This issue isn’t specifically related to Configuration Manager or Windows Updates, but it does seem that Windows Updates itself could behave better to prevent this.

When Windows Updates attempts to connect to the WSUS server (or SUP), you will see the WINDOWSUPDATE.LOG show the client attempting to open the client.asmx file from the WSUS server. The lines following show this connection failing with “SyncUpdates failure, error = 0x8024401B, soap client error = 10, soap error code = 0, HTTP status code = 407″ followed by several more 0x8024401b errors.

updates-notworking

Read the rest of this entry »

Another “reminder where stuff is” post. This time for the Endpoint Protection logs. These should be the same for pretty much any version as far as I know, but I’m looking specifically at System Centre Endpoint Protection (SCEP) included as part of Config Manager 2012.

Log locations:

  • %allusersprofile%\Microsoft\Microsoft Antimalware\Support—Log files specific for the antimalware service
  • %allusersprofile%\Microsoft\Microsoft Security Client\Support—Log files specific for the SCEP client software
  • %windir%\WindowsUpdate.log—Windows Update log files, which include information about definition updates
  • %windir%\CCM\Logs\EndpointProtectionagent.log – Shows Endpoint version and policies applied

References:

http://technet.microsoft.com/en-us/library/gg477022.aspx

My gaming clan forums started throwing a rather annoying random error recently and I couldn’t figure out what had changed to cause it. Essentially a page saying only “No input file specified.”

My forums are running phpBB on Server 2012 running IIS with (of course) php installed. The message would just randomly appear when posting replies to messages, or searching for new topics. It didn’t always happen, and clicking refresh would then load the page fine. I tried re-installing php, upgrading to a newer php and “tweaking” settings in the php.ini file. No difference.

Looking in the IIS logs would show a 404 error returned, hitting refresh (maybe a couple of times) usually returned a 200 and loaded the page. The file being loaded was present and everything seemed to be in order.

Read the rest of this entry »

This is one of those really simple and stupid problems that had me stuck for a while. I kept getting distracted with other things so it took a while before I got around to looking into it properly.

About a week after upgrading ConfigMgr 2012 to R2 I noticed some of the rebuilt servers didn’t have the Endpoint agent installed. The clients were working correctly, deploying windows updates and software deployments fine. Client Policy and inventory processing correctly, Endpoint Policy was assigned to machine in console and appearing on client (policyspy)

On new computers, Endpoint Protection did not install at all, and on computers when SCEP setup run manually, Endpoint policy never applies. Registry key indicates no policy is applied, even though “Generated Policy shows the correct values

Read the rest of this entry »

Many devices are capable of “waking up” the computer, and often I find my computer has decided to wake itself up in the middle of the night because of one of them.

You can dig through Device Manager to find and disable the “Allow this device to wake the computer” options, but this is tedious and also difficult if you don’t know which device to change. Windows also has this neat “trick” where if you disable wake up on a device, and then plug it into a different USB port, Windows will see it as a *different* device which it then enables wake up for again.

Read the rest of this entry »

A collection of Powershell commands that I’ve come up with. Will add over time

Read the rest of this entry »

First off just to clarify, I am not a SQL guru, so on this topic I “know of” the feature but don’t really know that much about it.

We recently experienced a problem building a new Primary Site where the database replication links to the CAS failed and nothing we tried could fix the links. We resorted to completely uninstalling the site, deleting the Primary database and rebuilding the entire server OS from scratch. No matter what, the links replication just would not work.

RCMCTRL.LOG – Lot’s of these types of errors
Error: Replication group “Hardware_Inventory_4″ has failed to initialize for subscribing site H01, setting link state to Error.

As it turns out, the SQL DBA’s had enabled a wonderful new feature they must have discovered in SQL2012 called Data Compression. In SQL land it probably makes sense and does wonderful things, but in ConfigMgr world it’s BAD.

Read the rest of this entry »