This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(102.4, 28.000000000000004%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
ConfigMgr version: 2010
Receiving below error in SMSPXE.log every time a computer tries to pxe boot with SCCM. This has been going on for a few days, haven't had an issue since we built SCCM out in 2017. The only thing that I believe has changed are the boot images themselves.
I've checked our router and ip helper address is in correctly.
I followed the steps HERE: https://learn.microsoft.com/en-GB/troubleshoot/mem/configmgr/troubleshoot-pxe-boot-issues
https://forums.prajwaldesai.com/threads/issue-with-osd.234/
and removed PXE booting, uninstalled WDS, deleted the remoteinstall folder, removed the boot images from the content of the DPs, changed the time on the self signed cert, and then added it all back and verified the boot images all showed up and still I receive this same error.
Is it possible the boot image has been changed and can cause this issue? I ask that because of the errors I saw in smsdpprov.log when it tried to add the images back, those 3 package id's 00100005, 00100002, 00100109 are the 3 boot images we have. I see all 33 boot.wim files of those images in RemoteInstall\SMSImages\ on the DP. Anything else I can check? I've tried multiple computers as well and still the problem persists.
SMSPXE.log
SMSDPPROV.log
Looking at the Monitoring > System Status >Site Status in Configmgr I noticed the Management Point has an error status and shows below error, not sure if this will cause this problem. I restarted W3SVC service and still same problem
Hi, @Chris
Thank you for posting in Microsoft Q&A forum.
Look like the PXE issue is related to your MP issue, we have to fix the MP issue first.
The HTTP status code 401 could caused by many reason, you may check MPControl.log and IIS log for more details.
Make sure the default IIS port (80) was not used to some other website.
https://social.technet.microsoft.com/Forums/en-US/15073010-6665-4e68-8d5f-9c706750c43a/http-test-request-failed-status-code-is-401-unauthorized?forum=configmanagergeneral
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
So when I go to http://<ServerName>/sms_mp/.sms_aut?mplist I get unauthorized error code 0x80070005 which means I have a permissions issue somewhere, but I have never changed any permissions so that's a bit odd to me.
Also I have a screenshot of the mpcontrol.lo below as well showing:
Call to HttpSendRequestSync failed for port 80 with status code 401, text: Unauthorized
Call to HttpSendRequestSync failed for port 80 with status code 500, text: Internal Server Error
There are only 2 sites in IIS, the default web site which runs on 80 and 443 and then WSUS administration site which runs on 8530 and 8531.
This MP has been running with no issues since 2017. It is our SCCM Primary server and it is the MP and has SQL and WSUS installed on it. We just have a setup of 1 SCCM Primary server and 4 DPs. Everything is on the Primary server.
I did not do any changes that I'm aware of to cause this issue, it just started happening.
I put a screenshot of the MP control log in a below post. I'm not exactly sure what I'm looking for in the IIS logs, they dont give much detail at all and are quite long.
Hi, @Chris
When the Configuration Manager client is installed on, or uninstalled from, a server that's running a multicast distribution point (DP), the IUSR account permission is removed from CCM/SMS_CCM folder. You may get the error "Call to HttpSendRequestSync failed for port 80 with status code 401, text: Unauthorized".
Try to grant full control permissions for IUSR on the SMS_CCM folder to see if it helps.
I had read another posting similar to yours to give IUSR rights to SMS_CCM. Before I did that I had given "Everyone" full control to SMS_CCM and it resolved the issue.
If IUSR is every internet user authenticated or not, what is the difference between Everyone and IUSR?
So since full control to Everyone fixed this, I can remove Everyone and IUSR should resolve it as well?
Hi, @Chris
Everyone is any user account from the domain and any trusted domain, including the Guest, IUSR & IWAM accounts.
The IUSR accounts are members of Guests and Domain Users, not the member of Authenticated User.
I think you can remove Everyone, IUSER should resolve it as well.
If the response is helpful, please click "Accept Answer" and upvote it.
Fantastic, I'll give it a try, thank you.
So I set IUSR with full control and still experienced the MP errors and could not get to MPLIST or MPCERT. I set IUSR back to read and set Everyone to Read and it started working.
I'm not sure what the problem is, but I cannot get it to work without setting Everyone to Read access of SMS_CCM folder.
Not the best thing to have Everyone with Read rights, but it beats having Full control for everyone.
Thank you for your confirmation and glad to hear that you found the minimal permissions for the SMS_CCM folder in your case.
If possible, please help to accept answer, this will be very beneficial for other community members who have similar questions.
Are clients able to communicate with the MP and pull down the policies? Looks like an issue with your MP.
Try restarting the IIS once. If that doesn’t help then you should open a case with MS as this may require some deeper investigation.
