SCCM 5.00.9068.1000 - Clients not detecting a distribution point for software install

Question

question

RobertMeany-8795 asked Apr 26, '22 saldana-msft edited 3 days ago

SCCM 5.00.9068.1000 - Clients not detecting a distribution point for software install

Out of the blue as of this week, our clients are unable to install application packages. They see the software as required for install in the software center, but wait constantly for a distribution point to advertise that it has the software available for download.

This is a single-site SCCM deployment with only one distribution point. Boundaries are setup such that all clients connect to this distribution point, and I do allow fallback to default distribution point group if none are available, which also includes this same distribution point... This has worked fine for years until just now.

I tried removing content and re-distributing it, which did not work. I've tried disabling content validation (as well as performing manual validation) which passes. I do not see any errors being reported in component status.

I'd include log files, but not sure which ones are best to help diagnose this. On the client end, the ccmexec.log files show a bunch of "GetAppGroupAssignment failed with (0x86d00215)" which just implies it is not getting a reply from a distribution point.

Trying to think of what may have changed recently and the only two things I can think of are:

I added an active directory site in prep for hosting a cloud-based domain controller. I did add this site to the boundary group. None of our clients would fall under this site anyway.
This server is setup to automatically run windows updates. So a recent windows update could have potentially done something?

Would appreciate some assistance with this. Let me know what else you need. Thanks.

mem-cm-general mem-cm-application

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-04-27T02:44:24.437Z

AllenLiu-MSFT answered Apr 27, '22 RobertMeany-8795 commented Apr 27, '22

Hi, @RobertMeany-8795

Thank you for posting in Microsoft Q&A forum.

We may start from checking the distmgr.log on the Site server.
The SCCM server log files are located in DRIVE-Letter:\Program Files\Microsoft Configuration Manager\Logs.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 4

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RobertMeany-8795 · Apr 27 at 12:45 PM

197015-distmgr.log

See attached

0 ·

distmgr.log (931.6 KiB)

RobertMeany-8795 · Apr 27 at 12:47 PM

Also - just a heads up - I have updated the site to the latest version (2203) .. Still exhibiting the problem though.

0 ·

RobertMeany-8795 · Apr 27 at 02:05 PM

Please note the below log entries from scclient-<username>.log on one of the computers that I was trying to install apps on...

 <![LOG[GetApplicationsAsync: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was ''.. Unable to fetch user categories, unknown communication problem.      (Microsoft.SoftwareCenter.Client.ViewModels.SoftwareListViewModel+<LoadAppCatalogApplicationsAsync>d__164 at MoveNext)]LOG]!><time="10:01:17.9789377" date="4-27-2022" component="SCClient" context="" type="2" thread="1" file="">
 <![LOG[GetApplicationsAsync: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was ''.. Unable to fetch user categories, unknown communication problem.      (Microsoft.SoftwareCenter.Client.ViewModels.SoftwareListViewModel+<UpdateCategoriesAsync>d__125 at MoveNext)]LOG]!><time="10:01:18.0308108" date="4-27-2022" component="SCClient" context="" type="2" thread="1" file="">

0 ·

RobertMeany-8795 · Apr 27 at 03:37 PM

Looking at ContentTransferManager.log on the client, I am seeing all entries like this:

 CTMJob({C1558A9B-1AF8-404F-BD5A-E4259F20882C}): Queued location request LSRequest('{F1102B98-6F84-4171-814C-599061D6921E}').    ContentTransferManager    4/26/2022 11:58:44 AM    9916 (0x26BC)
 CTMJob({C1558A9B-1AF8-404F-BD5A-E4259F20882C}): CCTMJob::UpdateLocations - Received empty location update    ContentTransferManager    4/26/2022 11:58:44 AM    11576 (0x2D38)

0 ·

Answer 2 · 2022-04-27T15:55:53.503Z

RobertMeany-8795 answered Apr 27, '22 AllenLiu-MSFT edited Apr 28, '22

It is looking like it was one of two things.. Unfortunately I did both things at once, so I am not sure which actually fixed it..

I noticed that IIS did not have basic/windows/digest/forms authentication features enabled. Perhaps a recent windows update uninstalled them? After enabling the features and rebooting, I noted that the SMS_DP_SMSPKG$ site had windows authentication 'enabled' as an option. That said, I do have my DP configured to allow anonymous access in SCCM.
I was reading about using subnets as boundaries being a potential issue. I had configured all our local networks to be in our boundary group (10.0.0.0/8) .. In the past this wasn't a problem. The recommendation was to change this to an IP address range, which I did.

I'm inclined to think item #1 was the problem, because the boundary group was never an issue in the past, but who knows...

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AllenLiu-MSFT · Apr 28 at 07:33 AM

Thank you for your feedback and we're glad the problem is solved now, and I agree with you that #1 could be the root cause.

0 ·

question