AlexBradley

Bumped

Hi Everyone, Hopefully someone can help me in the right direction as I've spent the last couple weeks smashing my head against a brick wall with SCCM. I didn't want to post anything as I was hoping I could fix the issues tracing the error codes but I think I need someone else's opinion before I melt down! Been working on it for two years in my spare work time since I did a 5 day crash course on it. Finally get around to ditching our old sophos AV in order to use SCCM Endpoint, thinking, it's on most machines. I'll just trouble shoot the 1/3 that aren't currently working. Well that was three weeks ago and I'm no closer to fixing the issues I'm getting. First off I can't seem to push any clients out any more as I just keep getting several lines of errors from each attempt. Below is an example. I've set several accounts up for pushing clients but have recently tried using local admin accounts to see if that can get around the issues. ---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) 07/04/2017 10:40:33 7904 (0x1EE0)---> Attempting to connect to administrative share '\\infant-n16.anglesey-pri.local\admin$' using account '.\admin' 07/04/2017 10:40:33 7904 (0x1EE0)Submitted request successfully 07/04/2017 10:40:33 4236 (0x108C)Getting a new request from queue "Incoming" after 100 millisecond delay. 07/04/2017 10:40:33 4236 (0x108C)Waiting for change in directory "C:\Program Files\Microsoft Configuration Manager\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout). 07/04/2017 10:40:33 4236 (0x108C)---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account .\admin (00000035) 07/04/2017 10:40:33 7904 (0x1EE0)---> The device infant-n16.anglesey-pri.local does not exist on the network. Giving up 07/04/2017 10:40:33 7904 (0x1EE0)---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) 07/04/2017 10:40:33 7904 (0x1EE0)---> Attempting to connect to administrative share '\\JUNIOR-L6\admin$' using account '.\admin' 07/04/2017 10:40:33 7904 (0x1EE0)---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account .\admin (0000052e) 07/04/2017 10:40:33 7904 (0x1EE0)---> The 'best-shot' account has now succeeded 0 times and failed 1 times. 07/04/2017 10:40:33 7904 (0x1EE0)---> Trying each entry in the SMS Client Remote Installation account list 07/04/2017 10:40:33 7904 (0x1EE0)---> Attempting to connect to administrative share '\\JUNIOR-L6\admin$' using account '.\admin' 07/04/2017 10:40:33 7904 (0x1EE0)---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account .\admin (0000052e) 07/04/2017 10:40:33 7904 (0x1EE0)---> Attempting to connect to administrative share '\\JUNIOR-L6\admin$' using account 'ANGLESEY-PRI\Administrator' 07/04/2017 10:40:33 7904 (0x1EE0)---> Connected to administrative share on machine JUNIOR-L6 using account 'ANGLESEY-PRI\Administrator' 07/04/2017 10:40:33 7904 (0x1EE0)---> Attempting to make IPC connection to share <\\JUNIOR-L6\IPC$> 07/04/2017 10:40:34 7904 (0x1EE0)---> Searching for SMSClientInstall.* under '\\JUNIOR-L6\admin$\' 07/04/2017 10:40:34 7904 (0x1EE0)---> System OS version string "6.1.7601" converted to 6.10 07/04/2017 10:40:34 7904 (0x1EE0)---> Unable to connect to WMI (root\ccm) on remote machine "JUNIOR-L6", error = 0x8004100e. 07/04/2017 10:40:34 7904 (0x1EE0)---> Creating \ VerifyingCopying existence of destination directory \\JUNIOR-L6\admin$\ccmsetup. 07/04/2017 10:40:34 7904 (0x1EE0)---> Copying client files to \\JUNIOR-L6\admin$\ccmsetup. 07/04/2017 10:40:34 7904 (0x1EE0)---> Copying file "C:\Program Files\Microsoft Configuration Manager\bin\I386\MobileClient.tcf" to "MobileClient.tcf" 07/04/2017 10:40:34 7904 (0x1EE0)---> Copying file "C:\Program Files\Microsoft Configuration Manager\bin\I386\ccmsetup.exe" to "ccmsetup.exe" 07/04/2017 10:40:35 7904 (0x1EE0)---> Updated service "ccmsetup" on machine "JUNIOR-L6". 07/04/2017 10:40:51 7904 (0x1EE0)---> Started service "ccmsetup" on machine "JUNIOR-L6". 07/04/2017 10:40:51 7904 (0x1EE0)---> Deleting SMS Client Install Lock File '\\JUNIOR-L6\admin$\SMSClientInstall.ANG' 07/04/2017 10:40:51 7904 (0x1EE0)Execute query exec [sp_CP_SetLastErrorCode] 16777285, 0 07/04/2017 10:40:51 7904 (0x1EE0)---> Completed request "16777285", machine name "JUNIOR-L6". 07/04/2017 10:40:51 7904 (0x1EE0)Deleted request "16777285", machine name "JUNIOR-L6" 07/04/2017 10:40:51 7904 (0x1EE0)Execute query exec [sp_CP_SetPushRequestMachineStatus] 16777285, 4 07/04/2017 10:40:51 7904 (0x1EE0)Execute query exec [sp_CP_SetLatest] 16777285, N'04/07/2017 09:40:51', 67 07/04/2017 10:40:51 7904 (0x1EE0)<======End request: "16777285", machine name: "JUNIOR-L6". 07/04/2017 10:40:51 7904 (0x1EE0) If that wasn't bad enough, since investigating the above issues I can across some errors on the SCCM server to do with pushing out SCCM server roles. On 07/04/2017 10:29:35, component SMS_MP_CONTROL_MANAGER on computer ANGLESEY-SCCM.ANGLESEY-PRI.LOCAL reported: MP Control Manager detected management point is not responding to HTTP requests. The HTTP status code and text is 500, Internal Server Error.Possible cause: Management point encountered an error when connecting to SQL Server. Solution: Verify that the SQL Server is properly configured to allow Management Point access. Verify that management point computer account or the Management Point Database Connection Account is a member of Management Point Role (msdbrole_MP) in the SQL Server database.Possible cause: The SQL Server Service Principal Names (SPNs) are not registered correctly in Active DirectorySolution: Ensure SQL Server SPNs are correctly registered. Review Q829868.Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which the site is configured to communicate. Solution: Verify that the designated Web Site is configured to use the same ports which the site is configured to use.Possible cause: The designated Web Site is disabled in IIS. Solution: Verify that the designated Web Site is enabled, and functioning properly.Possible cause: The MP ISAPI Application Identity does not have the requisite logon privileges. Solution: Verify that the account that the MP ISAPI is configured to run under has not been denied batch logon rights through group policy.For more information, refer to Microsoft Knowledge Base article 838891. DCOM was unable to communicate with the computer ANGLESEY-FTP.anglesey-pri.local using any of the configured protocols; requested by PID 28e0 (C:\Program Files\Microsoft Configuration Manager\bin\x64\smsexec.exe). On 04/07/17 10:11:00, component SMS_SITE_COMPONENT_MANAGER on computer ANGLESEY-SCCM.ANGLESEY-PRI.LOCAL reported: Site Component Manager failed to install this component on this site system.Solution: Review the previous status messages to determine the exact reason for the failure. Site Component Manager will automatically retry the installation in minutes. To force Site Component Manager to immediately retry the installation, stop and restart Site Component Manager using the Configuration Manager Service Manager. On 07/04/2017 10:11:00, component SMS_DISTRIBUTION_MANAGER on computer ANGLESEY-SCCM.ANGLESEY-PRI.LOCAL reported: Failed to create virtual directory on the defined share or volume on distribution point "["Display=\\ANGLESEY-FTP.anglesey-pri.local"]MSWNET:["SMS_SITE=ANG"]\\ANGLESEY-FTP.anglesey-pri.local".Possible cause: Distribution Manager requires that IIS base components be installed on the local Configuration Manager Site Server in order to create the virtual directory. Distribution Manager also requires that IIS Web Services be installed on the Distribution Point Server that needs to support Background Intelligent Transfer Service (BITS).Solution: Verify that IIS base components are installed on the local Configuration Manager Site Server, and IIS Web Services are installed on the Distribution Point Server. I've checked out most, if not all of the above recommendations hoping to find something wrong but everything I've checked has been fine so far. Either I'm missing something or there's an issue not mentioned above that's having a knock on effect to the whole of SCCM. Clients can't be pushed out at the moment, even manual installs don't seem to work. Endpoint is still being updated by the looks of things so most machines are covered by the old and new AV's while I try and sort this issue out. Set up includes SCCM on a 2012R2 VM, SQL on a separate 2012R2 VM and FTP physical server for software deployment. Also trying to push out and manage two separate domains. I'll admit I'm a complete noob with SCCM even with 2 years of messing around with it, it's just so huge it's hard to know exactly what the issue is and I seem to follow one error only to discover a rabbit hole of problems branching out. If I can't sort SCCM out then I'm seriously considering scrapping it and setting it all up from scratch again. Any help is much appreciated! Kind Regards, Alex

Thanks Vikpaw for your detailed overview. It's difficult to truly understand what one part of your team wants in a package when you have little experience in that field. It seems that if there are any all singing packages, they come in at a hefty cost. Happy might be a tad strong, they like what they know. Personally I think CMIS is 10 years over it's sell by date at best. We're a large Primary but as you say, our admin team is pretty small and it's going to come down to finding a system they all like. I've tried to bring them on as early as possible to get feedback, just seems at the moment the mood is much stronger in the remain camp then the move. But I do want to insure we go with a system our team are happy with that could even save them some workload. Cheers for all the info folks, much appreciated. Seems moving MIS really is a bugger for everyone involved in the process.

Hi pcstru, Cheers for the info. I'm not entirely sure we need a full Payroll package at the moment. It seems like they just want to be able to keep track of staff wages and feed that into budgets along with NI costs, pensions and etc..

Bumped

Hi, We're looking at moving MIS, hopefully we can ditch CMIS but I've run into some issues. It seems most MIS packages don't come with Finance Packages and those that do support some third party packages, quite often don't do HR/Payroll or they require a third package for it. Is this normal? With CMIS it did everything, and while I've had my issues with it, it seems it does a pretty good job considering what else is out there. So far we really like the look of Bromcom, we've yet to see the Finance side but I've just had confirmation that they do not do HR/Payroll. I was just wondering what other schools have done when moving away from either Sims or CMIS which have built in or optional extras for Finance & HR/Payroll. Would appreciate any extra info that can be provided. Cheers, Alex Anglesey Primary School

Also, how do you manage kids on office 365? Do you get some extra fine controls for them, such as limiting their address book and disabling IM?

Okay, We might look at that solution if I have to give up on BGFL365. Don't know why they would think getting them to do everything is a good idea, just a way of increasing the yearly paycheck.

Do you require any extra software for it to sync to AD?

Would be interested in this too. Getting tired of Link2ICT only suppliers too. If you don't want to do something their way, they aren't interested in working with you.

We're are messing with it now and although generally it's a lot better than Zimbra, it seems you have to make some sacrifices at the same time. For instance, at the moment they want everyone doing admin changes to go through link2ict. You can create new accounts and reset passwords, that's about it. The rest, including fixing mistakes, deleting accounts, creating shared mailboxes etc.. are all done by link within a couple days of logging calls. What is normal 365 like? Seriously considering making the jump to that before everything is finalized with bgfl365.

If that's the case I think we'll look at some of them to replace our Notbooks, sound like a good deal. How are they with the kids though? Speed on network, accessing files, general tasks a domain connected machine needs to do well?

As someone who's been left to deal with a lovely set of 60 netbooks, i would strongly suggest staying well away. Price is cheaper for a reason, getting them on the network kills any functionality they had when off the network. Stick with laptops and I would recommend i3 minimum. Plan IT and Misco have always been pretty good suppliers for us.

I've heard good and bad things about Meraki, first and for most being a cisco owned product means it's usually expensive. I've checked out Unifi some more and I definetly think I'll give it a go. Might buy a single AC AP and see how well it works. Cheers folks, picking your brains has been much appreciated.

We just bought a bunch of HP Switches with POE onboard. Cheers for the pricing, I'm presuming its the pro versions that everybody is using.

Wow, seems like it's a split between Ruckus and Unifi. I'll have to check out Unifi and see what the cost really is for the system. Ruckus are saying around £250 an AP so I'd be interested how much cheaper Unifi, bearing in mind that we got burnt bad on a "Cheap" D-link system.

Hey folks. We're looking at upgrading our wireless solution as we currently have a D-Link system in which has been pretty crappy at times. We have 30AP's at the moment and we're in the middle of looking at different providers for a new system. I just wanted to get some feedback of other local schools as to what has worked and not worked in the last year with Wireless replacements. Link2ICT are offering us a solution which could be managed by them for a small fee. Ruckus looks pretty good so far and certainly at the moment seems like the most appealing choice for me at the moment. And we've also looked at Airtight which is primarily cloud based. We have an AP off them at the moment but have had no luck in getting it connected through Links firewall, even after port changes. Can anybody else recommend any of the above or am I missing a really good solution I haven't checked out yet. (Just seems like everyone of these companies thinks their product is the best, makes it hard to figure out what is BS and what is fact sometimes.)

Thanks for the info, ordered the switches and I'm going to do as you say and keep the cisco switches limited to doing what they have to and nothing else. Link2ICT & SB still haven't got back to me on whether we need one at each site but I guess I have a week before we start doing any replacing of switches anyway. Cheers for the help ladies and gents, much appreciated.

Well for one I wanted to keep everything uniformed when it came to the switches, I prefer having the same make across the board which helps when it comes to support and warranties. The other thing is we use most of the ports on the Cisco switch for internal communication, thus why I wanted to upgrade it to 1GB rather then leave it in to bottleneck the network. As for the fibre link, we're certainly not 2 miles away but it is across the road and a little further than a playground away. My problem with SB is the time it takes for anything to get done. I asked for the info on why this had to be a Cisco switch on Monday and so far I've had one call telling me that's the way it is and that's it. No written notice as to why, no technical reason, just, that's the way it is.

So no other Switch could do the same job? As for quantity, is it only one switch we'd have to leave in as we are split across two sites with a fibre link at both. Does this mean we'd need to keep one cisco at each location? Cheers for the speedy assistance, looking like I'll order the HP's and upgrade the Cisco's when I have some surplus cash.

I was worried that by leaving a 100mb switch in it'll drag the rest of the network down. We're only just upgrading from a 10mb line to a 100mb beginning of next month, but anything still connected to the old cisco's will run at 100mb throughout the network and not 1gb. I am tempted now to just upgrade everything and leave it in but I'd prefer to upgrade everything in one go too.

See to me that makes sense but I've done some research and HP seem well received from other schools and businesses that have used them. I wouldn't mind so much if they gave an alternative to Cisco but instead they have just said that there Cisco network will only talk to a Cisco switch. I've chased them up and hopefully will be emailed some details on why this is the case.

Hey folks, thanks for all the info. I think I'm going to continue to chase them about it till they tell me exactly what the problem is with any other switch provider. I've got nothing against Cisco except the high prices, the fact that Link2ICT are forcing the issue and saying we can no longer work with them if we move to HP for our main Switch makes me wonder if this is some kind of big bluff. They really don't like change or doing what's best for the schools under them, having worked there myself, this seems likely the case at hand. All your input has helped a lot though, thanks. Time to pester Link!

Hey folks, I hope somebody can give me some advice on this. We're basically upgrading all our old 100mb switches from 2008 to 1GB switches in the next couple weeks. We've chosen HP out of the possible hardware vendors as they have a pretty good lifetime warranty, the price is pretty good and the functionality of each seems worth the cost. However, after consulting with Link2ICT, they've basically said that we can't move away from Cisco for our main switches that connect to their end. Apparently according to them the HP switches we are buying will not talk to their Cisco network and thus we must go for Cisco and Cisco only. We're spending about £6,000 on a complete refresh on our switches, a total of 11 switches, and just one of the proposed cisco alternatives is £3-4,000. We may need three of these. Is this true that Cisco switches can only communicate in this manner with other Cisco switches? As to me, an amateur in switching technology and advanced networking, this seems like BS and a total rip off. Any help would be grateful. Cheers, Alex