Hi all,

I am new to the Side loading of apps in the configuration manager. I tried to load an inhouse app which was designed by one of our developer but it gave a cert error.

What i did :-

1. Sat with the developer & build a package of the app using Visual Studio 2013.

2. Created an Application package in SCCM with the appx file in the package & deployed it to a windows 8 machine.

Error in AppEncore.log file :-

<![LOG[    In-line script returned error output: Add-AppxPackage : Deployment failed with HRESULT: 0x800B0109, A certificate chain processed, but terminated in a root
certificate which is not trusted by the trust provider. (Exception from HRESULT: 0x800B0109)
error 0x800B0109: The root certificate of the signature in the app package must be trusted.
NOTE: For additional information, look for [ActivityId] 4e0657f8-fc2c-0000-7f93-074e2cfcce01 in the Event Log or use
the command line Get-AppxLog -ActivityID 4e0657f8-fc2c-0000-7f93-074e2cfcce01
At C:\Windows\CCM\SignedScripts\InstallWindows8App.ps1:13 char:9
+         Add-AppxPackage -path $AppPath -ev err
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (C:\Windows\ccmc...0.7_AnyCPU.appx:String) [Add-AppxPackage], Exception
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand
 
]LOG]!><time="23:46:51.782+480" date="12-17-2013" component="AppEnforce" context="" type="2" thread="2112" file="appexcnlib.cpp:1019">
<![LOG[Script Execution succeeded but script returned error Add-AppxPackage : Deployment failed with HRESULT: 0x800B0109, A certificate chain processed, but terminated in a root
certificate which is not trusted by the trust provider. (Exception from HRESULT: 0x800B0109)
error 0x800B0109: The root certificate of the signature in the app package must be trusted.
NOTE: For additional information, look for [ActivityId] 4e0657f8-fc2c-0000-7f93-074e2cfcce01 in the Event Log or use
the command line Get-AppxLog -ActivityID 4e0657f8-fc2c-0000-7f93-074e2cfcce01
At C:\Windows\CCM\SignedScripts\InstallWindows8App.ps1:13 char:9
+         Add-AppxPackage -path $AppPath -ev err
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (C:\Windows\ccmc...0.7_AnyCPU.appx:String) [Add-AppxPackage], Exception
    + FullyQualifiedErrorId : DeploymentError,Microsoft.Windows.Appx.PackageManager.Commands.AddAppxPackageCommand

How can we deploy the package & which are the certs i need, i checked the application package & there was a cert which was created when we built that.

Please suggest.

Thanks,

Pranay.

Hi all,

We want to install 40 applications with a Task Sequence using SCCM2012 R2.  We migrated 40 Packages to the “Application Model”. When we run the TS on Win7 and the application exitcode was 3010 we got a nice restart and the TS moved on to install the next application. With 40 apps we get approximately 16 reboots based on a 3010 exitcode. 16 reboots is too much!

So we build a wrapper and all the exitcode now are 0 within a TS so no restarts. But after the installation of APP-V 4.6 / .Net 4.5 / Powershell 3.0 / we want a reboot. When I select “Restart Computer – The currently installed default operating system” we get an error after the reboot: “Task sequence failed due to an external shutdown request received during the TS running” …

Environment: 

SCCM2012 R2 Server:

• Server 2008 R2 + SCCM 2012 R2  version 5.00.7958.1000 Build 7958

Clients

• Windows 7 SP1 Enterprise + SCCMClient version 5.00.7958.1000

LOGS

Smsts.log

• Error getting system isolation info. Code 8027000C
• Remediation failed. Code 8027000C
• Task sequence failed due to an external shutdown request received during the TS running
• Task Sequence Manager could not initialize Task Sequence Engine. code 80004005
• Task sequence failed due to an external shutdown request received during the TS running
• Task sequence execution failed with error code 80004005

Execmgr.log

• System task 'SMSSHA_Startup' returned error code 0x87d0027f

TSAgent.log

• nothing unusual

RebootCoordinator.log

• Retry resuming bit-locker TPM PIN protector. Retry count 1  RebootCoordinator  18-12-2013 6:36:46                       4032 (0x0FC0)
• Didn't suspended bit-locker. Do nothing and return.                   RebootCoordinator  18-12-2013 6:36:46                       4032 (0x0FC0)
• User S-1-5-21-3723389022-3858856549-556620252-238740 is getting pending reboot  information...                  RebootCoordinator  18-12-2013 6:37:12    3316 (0x0CF4)

Back to Basic > starting  TS with 2 simple actions:

1. “Restart Computer – The currently installed default operating system”
2.  RunCommandLine “CMD.exe /c  MD C:\BackFromR”

This is working fine!

Smsts.log Still some errors

• Failed to submit event to the Status Agent. Attempting to create pending event.
• Error getting system isolation info. Code 8027000C
• Remediation failed. Code 8027000C
• Remediation failed with error code 8027000C

How is it that a reboot initiated from the TS fails the TS?

Could it be that there are to many “PendingFileRenameOperations”?

Are there any actions that I need to do before or after the reboot action in the TS?

Do I really need 16 reboots….

Hi all,

I am an issue getting remote offices to pull packages (A task sequence) from their onsite DP. They keep pulling from the main DP in the datacenter.

How do I ensure the mainDP is not considured 'LOCAL' but it is 'REMOTE' and the local office DP is 'LOCAL'?

Here is my setup:

• SCCM 2012 with DP / MP set in Datacenter: mainDP
• 3 Offices up the country with local DP Server: OfficeDP1 / OfficeDP2 / OfficeDP3 (green under monitoring and my packages show as verified content) 
• SCCM Boundaries set via "AD Site". This matches our AD Structure. In AD Sites and Services, each site has a unique IPv4 addressing (AD Address Prefix: Office1 - 192.168.100.0/25 & Office 2 - 192.168.101.0/25 etc)
• Each SCCM Boundary has a boundary group that reflects the local office

The locationservices file on an office PC has:

• Current AD Site of machine is Office1
• Calling back with the following distribution points
• Distribution Point='http://mainDP/SMS_DP_SMSPKG$/PR10005D', Locality='LOCAL', DPType='SERVER', Version='7804', Capabilities='<Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities>', Signature='http://mainDP/SMS_DP_SMSSIG$/PR10005D', ForestTrust='TRUE',

-------------------

I would expect it to say http://Office1DP/SMS_DP_SMSPKG$/PR10005D

---------------------

This is how I configured my separate packages / programs:

Package A and Package B:

• Data Source Tab: disabled Binary diff replication
• Data Access Tab: nothing ticked
• Distribution Settings: ticked - distribute the content for this package to pref dist points

Program 1 and 2 respective config:

• Advanced tab: ticked - Allow this program to be installed...deployed

This is settings when the TS deployed agaisnt Device Collection

• Distribution Points Tab: Nothing ticked (no fallback configured nor use remote distribution point)
• Deployment options dropdown: Download all content locally before starting task sequence

----------------------------

This is the CAS.log file

• Location update from CTM for content PR10005D.4 and request {6637EBA8-A69C-4C96-940B-255EF1A45B3F}ContentAccess16/12/2013 19:04:154704 (0x1260)
• Download request only, ignoring location updateContentAccess16/12/2013 19:04:154704 (0x1260)
• Location update from CTM for content PR100063.4 and request {6637EBA8-A69C-4C96-940B-255EF1A45B3F}ContentAccess17/12/2013 07:45:343832 (0x0EF8)
• Download location found 0 - http://mainDP/SMS_DP_SMSPKG$/PR10005DContentAccess17/12/2013 07:45:343832 (0x0EF8)
• Download requestonly, ignoring location updateContentAccess17/12/2013 07:45:343832 (0x0EF8)

-------------------------

and then the CTM log file:

Nothing points to the local officeDP which has the content successfully distributed and verified against it.

Help

Thanks

Hello, I have created a deployment for Windows Internet Explorer 10. It is set as available. I can see it in the Software Center and install it on my PC with no issues.  The deployment is set to display in software center and show all notifications.

My trouble is that I'm not seeing any new software notifications and our company would really like to alert the users that there is new software available. Is there something that would prevent these notifications from happening or something that I'm overlooking?

sccmghost@hotmail.com

Having a strange issue with package distribution. On my new ConfigMgr 2012 install, I cannot distribute some packages. For example, the ConfigMgr client install, and both boot images are experiencing issues, but new packages I am creating, like OS install source, copy just fine (although they take a while due to package size).

I have a CAS and single primary, I'm making my admin console connection to the CAS, and I'm adding the primary site's distribution point (actually, a distribution point group that contains the distribution point, but I've tried both ways) to the package. I see on the primary site that it recieves notification of the package, but then says it hasn't recieved content from the CAS yet, so it'll wait. Meanwhile, the CAS logs the following snippet:

Sending a copy of package CAS00004 to site CHC	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)
The reporting site of site CHC is this site.	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)
Use drive C for storing the compressed package.	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)
CContentBundle::AddContentDefinitionItems failed; 0x80070003	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)
CDistributionManager::AddContentToBundle failed; 0x80070003	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)
CDistributionManager::CreatePackageBundle failed; 0x80070003	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)
Error creating package bundle to send copy of package CAS00004 to site CHC.	SMS_DISTRIBUTION_MANAGER	7/26/2012 7:55:26 AM	3600 (0x0E10)

There's also this in the SMS_Distribution_Manager summarizer:

-------------

Distribution Manager failed to process package "Boot image (x64)" (package ID = CAS00004).

Possible cause: Distribution manager does not have access to either the package source directory or the distribution point.
Solution: Verify that distribution manager can access the package source directory/distribution point.

Possible cause: The package source directory contains files with long file names and the total length of the path exceeds the maximum length supported by the operating system.
Solution: Reduce the number of folders defined for the package, shorten the filename, or consider bundling the files using a compression utility.

Possible cause: There is not enough disk space available on the site server computer or the distribution point.
Solution: Verify that there is enough free disk space available on the site server computer and on the distribution point.

Possible cause: The package source directory contains files that might be in use by an active process.
Solution: Close any processes that maybe using files in the source directory.  If this failure persists, create an alternate copy of the source directory and update the package source to point to it.

-------------

So, I assume the CAS is trying to create a package bundle locally - I know it has enough disk, over 10GB, I know it has permissions (as it's the local system), I don't believe this is an LFN issue, since it's a pre-created ConfigMgr package, and I'm pretty sure the images aren't in use right now. To rule out permissions issues, I've made the CAS and primary site computer accounts local admins of each other, so even if it is trying to copy across, it shouldn't be having any issues.

Has anyone else seen anything like this? It's pretty crippling, since I can't get my boot images to distribute properly. I've tried removing the content from the DP and re-adding, no luck. It's like I need to somehow reset the status of the package and get ConfigMgr to start over completely.

Thanks,

Andrew

Andrew Topp

sccmghost@hotmail.com

Hi,

I have created some applications in SCCM 2012 but they don't appear in the Software Center on the workstations/laptops. When clicking on "find additional applications from the application catalog" they do appear and i can install/uninstall them. When installing they appear in Software Center.

How can i solve this so they appear in the Software Center? Thnx!

Hello All--

I have a deployment setup for Java 7 Update 45.  I have two deployment types (x86 and x64). Each deployment type has a Windows Installer detection method set. I created a required deployment to 13+ test machines. Only two show this as 'Installed', the rest show 'Past Due - Will be retried' with error code 0x87D00324.  When I check AppEnforce.log, it shows a successful installation, but the next lines show 'Application not Detected'. All the machines are 32-bit.

Any thoughts/help would be much appreciated.

Thanks,
Matt

Hi all,

Looking for a bit of a hand with my first-time SCCM query.  The final query would be a bit different to the below, but for troubleshooting and simplicity I'm using the following until I get a sensible result.

Recently deployed Firefox to all vista and 7 clients in our company and want to find all clients where firefox is NOT installed.  Since my query was giving unexpected results I'm using a simpler query, which returns only my own PC for the moment; I have Firefox installed.

At first I created a query which would simply find my PC based on hostname and add it to the collection; this worked.  I then modified the query to say "AND ADD_REMOVE_PROGRAMS.DisplayName like "%Firefox%".  Here's the query:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SYSTEM on SMS_G_System_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_G_System_SYSTEM.Name = "MyPCHostname" and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like "%Firefox%"

Hey presto; my PC remains a member of the collection, as you would expect.

Next up I modify the query to state:

and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName not like "%Firefox%"

I refresh the collection membership and... my PC remains a member!  In the words of Chris Morris, "This is exactly what we did not want to happen".

I repeated the above with Google Chrome and same undexpected results happened, so I'm sure my query is at fault; could anyone guide me in the right direction?  A few key points:

• I'm certain the Add/Remove Programs display names are correct
• This is my first time messing around with these queries
• I followed advice steps from TechNet to build the query, but not sure if I'm using the "and" operator correctly, or if nesting of statements is required

Any help is appreciated, thank you.

Hi All,

I'm trying to add an existing Global Condition to an application deployment type via Powershell. The part I'm stuck at is running this command:

$app.DeploymentTypes[1].Requirements.Add($rule)
Cannot find an overload for "Add" and the argument count: "1".
At line:1 char:1
+ $app.DeploymentTypes[1].Requirements.Add($rule)
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodException
    + FullyQualifiedErrorId : MethodCountCouldNotFindBest

I'm assuming that means that I haven't selected/set my $rule properly. I tried using this command to assign $rule to an object using the Requirements on a different deployment type:
$rule = $app.DeploymentTypes.[0].Requirements

I've looked through the article here (gallery.technet.microsoft.com/SCCM-2012-Global-Condition-2b133101#content)and tried tweaking his scripts, but it seems like each time you Create the GlobalCondition you're making a new one; what I want to do is just assign an existing one. That way, if I need to modify all of the application deployment types using that one Global Condition I can change one and have it change for all that use that (i.e. if Windows 8.2 comes out, then I don't need to check the 8.2 box on all my deployment type requirements).

How do I select an existing GlobalCondition properly so that i can assign it using the command below?
$app.DeploymentTypes[1].Requirements.Add($rule)

Thanks a ton in advance!

Could someone of you help me to understand the software distribution flow in SCCM 2012 (Troubleshooting flowchart),

which includes the content library concepts..

sccmghost@hotmail.com

What we are having trouble with is some UNINSTALL packages that a previous company had built for us GoToMeeting, Reflections 14 and Automate Extra. We cannot figure out how to unistall these apps using SCCM.

Hi all,

I am migrating SCCM 2007 to SCCM 2012 SP1 CU3.

All my 1200 collections are migrated to SCCM 2012 and the incremental option is enabled on most of my collections (about 1100).

Now I found out that my collections are updating very very slow.....

I read an article that best practice is to enable a maximum of 200 collections with the incremental option.

So i ran a powershell script to disable this option on my collections....

Now it seems that collection updates are faster again...

Do I need to disable the incremental option on all collections and enable the schedule full update eg. very 30 minutes ?

I hope someone could share his experience with this....

SCCM 2012 SP1 - Win2k8 R2 - single primary site.

Applications that were deployed and successfully installed months ago are now reporting back as 0% compliant, despite actually being installed and functional on the endpoint(s). Over the past month ALL of our application deployments have dwindled down to 0%. Software Updates and Program deployments are still reporting accurately.

Seeing the following error messages being repeatedly logged in the InventoryProvider.log:

Failed in discovering instance. 
Invalid object (Error: 8004100F; Source: WMI) InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)
Failed to do HandleGetObjectAsync(). 
Invalid object (Error: 8004100F; Source: WMI) InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)
GetObjectAsync - Error handling request, 8004100f InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)
PopulateInstance - Requested instance not found. InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)
Failed in discovering instance. 
Invalid object (Error: 8004100F; Source: WMI) InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)
Failed to do HandleGetObjectAsync(). 
Invalid object (Error: 8004100F; Source: WMI) InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)
GetObjectAsync - Error handling request, 8004100f InventoryProvider12/11/2013 2:05:03 AM2200 (0x0898)

Also seeing the following error message on the Site Server:

Inventory Data Loader failed to process the file C:\Program Files\Microsoft Configuration Manager\inboxes\auth\dataldr.box\Process\HUYQSCMN.MIF because it is larger than the defined maximum allowable size of 10000000.    

Solution: Increase the maximum allowable size, which is defined in the registry key HKLM\Software\Microsoft\SMS\Components\SMS_INVENTORY_DATA_LOADER\Max MIF Size (the default is 5 MB), and wait for Inventory Data Loader to retry the operation.

Please advise as I am not sure if these errors are specific to the issue I am seeing or not.

Thanks.

Hi!

When i creating application for MSIs i set the command line to "Msiexec /i <MSIfile.msi> /q" but when i look in AppEnforce.log i see that SCCM add another /qn to the command line.

I suspect that it's the "Installation Program Visibility" property in the User Experience tab that does this.

So to my question, is this by design and should i omit /q to the command line and let SCCM add it after?

All my MSI applications looks like this.

This message appears when trying to install any application from the application catalog. The deployment User Experience has the Installation Behavior set to "Install for user". Log file PolicySdk.logshows "User policy is disabled on client" even though the agent Client Settings has "Enable user policy on clients" set to "Yes". Anyone has any recommendations on how to address this?

Currently using SCCM 2012 paired with Software Center on Windows 7/8.1 devices to deploy software to employees. Occationally, as is the case currently, I need to deploy software that requires certain frequently used apps to be closed during the installation process (Outlook, IE). The way I get around this requirement for laptops and tablets is to make the installation "Available" in SC, the downside with this approach is it can be difficult to get every user to run the install as some just don't pay attention to the initial email and notification from the System Tray.

Is there a way to configure an Available install so the user is notified that it is available for download everytime the log in, or at the very least every time I manually kick the Machine policy review for their machine from SCCM? I have a handful of machines that have had the initial advertisement come and go and still need the installation and I'd like to try a method like this as opposed to having to create a new deployment or make it required.

Any ideas will be appreciated.

Thanks,

-Adam