[sccm 2007] Advertisments not being picked up by clients in SCCM 2007

[flyinghaggis]

We've been been experiencing a problem whereby advertisments (whether they're for OS deployment/software/etc) aren't being picked up by any of the client computers on our network. I've tried checking through the logs but I can't see anything that could be causing it? There don't seem to be any obvious error messages and we haven't made any changes/updates that I can link back to when this started happening.

 

Worryingly this is affecting every computer on our network and it means we're unable to re-image computers or deploy software so I'm just about at the point where I need to log a support call with Microsoft as it needs fixing sooner rather than later!

 

 

Is there anything obvious that I might have missed which we should try/check before we do?

[Rozzer]

Is the distribution point health? Has any certificates expired recently?

[flyinghaggis]

Is the distribution point health? Has any certificates expired recently?

 

The Distribution point looks OK. As you've suggested the fact that communication between the server/clients isn't working does potentially point to it being related to certificates.

 

I'll double-check. Are there any SCCM certificates which could specifically result in the above behavoiur if they expired?

[Rozzer]

To be honest I have only had experience with sccm 2012 certificates. It depends which mode you have sccm 2007 running on. If its native or mix mode. Mine for example is in mix mode.

 

Ross

[Gatt]

Are the machines showing in SCCM with a client value of "YES" ?

 

If you browse to \\SCCM-Server\SMSPKGC$ (where the "C$" is the drive the DP Share is on - eg if they are the E: Drive then this will be SMSPKGE$) do you see the software packages as AAA00005, AAA00006, etc

 

Are any packages appearing on the PCs Cahce (%WINDIR%\System32\CCM\Cache) ?

[Gatt]

Other thoughts..

 

Is BITS working ok? This can cause issues with sending date back and forth if its throttling

Are you using Native or Mixed - If Native then you **REALLY** need to ensure your SSL certs are correct

Are the clients finding a site code? (Open CM from the Control Panel -> Advanced -> "Currently assigned to site code: "AAA") If Blank click discover - it should successfully pick up a code

On the Actions Tab - are there any actions other than "Machine Policy Retrieval & Evaluation Cycle" and "User Policy Retrieval & Evaluation Cycle"? - Of only those two try running the Machine policy refresh

If it errors click on Components and try a client repair

[flyinghaggis]

Are the machines showing in SCCM with a client value of "YES" ?

 

Yes, they're all appearing with "YES" next to them

 

If you browse to \\SCCM-Server\SMSPKGC$ (where the "C$" is the drive the DP Share is on - eg if they are the E: Drive then this will be SMSPKGE$) do you see the software packages as AAA00005, AAA00006, etc

 

Yes, I can see all of the packages listed there number in the scheme described.

 

Are any packages appearing on the PCs Cahce (%WINDIR%\System32\CCM\Cache) ?

 

Yeah, packages that have been deployed previous are showing up in the above cache folder but nothing since we started experiencing the issue.

[Gatt]

Yes, they're all appearing with "YES" next to them

 

 

 

Yes, I can see all of the packages listed there number in the scheme described.

 

 

 

Yeah, packages that have been deployed previous are showing up in the above cache folder but nothing since we started experiencing the issue.

 

Has anything changed recently?

On SCCM Console whats being reported under "System Status -> Advertisement Status -> Advert Name -> Site Name (Right Click -> Show Messages -> All (or error/failures)"

[flyinghaggis]

Has anything changed recently?

On SCCM Console whats being reported under "System Status -> Advertisement Status -> Advert Name -> Site Name (Right Click -> Show Messages -> All (or error/failures)"

 

Nothing's changed that I can think of?

 

There are errors being reported here under the an advertisment that's failing but selecting all doesn't display any of the logs? (it works on other ones though?)

 

We are running in native mode so I'm guessing that is probably is down to a certificate having expired somewere but it's odd there isn't an error visible on a log file indicating communication is failing because of it?

[Rozzer]

Do all your clients auto enrol certificates? Maybe worth looking at certificates on the server and seeing if any have expired.

[TheScarfedOne]

Check your expiry and start time on the TS's. And also whether or not the ReRun behaviour is set correctly