SCCM patches to workgroup servers always failed, why?

This is a newly-setup MS SCCM 2012 r2 server. There is only one SCCM site server with all the site system roles on it. Recently, I managed to push down/manually installed client agent to about 200 sets of systems. 170 sets are domain systems, and 30 sets are standalone (or workgroup) servers. I setup software update point and sync with WSUS, all the updates are ready.

Now, after setting up the SOftware updates group, and deploy; However, attempt to push down patches to those standalone/workgroup servers always ended up error: access is denied. Do I miss up any permissions? Please help.


Appreciate for your help.
LVL 1
MichaelBalackAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MichaelBalackAuthor Commented:
In Monitoring workspace, see the status:

 Status: Failed to download patche(s)
 Error code: 0x80070005
 Error description: access is denied
dew_associatesCommented:
Are you pushing those updates down as an administrator? Do you have administrative privileges on those servers you are pushing the updates to?
MichaelBalackAuthor Commented:
Hi Dew_associates,

Yes, I have all the workgroup servers' local admininistrative rights.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

MichaelBalackAuthor Commented:
Hi Dew_associates,

I recalled that I have to connect to the workgroup server\admin$, and type in the user account and password before manually setup the client agent.
dew_associatesCommented:
You have missed a setting somewhere
MichaelBalackAuthor Commented:
Please enlighten...
dew_associatesCommented:
I can't enlighten you without knowing how you set up the domain.

Given that you haven't provided a lot of information, I'll presume that you are getting this error while either downloading or updating apps in Windows store, which indicates that you do not have proper permission to either (A) the folder in which all apps are stored or (B) the folder you are trying to push the updates to. As a test case, chose one machine/

Navigate to C: > users > Your User name here > App Data (Its a hidden folder, First show Hidden Folders) > Local > Packages.

 OR

 Open Run and Paste this "C:\Users\Your Username Here\AppData\Local" and hit Enter.

Make sure you Replace "Your Username Here" with your actual username in the above command.

Now right click on Packages and select Properties. Now Click on Advance and Give Full permission to all the users Specially the one you are signed in with in Windows. Once that is done, Click on Apply and then OK.
MichaelBalackAuthor Commented:
Hi Dew_associates,

Let me do it and get back to you
MichaelBalackAuthor Commented:
Hi Dew_associates,

I did the following changes:

a. change the permissions of \\SCCM_Server\UpdateServicesPackages so as Everyone got full access
b. On administration workspace, site > Software distribution > Network access account; change to domain\administration from "computer account" for full control

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dew_associatesCommented:
And the results?
MichaelBalackAuthor Commented:
Software update rollout working fine.
dew_associatesCommented:
Why do you want to accept your own comment?
dew_associatesCommented:
Response ID: 40953030  should be the answer
MichaelBalackAuthor Commented:
By making the mentioned changes, software updates rollout without problem.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SCCM

From novice to tech pro — start learning today.