SCCM-2012 R2 - Not deploynig Clients

[newpersn]

Hi all,

 

Got a strange one here, My SCCM is not deploying clients out. Out of 300+ computers its only installed around 30-40. Ive right clicked all and said install client but nothing happens.

 

Where do i start?

 

Thanks

 

Newp

[FN-GM]

Do you have a service account setup that has the correct local admin rights on the PC?

[newpersn]

Do you have a service account setup that has the correct local admin rights on the PC?

 

How would i check that? (sorry been awhile since i messed with SCCM)

[Pashers]

Also ensure you have the latest version of windows installer 3.3 or later I think - this was one issue I had when I started with SCCM.

[Edenost]

What OS's are your clients? If you go to "C:\Windows\" look for a folder called "ccmsetup". If that's there, SCCM is able to contact the client machine. Within that folder there should be a "Logs" folder (so: "C:\Windows\ccmsetup\Logs"). Look for a log called "ccmsetup.log". If you can get hold of that, please post the file on here (attach it rather than copy and paste the data).

If that's not there, go on to the SCCM server it self, go to the install location (in my case I have it on the D: drive away from the system drive), and go to:

 

D:\Program Files\Microsoft Configuration Manager\Logs

Post the log file called: "Ccm.log"

 

Phil

[newpersn]

What OS's are your clients? If you go to "C:\Windows\" look for a folder called "ccmsetup". If that's there, SCCM is able to contact the client machine. Within that folder there should be a "Logs" folder (so: "C:\Windows\ccmsetup\Logs"). Look for a log called "ccmsetup.log". If you can get hold of that, please post the file on here (attach it rather than copy and paste the data).

If that's not there, go on to the SCCM server it self, go to the install location (in my case I have it on the D: drive away from the system drive), and go to:

 

D:\Program Files\Microsoft Configuration Manager\Logs

Post the log file called: "Ccm.log"

 

Phil

 

Log file attached.

 

Just tired it with a fresh computer and still no luck. (dosnt even try and copy files over)

 

ccm.zip

 

Thanks

 

Newp

[Edenost]

Hi,

 

So the problem might be either networking or the service account which you have assigned to SCCM.

As you have managed to install the client on SOME computers, my guess would be that the service account is fine (assuming they are all part of the same domain...etc).

 

I had this problem recently in fact with a server which had a different set up for networking (Hyper-V servers). I had set some route adds on the SCCM Server it self a while ago to be able to get across the VLANs. The network VLANs had changed but I hadn't removed the route adds.

Removed all of the route adds, as we now have a firewall in place which also does the routing (PFSense), and it worked fine.

So, I would check:

 

1. Log on to the server

2. Try to manually reach the C$ of a machine in question (You might be able to, but not 100%. I could C$ one of my servers, but not the other lol).

3. Try to ping if you cannot C$

4. check the networking on both the server and client ends. Check switch configurations and ports and make sure they can all see each other from client to server and server to client

 

Hope this helps

[newpersn]

ok. There no admin account on the computers. Theres the administrator and guest (disabled)

 

I can connect fine from the server to computer. Both computers are on the network and on the same vlan.

[Edenost]

Okay. Can you check the Route tables on the server?

Open cmd and type "Route print". Check the routes and make sure they are all correct. You can do "Route delete *" and that will remove them all, but if you have some set up already, I wouldn't recommend it unless you can get them back to how you want them easily.

Otherwise, check the Network Access Account which you have assigned to SCCM.

 

1. Open the SCCM Console and go to "Administration" from the bottom left menu

2. Expand Site Configuration and select "Sites"

3. Right click on your site, move down to the "Configure Site Components" menu and select "Software Distribution".

4. Click on the "Network Access Account"

 

Check the account in there is a domain admin for the computers in question. If it isn't, add one that is and try again.

 

[newpersn]

Check that. Ive added my self in the network access account. but still the same error.

 

Where next?

[Edenost]

Is it possible that I could remotely connect and have a look? Use Teamviewer or something? PM me if you like (If we find a solution, we will post it here for others). Would be useful to be able to see the setup of SCCM you have.

[Edenost]

Also, what OS is the client?

[Edenost]

Now that you have added the network access account, can you post the ccm.log again? It should have a different error this time.

Your account is 100% domain admin? No restrictions?

[clareq]

I assume you've checked your boundary is correct?

[Gatt]

Have you configured a Client Installation Account?

 

\Administration\Overview\Site Configuration\Sites > > Client Installation Settings > Client Push Installation > Accounts Tab

 

 

Also, make sure it has Local Administrator rights

[Edenost]

Have you configured a Client Installation Account?

 

\Administration\Overview\Site Configuration\Sites > > Client Installation Settings > Client Push Installation > Accounts Tab

 

[ATTACH=CONFIG]24608[/ATTACH]

 

Also, make sure it has Local Administrator rights

 

Ahh yes, this might be the problem!

[newpersn]

Also, what OS is the client?

 

Windows 7 Pro 32bit. (most of the site is 32bit. only the odd few are 64bit

 

Now that you have added the network access account, can you post the ccm.log again? It should have a different error this time.

Your account is 100% domain admin? No restrictions?

 

I am domain admin and full access

 

I assume you've checked your boundary is correct?

 

Yep boundarys are correct. Ive add the vlans

 

Have you configured a Client Installation Account?

 

\Administration\Overview\Site Configuration\Sites > > Client Installation Settings > Client Push Installation > Accounts Tab

 

[ATTACH=CONFIG]24608[/ATTACH]

 

Also, make sure it has Local Administrator rights

 

That worked!! No accounts was set. Ive added a few domains admins and its installed the client and AV on the said computer

[heckle]

I would not use any domain admin accounts. We have specific accounts setup for SCCM management.

 

Just as an example, we have a 18 school district. Each school has its own SCCM Primary Site server. Each school (site) is identified with a three digit code (9xx). Our Central Office is "900". Our schools start at "910" and go up numerically.

We have two accounts that we use with SCCM. These accounts are "tied" to each site.

 

Site: 920

User accounts: (both accounts have local admin rights to the client computers).

SCCM920 - Used for adding computer accounts to AD.

SMS920 - Used as the network access account.

 

Now, we still have some clients that for one reason or another will not accept a client push from the server. So, I made two batch files. One uninstalls the client ("ccmsetup.exe /uninstall"). The other one installs the client (with all the command line settings). After checking that the local firewall is off, I run the uninstall, then the install.

 

We started using SMS 2003, then SCCM 2007 and now SCCM 2012. It would probably be easier to have a single primary server and separate secondary servers (each school being a secondary). But, we are a team of 9 techs and only three of us have been really using SMS/SCCM the whole time. Once all of the team is "on board", we may switch over to a more efficient setup (during a version upgrade).