SCCM 2012 - Manual Client Install Fails with error 0x80004005

Team,

We have SCCM 2012 deployed in a one site, one AD setup.

We have our boundaries setup and IIS up and running.

Client push works via the MP console. If I deploy the client to a collection then it eventually installs the client on those devices.

However now we need to have the client installed manually for faster deployment of devices out in the field.

If I manually try and execute the ccmsetup.exe on a workstation I am getting errors. Here is the command I am executing:

\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC

This process correctly creates a C:\Windows\CCMSETUP folder.

ccmsetup.log shows that the client is downloading correctly. But I am getting these noticeable errors:

![LOG[Found remote location 'http://SUNSCCM.brimbank.vic.gov.au/SMS_DP_SMSPKG$/BCC00003']LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="0" thread="2096" file="siteinfo.cpp:356">
<![LOG[Could not find local DP locations from all MPs. Will fallback to MP download.]LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="2" thread="2096" file="ccmsetup.cpp:10822">
<![LOG[GET 'HTTP://SUNSCCM/CCM_Client/ccmsetup.cab']LOG]!><time="16:47:51.111-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="httphelper.cpp:807">
<![LOG[Failed to successfully complete WinHttp request. (StatusCode at WinHttpQueryHeaders: 500)]LOG]!><time="16:47:51.272-660" date="10-09-2013" component="ccmsetup" context="" type="3" thread="2096" file="httphelper.cpp:1013">
<![LOG[DownloadFileByWinHTTP failed with error 0x80004005]LOG]!><time="16:47:51.272-660" date="10-09-2013" component="ccmsetup" context="" type="3" thread="2096" file="httphelper.cpp:1081">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='308' will not be sent.]LOG]!><time="16:47:51.273-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="ccmsetup.cpp:9428">
<![LOG[CcmSetup failed with error code 0x80004005]LOG]!><time="16:47:51.274-660" date="10-09-2013" component="ccmsetup" context="" type="1" thread="2096" file="ccmsetup.cpp:10544">

The client does not install, even after a reboot.

Any advice would be greatly appreciated.
BrimbankCCAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

RobSampsonCommented:
Hi, something that immediately jumps out at me is that error 80004005 is "access denied".  When you run
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC

are you running that with elevated privileges?  Try running command prompt "as administrator", then run that command from there.

Rob.
0
BrimbankCCAuthor Commented:
Thanks Rob, but I am logged in as domain admin on the client (windows 7 sp1).

I kicked off CMD with admin privileges but I got the same error.

Also, if I navigate to HTTP://SUNSCCM/CCM_Client/ccmsetup.cab via a browser I simply get a white blank page rather than any error.

Daniel
0
RobSampsonCommented:
OK, there's a potential solution here:
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/Q_27580470.html

to do with the ACL of the client folder.

Another one talks about setting a couple of properties in the deployment share, namely CCMHTTPSSTATE and CCMFIRSTCERT to 63 and 1 respectively:
http://www.bibble-it.com/2012/10/14/sccm-2012-client-deployment-fails-in-https-mode

but the comment at the bottom of that latest one suggests to pass CCMHTTPSSTATE at the command line, so you can try:
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC CCMHTTPSSTATE=63

and maybe try
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM /logon SMSSITECODE=BCC CCMHTTPSSTATE=63 CCMFIRSTCERT=1


Regards,

Rob.
0
The Five Tenets of the Most Secure Backup

Data loss can hit a business in any number of ways. In reality, companies should expect to lose data at some point. The challenge is having a plan to recover from such an event.

BrimbankCCAuthor Commented:
Hi Rob,

I added SUNSCCM AD object to the ACL list, giving it Full Control.

I also tried the install with the additional  CCMHTTPSSTATE=63 and CCMFIRSTCERT=1.

The install still fails with the below:


<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{D0E86750-C65C-437C-B521-47B53B835C68}</ID><SourceHost>IT4545</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IT4545:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://SUNSCCM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-10-09T23:35:08Z</SentTime><Body Type="ByteRange" Offset="0" Length="1122"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="10:35:08.583-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:35:08.583-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="httphelper.cpp:807">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:4073">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="ccmcert.cpp:4109">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmcert.cpp:4131">
<![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="ccmsetup.cpp:6025">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='315' will not be sent.]LOG]!><time="10:35:08.585-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4280" file="ccmsetup.cpp:9428">
<![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="httphelper.cpp:947">
<![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4280" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://SUNSCCM'. Error 0x87d00280]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="2" thread="4280" file="ccmsetup.cpp:10926">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="10:35:08.586-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4280" file="ccmsetup.cpp:8498">

Thanks
0
RobSampsonCommented:
OK, does changing your config from HTTPS to HTTP help in this situation?
0
RobSampsonCommented:
Another thing I've seen from http://www.experts-exchange.com/Microsoft/Applications/Q_28218393.html


The last thing I have done was going to IIS  manager and shared the folder "Client"
 gave  full control share permissions on the CCCM_CLient virtual directory to everyone, then restarted the website
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BrimbankCCAuthor Commented:
Unfortunately not.

']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="siteinfo.cpp:96">
<![LOG[Sending message header '<Msg SchemaVersion="1.1"><ID>{E94FC654-FE34-4912-A33F-73978F3DD76C}</ID><SourceHost>IT4545</SourceHost><TargetAddress>mp:[http]MP_LocationManager</TargetAddress><ReplyTo>direct:IT4545:LS_ReplyLocations</ReplyTo><Priority>3</Priority><Timeout>600</Timeout><ReqVersion>5931</ReqVersion><TargetHost>https://SUNSCCM</TargetHost><TargetEndpoint>MP_LocationManager</TargetEndpoint><ReplyMode>Sync</ReplyMode><Protocol>http</Protocol><SentTime>2013-10-09T23:51:15Z</SentTime><Body Type="ByteRange" Offset="0" Length="1122"/><Hooks><Hook3 Name="zlib-compress"/></Hooks><Payload Type="inline"/></Msg>']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="siteinfo.cpp:177">
<![LOG[CCM_POST 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:51:15.507-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="httphelper.cpp:807">
<![LOG[Begin searching client certificates based on Certificate Issuers]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:3833">
<![LOG[Completed searching client certificates based on Certificate Issuers]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:3992">
<![LOG[Begin to select client certificate]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:4073">
<![LOG[The 'Certificate Selection Criteria' was not specified, counting number of certificates present in 'MY' store of 'Local Computer'.]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="ccmcert.cpp:4109">
<![LOG[There are no certificates in the 'MY' store.]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmcert.cpp:4131">
<![LOG[GetSSLCertificateContext failed with error 0x87d00280]LOG]!><time="10:51:15.509-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="ccmsetup.cpp:6025">
<![LOG[A Fallback Status Point has not been specified.  Message with STATEID='315' will not be sent.]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="1" thread="4944" file="ccmsetup.cpp:9428">
<![LOG[GetHttpRequestObjects failed for verb: 'CCM_POST', url: 'https://SUNSCCM/ccm_system/request']LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="httphelper.cpp:947">
<![LOG[GetDPLocations failed with error 0x87d00280]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="3" thread="4944" file="siteinfo.cpp:532">
<![LOG[Failed to get DP locations as the expected version from MP 'https://SUNSCCM'. Error 0x87d00280]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="2" thread="4944" file="ccmsetup.cpp:10926">
<![LOG[Next retry in 10 minute(s)...]LOG]!><time="10:51:15.510-660" date="10-10-2013" component="ccmsetup" context="" type="0" thread="4944" file="ccmsetup.cpp:8498">

I am able to push the client via the console on the site server (right click device -> install client). I have also allowed new devices to have the client installed manually for the site.

This morning I noticed that the client is getting installed on workstations.

But I just cant get this to work manually. We are about to roll out 350 machines and simply want to add the SCCM client install to the installation script the helpdesk guys run when finishing off a workstation rollout.
0
RobSampsonCommented:
OK, the only thing I can find is that maybe there is a DNS issue.  Can you resolve SUNCCM properly?  You could try the FQDN in the command:
\\SUNSCCM\SMS_BCC\Client\ccmsetup.exe /mp:SUNSCCM.domain.com /logon SMSSITECODE=BCC

where SUNSCCM.domain.com is your FQDN.

I did notice too though, that your original log used HTTP, so I guess you already had it configured for HTTP, but when you add CCMHTTPSSTATE=63, it tried to use HTTPS, so leave the CCMHTTPSSTATE=63 off from the command, and try with the FQDN.

Rob.
0
BrimbankCCAuthor Commented:
Thanks Rob,

When I gave Everyone access to the said virtual directory it started flowing through and installing.

Your help and advice is greatly appreciated.

Daniel
0
RobSampsonCommented:
OK great.  Glad I could help.

Rob.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.