question

BojanZivkovic-7448 avatar image
0 Votes"
BojanZivkovic-7448 asked Amandayou-MSFT commented

Patching failure - MECM 2103

Hi, two days ago ADR for Windows Server 2016/2019 updates ran and now I see bunch of servers not being updated/restarted with following errors:

ConfigMgr is no longer managing WindowsDO GPO. Set to default values. Mode = LAN. GroupID = empty LocationServices 8/16/2021 4:02:50 AM 5552 (0x15B0)
Calling back with empty distribution points list LocationServices 8/16/2021 4:02:50 AM 5552 (0x15B0)
CCTMJob::UpdateLocations - Received empty location update for CTM Job {A7662E15-9AFA-4DFC-BC3C-BA9F645455F6} ContentTransferManager 8/16/2021 4:02:50 AM 5552 (0x15B0)

Patching had been working flawlessly of all 100+ servers here but now it is completely different story. Only change made in the meantime was adding Windows Server 2019 to SUP sync product list, ADR and renaming SUG/deployment package (last week) but that should not have anything to do with this behavior. Boundaries/Boundary Groups/Reference System ... nothing was changed. Defender Definition updates installation, on the other hand, is working without issues. This is PCI environment so having it up to date is very important.

mem-cm-updates
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

Amandayou-MSFT avatar image
0 Votes"
Amandayou-MSFT answered

Hi @BojanZivkovic-7448,

Only change made in the meantime was adding Windows Server 2019 to SUP sync product list, ADR and renaming SUG/deployment package (last week) but that should not have anything to do with this behavior.

Yes, in fact, if we just change it, there is no effect or error in SCCM.

According to these errors provided, it seems like a boundary group issue. Even through boundaries/boundary Groups/reference System ... nothing was changed, Please try to run forest discovery and creating IP range boundaries. Then recreate the boundary group and reassign the DP. Kindly check if it works.

123829-817.png


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



817.png (9.7 KiB)
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BojanZivkovic-7448 avatar image
0 Votes"
BojanZivkovic-7448 answered Amandayou-MSFT commented

We have tons of VLANs in environment hence boundaries based on AD site were used right from the start. I just added IP ranges pulled from AD into corresponding boundary groups and see progress - number of systems with status downloading updates is dropping and number of systems with status pending system restart is going up. Will keep monitoring how situation is unfolding. It seems that putting AD sites as BG members is not a best idea - it can work for some time and then issues can pop up.

Thank you very much.

· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Amandayou-MSFT avatar image Amandayou-MSFT ·

Hi,

Thanks for your update, I am glad to your issue has basically solved, if we have issue in future, welcome to post in Q&A.

Best regards,
Amanda

0 Votes 0 ·