question

StefanKnig-3607 avatar image
0 Votes"
StefanKnig-3607 asked saldana-msft edited

Policy download and client installation fails on metered internet connection (Windows 1909/ SCCM 2010/ BITS)

Dear Community,

in the last weeks I had the problem, that all of our clients, which use a metered internet connection and are running with Windows 10 1909, do not download their computer policy and additionally are unable to update the SCCM client.

As we only use 4G Connections for our remote connections and don't use any kind of WiFi, the connections are always metered, so in the pandemic sitiuation right now, most of the clients don't get any software or updates, until they come back into the office. On Clients, that are still running with Windows 1809 we don't face that issue.

When the clients try to download the policy, the PolicyAgent.log looks like this:





Raising event:
instance of CCM_PolicyAgent_PolicyDownloadStarted
{
ClientID = "GUID:055BAA98-61CA-42B5-8F86-1BCC6207246A";
DateTime = "20210108105335.193000+000";
DownloadMethod = "BITS";
DownloadSource = "http://<mp>/SMS_MP/.sms_pol?ScopeId_5E7F5B06-EECB-43BD-A492-FE23EE24C86D/Application_fe918d11-2476-4a6f-a6c9-9545775de4eb/CA.SHA256:9B192AFBD5516FA821A4012E81F0C1FD5B77450C61EC17F37D31DC8CE070FF51";
PolicyNamespace = "\\\.\\ROOT\\ccm\\policy\\Machine\\RequestedConfig";
PolicyPath = "CCM_Policy_Policy5.PolicyID=\"ScopeId_5E7F5B06-EECB-43BD-A492-FE23EE24C86D/Application_fe918d11-2476-4a6f-a6c9-9545775de4eb/CA\",PolicyVersion=\"13.00\",PolicySource=\"SMS:BB1\"";
ProcessID = 7412;
ThreadID = 12748;
};
PolicyAgent 08.01.2021 11:53:35 12748 (0x31CC)
Raising event:
instance of CCM_PolicyAgent_PolicyDownloadStarted
{
ClientID = "GUID:055BAA98-61CA-42B5-8F86-1BCC6207246A";
DateTime = "20210108105335.193000+000";
DownloadMethod = "BITS";
DownloadSource = "http://<mp>/SMS_MP/.sms_pol?ScopeId_5E7F5B06-EECB-43BD-A492-FE23EE24C86D/RequiredApplication_fe918d11-2476-4a6f-a6c9-9545775de4eb/VI/VS.SHA256:DD8E5D1337ED8694C3EE13D078384D680A7427E524238D1C294278F2AC3CCCC9";
PolicyNamespace = "\\\.\\ROOT\\ccm\\policy\\Machine\\RequestedConfig";
PolicyPath = "CCM_Policy_Policy5.PolicyID=\"ScopeId_5E7F5B06-EECB-43BD-A492-FE23EE24C86D/RequiredApplication_fe918d11-2476-4a6f-a6c9-9545775de4eb/VI/VS\",PolicyVersion=\"4.00\",PolicySource=\"SMS:BB1\"";
ProcessID = 7412;
ThreadID = 12748;
};
PolicyAgent 08.01.2021 11:53:35 12748 (0x31CC)
Raising event:
instance of CCM_PolicyAgent_PolicyDownloadStarted
{
ClientID = "GUID:055BAA98-61CA-42B5-8F86-1BCC6207246A";
DateTime = "20210108105335.202000+000";
DownloadMethod = "BITS";
DownloadSource = "http://<mp>/SMS_MP/.sms_pol?{589483B8-C231-4D9A-ADE0-54AD385E4CE6}.SHA256:B359C139ABF59F4AE4351391DE5437AAB9DDC619A8BA1F53AA1FFFD3F61594F1";
PolicyNamespace = "\\\.\\ROOT\\ccm\\policy\\Machine\\RequestedConfig";
PolicyPath = "CCM_Policy_Policy5.PolicyID=\"{589483B8-C231-4D9A-ADE0-54AD385E4CE6}\",PolicyVersion=\"5.00\",PolicySource=\"SMS:BB1\"";
ProcessID = 7412;
ThreadID = 12748;
};
PolicyAgent 08.01.2021 11:53:35 12748 (0x31CC)
[PolicyBodyDownload] Created DTS job '{A85FD8FD-1F04-49D1-B214-00BFAED8AFC7}' to download 3 policies PolicyAgent 08.01.2021 11:53:35 12748 (0x31CC)





After the [PolicyBodyDownload]-step nothing else happens.

My suggestion is, that the problem is somehow related to BITS, because as I know (and the log says), the Policies should be downloaded with BITS. Additionally, when I try to Update the client on those machines, the ccmsetup.log has a BITS-error, too:





BG error context is 2 ccmsetup 08.01.2021 10:11:07 13516 (0x34CC)
Download Update: A recoverable error has occurred. A retry attempt will be made. Error: 0x80200010, Description Unknown, Context: Unknown. ccmsetup 08.01.2021 10:11:07 13516 (0x34CC)
Failed to download client files by BITS. Error 0x800706ba ccmsetup 08.01.2021 10:15:47 13516 (0x34CC)





I don't really get the point here and all I tried till now didn't resolve the issue.
Does anyone have any suggestions on this?

Environment:
Windows Server 2012 R2
SCCM 2010
Windows 10 1909, Build 10.0.18363.1139

Thanks in advance for your help!







windows-10-networkmem-cm-updatesmem-cm-application
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

What client version are the clients on now?

Starting in 2006, we changed the behavior to allow client upgrades on metered connections: https://docs.microsoft.com/en-us/mem/configmgr/core/plan-design/changes/whats-new-in-version-2006#install-and-upgrade-the-client-on-a-metered-connection.

Assuming your clients are below 2006, the only possibility here is to use software distribution to push out the new client agent version assuming that you've previously configured to allow this in your client settings: https://docs.microsoft.com/en-us/mem/configmgr/core/clients/deploy/about-client-settings#client-communication-on-metered-internet-connections.

You could possibly instruct the users to temporarily configure the NIC as non-metered as well. There are other ramifications to doing this though.

I can't think of anything else off-hand.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

StefanKnig-3607 avatar image
0 Votes"
StefanKnig-3607 answered

Hi Jason,

thanks for your reply.
Clients are already on version 5.00.9012.1020. Some clients are already updated to 5.00.9040.1015, but show the same behaviour when updating the policy.
Default Client Settings are set to "Allow" for metered internet connections and installing clients with "ccmsetup.exe /AllowMetered ..." doesn't work as well.

As the clients don't download the policies, we can't use software distribution for pushing out the new client version.
I don't care that much about the client installation, as there would be the possibility to update the client, when users are in the office. But the policy download problems will cause serious issues in software deployment soon.

Any other suggestions?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Jason-MSFT avatar image
0 Votes"
Jason-MSFT answered

When was the "allow" traffic on metered connection configured?

Have you validated (using PolicySpy or Support Center) that the clients are receiving and applying this setting? Keep in mind there is a bit of chicken and egg here as they won't be able to get this setting unless they are connected via a non-metered connection initially.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

StefanKnig-3607 avatar image
0 Votes"
StefanKnig-3607 answered Jason-MSFT commented

The metered connection was configured in Juli 2020 and I have two test clients, that I tried out when they where connected to the LAN and where receiving policies and afterwards used a metered connection and where not able to download policies anymore.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

It's time to open a support case here then as there's a lot more that should be dug into that is beyond the scope of a forum thread.

0 Votes 0 ·