SMS console not updating and clients appear to be uninstalling...

[PhilMarcum]

Cross-Post!!!
My SMS Admin console is no longer updating and it also looks as though the Advanced clients are uninstalling as the numbers appearing under Show count for the collections are decreasing. Yesterday I was showing a total 5751clients with 2690 having the SMS client installed. Today I see 57481 with 30 clients installed. While running a query using SMS Service Manager I noticed that all of the Component services had stopped so I attempted to restart but couldn't get the SMs_Exec service to start so I did a site reset. This was early, 1am est, this morning, and so all services are now started but the console isn't refreshing. Of all the logs only the adminui.log, smsprov.log, and smsprov.lo_ files have updated since yesterday. The ccm.log file, which hasn't updated since yesterday am, shows the following:

WARNING: High volume of CCRs. Slowing down the queue processing thread
---> Unable to retrieve a sites list from machine "DUB-A052L".
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account mydomain\_sms1 (000004b3)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account %MACHINENAME%\_sms3 (000004b3)
---> Unable to retrieve travel mode switch from machine "DUB-A052L".
---> Unable to retrieve pending command value for sms client base components from machine "DUB-A052L".
---> WNetAddConnection2 failed (LOGON32_LOGON_INTERACTIVE) using account mydomain\_sms1 (000004b3)
---> Could not retrieve the site config timestamp from the client (2)
---> The 'best-shot' account has now succeeded 17 times and failed 13 times.

This seems to repeat itself for a number of other systems and I'm almost certain the problem is with the SMS accounts but I'm not sure which one because I didn't set up this site. I've changed the password on accounts being used to install the client but from looking they're not added as local admins on the client systems. Is it possible or necessary to now change the password of the local system service under which SMS is running? I'm not sure which account was used and/or created during the SMS install.
The site is SMS 2003 w/SP1 in Advanced Security mode. This is a single primary site with multiple secondary sites scattered all over the place. Right now the admin console isn't updating or showing the correct number of clients. Yesterday I was showing a total 5751clients with 2690 having the SMS client installed. Today I see 57481 with 30 clients installed. Something is terribly wrong and this couldn't have come at a worse time because I've got packages due today and management is trying to decide whether to keep SMS around or dump it and look at an alternate solution.
I didn't label this as URGENT but it is so ANY responses are appreciated.

TIA

 

[tbrennans]

I've changed the password on accounts being used to install the client but from looking they're not added as local admins on the client systems."

thats not gonna work :-D

Fix the client installation account on the client installation methods | accounts tab

this account has to have admin rights on the local machine,

now with all that said, there still is something goingnon with you losing clients, the client will never uninstall but it will lose connectivity with the MP and SMS will start droping them out of the DB, so you need to figure out whats up with that. I would also check out the locationservices.log clientlocation.log

 

[tbrennans]

Let me ask you some questions:

Did you add anything to the clients lately such as sp2 for xp.

Did anyone change any GPO's on your network (I just went through that)

Is DNS/Wins working correctly?

is the SMS admins group domain admins and do they have local admin rights on the boxes/is the client installation account in there.

If you go to a machine you lost and go into the control panel sms client thing (tech term) will it discover the site it belongs to?

 

[PhilMarcum]

The clients all run XPSP2 and have been for a while. As a matter of testing I created a GPO which included
1. The 1e Client Health script as startup.
2. Allow remote administration and allow file and print sharing exceptions to the firewall policy.

The GPO was applied to a few OU's containing computers for some specific sites I wanted to test on. From looking on a few of the systems located at these sites there is no client installation account added to the local admins group. Then there are a few that have the local, system, and network accounts added.

I'm working on a way to add the sms admins group to all of the client systems, 5000+ of which only 59 appears in the console. Anyone have something handy that can do this? There was mention of a batch file in my previous post.

Working...

Thanks

 

[tbrennans]

another thought on this is to make sure your client installation account has rights to the share on the server that has the client installation files.

I would also take a look at the gpo script your using and make sure its pointing to the right place (ya never know)

 

[ncotton]

What is your setting for setting a object as inactive and also deleting obselete data?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[PhilMarcum]

Those settings were:
Delete Obsolete Client Discover Data - Deleta data older than: 7 days
Delete Inactive Client Discovery Data - Delete data older than: 7 days
Delete Aged Discovery Data - Delete data older than: 3 days

These have since been changed.

A site reset and systems in the top level collections appear but there are a few sub-collections where the computer systems have disappeared. Those missing systems do appear in their top level collections.

The client installation account is the crux of my problems as I'm working on a script to get it added to all of my servers and client systems.