Client Install failing

[aidanbree]

Anyone got any idea why this is failing?

I have checked the username and password and it is OK. The account is domain admin. I can log in via terminal services to the machine in questin

Log follows....

Thanks





======>Begin Processing request: "CMJJFPXT", machine name: "C-SWFT-CTX-08" $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:10.091 2006 GMT Daylight Time><thread=2452 (0x994)>
---> Trying each entry in the SMS Client Remote Installation account list~ $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:10.091 2006 GMT Daylight Time><thread=2452 (0x994)>
---> Attempting to connect to administrative share '\\C-SWFT-CTX-08\admin$' using account 'CORPAD\SRV-SMSINSTALL'~ $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:10.091 2006 GMT Daylight Time><thread=2452 (0x994)>
Waiting for change in directory "E:\SMS\inboxes\ccr.box" for queue "Incoming", (30 minute backup timeout). $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:10.091 2006 GMT Daylight Time><thread=5540 (0x15A4)>
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account CORPAD\SRV-SMSINSTALL (000004d8) $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:10.122 2006 GMT Daylight Time><thread=2452 (0x994)>
---> WNetAddConnection2 failed (LOGON32_LOGON_INTERACTIVE) using account CORPAD\SRV-SMSINSTALL (000004d8) $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:10.122 2006 GMT Daylight Time><thread=2452 (0x994)>
---> ERROR: Unable to connect to remote registry for machine name "C-SWFT-CTX-08", error 5. $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:11.747 2006 GMT Daylight Time><thread=2452 (0x994)>
---> ERROR: Unable to access target machine for request: "CMJJFPXT", machine name: "C-SWFT-CTX-08", error code: 5 $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:11.747 2006 GMT Daylight Time><thread=2452 (0x994)>
Retry request id for "CMJJFPXT" set to "C-SWFT-CTX-08" $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:11.747 2006 GMT Daylight Time><thread=2452 (0x994)>
Stored request "C-SWFT-CTX-08", machine name "C-SWFT-CTX-08", in queue "Retry". $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:11.763 2006 GMT Daylight Time><thread=2452 (0x994)>
<======End request: "C-SWFT-CTX-08", machine name: "C-SWFT-CTX-08". $$<SMS_CLIENT_CONFIG_MANAGER><Wed Jun 28 10:50:11.763 2006 GMT Daylight Time><thread=2452 (0x994)>

 

[ncotton]

Have you disabled the firewall on the clients?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[aidanbree]

The log above is from a 2003 Server machine and therefore no firewall. I do get the same on XP clients though but I have managed the local firewall through GPO to allow 139,445,137,138, and 135 through from any computer.

 

[ncotton]

Can you access the \\C-SWFT-CTX-08\admin$ share from the site server?
Have you specified a push installation account?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[aidanbree]

Hi Neil,

I just tried that and it seems when connecting to a 2000 Server machine I get an error 'You are not authorized to login from this station'. I am able to access Admin$ on all the 2003 machines from my SMS server with no probs.

Just trying to figure out why this is. I have seen some MS articles relating to this error but they all seem to be about accessing other samba shares.

Cheers

Aidan

 

[ncotton]

Have you specified a client installation acount and using the for your push installation?

Site > Site Settings > Client Intsallation Methods > Client Push Installation > Accounts

Have you had the client installed sucessfully on any other machines?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[tbrennans]

File and print sharing turned on those machines?

 

[mark6960]

I'm getting the same problem - I am using 2 client installation accounts - both are domain administrators - windows firewall is disabled on the entire domain - I have approximately 80% of the computers on the domain installed and managable by SMS. I have over 4000 computers in the domain and some I know what the issue is because they are inventory and are sitting on the shelf - just cant figure out why I keep getting this message. Have never seen this one before and cant find good info about it on the web or on microsoft (not a surprise there) LOL

 

[DennisZhao]

Do you have the workstations on the same subnet as the server? If you enable file and print on the firewall, by defualt, it will only allow connections from the same subnet.

 

[mark6960]

the firewall is disabled on all windows XP machines - also, all of the subnets are listed as boundaries in the config. I have over 30 subnets so its not possible to have all of the machines in the same subnet as the server

 

[ncotton]

Can you do a normal ping from server to problem client? Forget the fact that you can access via network neighboughood. Can you ping?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[mark6960]

yes - I can ping the clients and also do a nslookup to confirm that I am pinging the correct IP.

 

[ncotton]

Right, you may have already answered these. But check and administer these if not.

-Client has File/Print Sharing Enabled
-Client has Firewall turned off
-Clients IP Address falls within the Site Boundaries
-On client - Start > run > cmd > "net localgroup Administrators" > should give you DOMAIN\Domain Admins as a group >if not add it, "net localgroup Administrators DOMAIN/SMSAdminAccount /add".
-On site server > collection > find problem machine > right click > install client > next > Always install or repair > next > next (i think). > Go to client immeditately > open task manager > arrange proccess by name > look for ccmsetup.exe running
-If above doesn't work, from client navigate to \\siteserver\smsclient\i386\ccmsetup.exe
-If the problem clients are on a different subnet and you have the firewall enabled > Network Connection > Properties > Advanced (Firewall) >Settings > Exceptions > File and Print Sharing > Edit > Change Scope > check to make sure you have more than "My Network (Subnet) Only > if you do, change to custom list and enter the list of all the subnets adderss on the network, i.e 192.168.10.0/255.255.255.0, 192.168.11.0/255.255.255.0, you would need to do this on both machine and site server.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[mark6960]

Right Neil - have already done all of the below - the firewall is disabled in group policy - the 2 accounts that SMS can use to install the client are both domain admins and a member of the local admins group for the entire domain. Also - I can only get to the machine's hard drive if I go through internet explorer or another browser but not directly map to it or manage it through admin tools.

 

[ncotton]

Mark, can you access the \\client\admin$

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[mark6960]

I cant get to it from start/run but I can get to it from internet explorer using \\clientPCname\admin$