question

Chris-4250 avatar image
0 Votes"
Chris-4250 asked XGIJANEYC-9866 answered

PXE booting no longer working with SCCM

ConfigMgr version: 2010

Receiving below error in SMSPXE.log every time a computer tries to pxe boot with SCCM. This has been going on for a few days, haven't had an issue since we built SCCM out in 2017. The only thing that I believe has changed are the boot images themselves.

I've checked our router and ip helper address is in correctly.
I followed the steps HERE: https://docs.microsoft.com/en-GB/troubleshoot/mem/configmgr/troubleshoot-pxe-boot-issues
https://forums.prajwaldesai.com/threads/issue-with-osd.234/

and removed PXE booting, uninstalled WDS, deleted the remoteinstall folder, removed the boot images from the content of the DPs, changed the time on the self signed cert, and then added it all back and verified the boot images all showed up and still I receive this same error.

Is it possible the boot image has been changed and can cause this issue? I ask that because of the errors I saw in smsdpprov.log when it tried to add the images back, those 3 package id's 00100005, 00100002, 00100109 are the 3 boot images we have. I see all 33 boot.wim files of those images in RemoteInstall\SMSImages\ on the DP. Anything else I can check? I've tried multiple computers as well and still the problem persists.

SMSPXE.log
127705-capture.jpg


SMSDPPROV.log
127735-2.jpg


Looking at the Monitoring > System Status >Site Status in Configmgr I noticed the Management Point has an error status and shows below error, not sure if this will cause this problem. I restarted W3SVC service and still same problem

127736-3.jpg


mem-cm-generalmem-cm-osd
capture.jpg (135.4 KiB)
2.jpg (237.9 KiB)
3.jpg (250.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AllenLiu-MSFT avatar image
0 Votes"
AllenLiu-MSFT answered AllenLiu-MSFT edited

Hi, @Chris-4250
Thank you for posting in Microsoft Q&A forum.

Look like the PXE issue is related to your MP issue, we have to fix the MP issue first.
The HTTP status code 401 could caused by many reason, you may check MPControl.log and IIS log for more details.

Make sure the default IIS port (80) was not used to some other website.
https://social.technet.microsoft.com/Forums/en-US/15073010-6665-4e68-8d5f-9c706750c43a/http-test-request-failed-status-code-is-401-unauthorized?forum=configmanagergeneral


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 8
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

So when I go to http://<ServerName>/sms_mp/.sms_aut?mplist I get unauthorized error code 0x80070005 which means I have a permissions issue somewhere, but I have never changed any permissions so that's a bit odd to me.

Also I have a screenshot of the mpcontrol.lo below as well showing:
Call to HttpSendRequestSync failed for port 80 with status code 401, text: Unauthorized
Call to HttpSendRequestSync failed for port 80 with status code 500, text: Internal Server Error


127965-4.jpg


0 Votes 0 ·
4.jpg (274.1 KiB)

There are only 2 sites in IIS, the default web site which runs on 80 and 443 and then WSUS administration site which runs on 8530 and 8531.
This MP has been running with no issues since 2017. It is our SCCM Primary server and it is the MP and has SQL and WSUS installed on it. We just have a setup of 1 SCCM Primary server and 4 DPs. Everything is on the Primary server.
I did not do any changes that I'm aware of to cause this issue, it just started happening.

I put a screenshot of the MP control log in a below post. I'm not exactly sure what I'm looking for in the IIS logs, they dont give much detail at all and are quite long.

128021-5.jpg


0 Votes 0 ·
5.jpg (169.8 KiB)

Hi, @Chris-4250

When the Configuration Manager client is installed on, or uninstalled from, a server that's running a multicast distribution point (DP), the IUSR account permission is removed from CCM/SMS_CCM folder. You may get the error "Call to HttpSendRequestSync failed for port 80 with status code 401, text: Unauthorized".

Try to grant full control permissions for IUSR on the SMS_CCM folder to see if it helps.

1 Vote 1 ·

I had read another posting similar to yours to give IUSR rights to SMS_CCM. Before I did that I had given "Everyone" full control to SMS_CCM and it resolved the issue.
If IUSR is every internet user authenticated or not, what is the difference between Everyone and IUSR?

So since full control to Everyone fixed this, I can remove Everyone and IUSR should resolve it as well?

0 Votes 0 ·
Show more comments
RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered

Are clients able to communicate with the MP and pull down the policies? Looks like an issue with your MP.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered

Try restarting the IIS once. If that doesn’t help then you should open a case with MS as this may require some deeper investigation.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

XGIJANEYC-9866 avatar image
0 Votes"
XGIJANEYC-9866 answered


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.