No, we're getting a 100% failure rate. Nothing is able to start an OSD build.
I did find this in some logs earlier:
On a working attempt:
CLibSMSMessageWinHttpTransport::Send: URL: <MgMtPnt-FQDN>:80 CCM_POST
/ccm_system/request
Request was successful.
CryptMsgControl (hMsg, 0, CMSG_CTRL_VERIFY_SIGNATURE, pCert->pCertInfo),
HRESULT=8009100e (e:\qfe\nts\sms\framework\osdmessaging\libcrypt.cpp,592)
signature varification failed
::DecompressBuffer(65536)
Decompression (zlib) succeeded: original size 97383, uncompressed size 508568.
Request client ID: 31ceb61c-aec6-4202-8e3e-9ff6ac398232
Response client ID: 31ceb61c-aec6-4202-8e3e-9ff6ac398232
Retrieving Policy Assignments:
Processing Policy Assignment {11d8a44c-837a-49c6-9068-e06340ae499b}.
<...>
Successfully read 178 policy assignments.
On a non-working attempt:
CLibSMSMessageWinHttpTransport::Send: URL: <MgMtPnt-FQDN>:80 CCM_POST
/ccm_system/request
Request was successful.
::DecompressBuffer(65536)
Decompression (zlib) succeeded: original size 281, uncompressed size 672.
Request client ID: GUID:ad935698-e627-4209-8d36-5e750fec3cbb
Response client ID: GUID:ad935698-e627-4209-8d36-5e750fec3cbb
Retrieving Policy Assignments:
Successfully read 0 policy assignments.
On the working attempt it retrieved what I am guessing were the policies stored
in a compressed file, but that file was ~300x larger than what was retrieved on
the non-working attempt (highlighted in green)
Also, highlighted in yellow is an entry from the working attempt that seems to
imply accessing encrypted(?) content (the policy file?), but those entries are
absent on the non-working attempt.
From: [email protected] [mailto:[email protected]] On
Behalf Of Mote, Todd
Sent: Wednesday, January 14, 2015 11:28 AM
To: '[email protected]'
Subject: [mssms] RE: CM12 - No Task Sequences Available??
Are the machines being properly identified? Sometimes you'll get a machine
back from repair with a motherboard that wasn't properly serialized and it
advertises a generic GUID to SCCM. If you have more than one of these generic
GUIDs then subsequent PE runs will identify the computer as the first one
attached to SCCM and if that original object doesn't have a TS advertised to
it, it will say "no TS's". seems to me like OSD is working, but maybe there's
something with the way the client is ID'ing itself to SCCM. Have you been able
to PXE the same device half a dozen times and get it to "flap" between the two
states?
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Marable, Mike
Sent: Wednesday, January 14, 2015 9:50 AM
To: '[email protected]'
Subject: [mssms] RE: CM12 - No Task Sequences Available??
No, we do not.
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Krueger, Jeff
Sent: Wednesday, January 14, 2015 10:30 AM
To: [email protected]<mailto:[email protected]>
Subject: [mssms] RE: CM12 - No Task Sequences Available??
Just to check, you don't have any scripts running in a Prehook that depends on
some external service do you?
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Marable, Mike
Sent: Wednesday, January 14, 2015 10:23 AM
To: '[email protected]'
Subject: [mssms] RE: CM12 - No Task Sequences Available??
We are getting this on a number of physical hardware types (desktops, laptops,
Dells and HPs....) as well as VMs.
The PXE booted machines (how the build is normally initiated) will
spontaneously reboot on their own before ever reaching the "Welcome" screen.
The boot media machines will at least get to the "Welcome" screen, but
regardless of how long it sits there the result is the same. No TS available.
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Krueger, Jeff
Sent: Wednesday, January 14, 2015 10:16 AM
To: [email protected]<mailto:[email protected]>
Subject: [mssms] RE: CM12 - No Task Sequences Available??
"Just because you can PXE boot does not mean there are Task Sequences
advertised. It just means you have your boot images setup."
- Acutally, when pxe booting it will check to see if there is a TS
deployment available to that machine, if there is no deployment it will abort
the pxe process and not go on to download the WinPe image.
Mike, I assume you've checked to see if this happens on different hardware
types? We have seen in the past after booting to WinPe on some machines they
took just a bit longer to fully initialize the network driver, so if you
clicked as soon as the gui was available to get the list of TS's it would fail.
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Mawdsley R.
Sent: Wednesday, January 14, 2015 10:02 AM
To: [email protected]<mailto:[email protected]>
Subject: [mssms] RE: CM12 - No Task Sequences Available??
Just because you can PXE boot does not mean there are Task Sequences
advertised. It just means you have your boot images setup.
Open Config Manager, navigate to Software Library>Operating Systems>Task
Sequences.
In here should be your Task Sequences. Click on one and check its deployments
via the Deployments tab at the bottom. This is who it is currently advertised
to.
If need be, you could deploy it (advertise) to another Device Collection..
when doing this, DO NOT set it as Required unless you want to wipe everything.
Rich
From: [email protected]<mailto:[email protected]>
[mailto:[email protected]] On Behalf Of Marable, Mike
Sent: 14 January 2015 14:53
To: SMS
Subject: [mssms] CM12 - No Task Sequences Available??
For the third week in a row something has knocked out OS deployment offline.
We can PXE boot a machine but during the boot it will suddenly reboot out of
WinPE and back into the full OS. We can pop a command window to prevent the
reboot and the SMSTS log has this right before it bailed out and attempted to
reboot:
"There are no task sequences available to this computer.. Please ensure that
you have at least one task sequence advertised to this computer. Unspecified
error (Error: 80004005; source: Windows)"
If there were no sequences advertised then SCCM wouldn't allow it to PXE boot
in the first place.
I boot a machine using SCCM boot media and when I hit Next on the welcome
screen I get the message that there are not sequences available.
SMSTS log : "No assigned task sequences"
There are no other errors in the SMSTS logs on the clients. The site status
within SCCM shows all green as well.
Now this has happened three weeks straight now. It first happened New Year's
Eve, then Thursday of last week and now again this morning. It starts around
9:00 am and magically corrects itself within 2-3 hours.
We've checked out networking, DNS, WINS, the SCCM guys say that there are no
external process running (like backups, virus scans, etc.) on the
infrastructure at this time. It's maddening since it magically starts and
magically corrects itself and we cannot figure out what is causing it. Within
WinPE we can ping the Management Points, in fact we can ping all of the SCCM
servers. Machines that are already in the process of building continue to do
so and do not fail. Also, any non-OSD deployment will still work during this
time. We can pull deployments, even non-OSD task sequences will run. So
whatever is causing the problem is only affecting machines attempting to start
an OS deployment.
Anyone else ever see anything like this?
Mike Marable
Application Programmer/Analyst Lead
Enterprise Device Engineering and Management
MCTS, MCITP, MCSA, MS
[Profile<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.mcpvirtualbusinesscard.com_VBCServer_MikeMarable_profile&d=AwMFAg&c=aLnS6P8Ng0zSNhCF04OWImQ_He2L69sNWG3PbxeyieE&r=pQGVi_ygWZb0EWR_EeMFzgKJCQ8AFTQI7Ck6iiIPItI&m=5w1dz0O5koIdTaoengeQSU9RdbNI2u2b2Q0Z9q9gQQo&s=ndFeJ33zb17jAMTcHzgFEt6rXUljt7bDCVs2aXXceFA&e=>]
[Blog<http://thesystemsmonkey.wordpress.com/>]
--------------------------------------------
"The difficult we do at once. The impossible takes a little longer."
-US Army Corps of Engineers
"It is better to have less thunder in the mouth and more lightning in the hand."
-Apache Proverb
I will rise when I have fallen.
"Unless you try to do something beyond what you have already mastered, you will
never grow."
-Ralph Waldo Emerson
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be
used for urgent or sensitive issues
________________________________
CONFIDENTIALITY NOTICE: This email contains information from the sender that
may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected
from disclosure. This email is intended for use only by the person or entity to
whom it is addressed. If you are not the intended recipient, any use,
disclosure, copying, distribution, printing, or any action taken in reliance on
the contents of this email, is strictly prohibited. If you received this email
in error, please contact the sending party by reply email, delete the email
from your computer system and shred any paper copies.
Note to Patients: There are a number of risks you should consider before using
e-mail to communicate with us. See our Privacy & Security page on
www.henryford.com<http://www.henryford.com> for more detailed information as
well as information concerning MyChart, our new patient portal. If you do not
believe that our policy gives you the privacy and security protection you need,
do not send e-mail or Internet communications to us.
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be
used for urgent or sensitive issues
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be
used for urgent or sensitive issues
**********************************************************
Electronic Mail is not secure, may not be read every day, and should not be
used for urgent or sensitive issues
