Offset="0" Length="1122"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="httphelper.cpp:807">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:4073">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="ccmcert.cpp:4109">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:4131">
<![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="ccmsetup.cpp:6025">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='315' will not be sent.]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmsetup.cpp:9428">
<![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="httphelper.cpp:947">
<![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://SUNSCCM'. Error 0x87d00280]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="2" thread="4944" file="ccmsetup.cpp:10926">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="ccmsetup.cpp:8498">

I am able to push the client via the console on the site server (right click device -> install client). I have also allowed new devices to have the client installed manually for the site.

This morning I noticed that the client is getting installed on workstations.

But I just cant get this to work manually. We are about to roll out 350 machines and simply want to add the SCCM client install to the installation script the helpdesk guys run when finishing off a workstation rollout.
0
 
RobSampsonCommented:
OK, the only thing I can find is that maybe there is a DNS issue.  Can you resolve SUNCCM properly?  You could try the FQDN in the command:
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM.domain.com /logon SMSSITECODE=BCC

where SUNSCCM.domain.com is your FQDN.

I did notice too though, that your original log used HTTP, so I guess you already had it configured for HTTP, but when you add CCMHTTPSSTATE=63, it tried to use HTTPS, so leave the CCMHTTPSSTATE=63 off from the command, and try with the FQDN.

Rob.
0
 
BrimbankCCAuthor Commented:
Thanks Rob,

When I gave Everyone access to the said virtual directory it started flowing through and installing.

Your help and advice is greatly appreciated.

Daniel
0
 
RobSampsonCommented:
OK great.  Glad I could help.

Rob.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.