Posts

INCREASE SCANNER TIMEOUT FROM SECURITYCENTER CLI

INCREASE SCANNER TIMEOUT FROM SECURITYCENTER CLI Increasing your Time Out for the scanners (OS command line): ----------------------------------------------------------------------------------- # /opt/sc4/support/bin/sqlite3 /opt/sc4/application.db "select * from Configuration where name='ScannerStatusTimeout'" This will show the value (it should be 120 seconds by default)  To increase it, run following command: # /opt/sc4/support/bin/sqlite3 /opt/sc4/application.db "Update Configuration set value='840' where name='ScannerStatusTimeout'" This will increase the timeout to 14 minutes. After this, update the status of the scanners (on the Resources -> Scanners page hit the options button in the upper right) and give it about 25 minutes to see if it goes through.   Do not set this higher than 15 minutes or the scanner may get stuck in an "updating" loop. 

SCCM 2012 Client Certificate (PKI) Value is None

Operating system deployment slowness at remote sites.

Image
Up until last week Task Sequence was taking approximately 9 hours to finish the image at remote sites; now it’s taking a little less than 2 hours. Below is the detailed explanation of the issue and the fix. While checking the SMSTS.log and DataTransferService.log logs on TEST001 (Testing machine) (this one took 9 hours to finish), I found out that the packages and applications were getting downloaded from One of the Primary site (PRI01). We wanted all the packages and applications to be downloaded from Remote distribution point ( RDP01 ) as this server is local on remote network (RN01) and has all the required packages/applications. I looked at the boundaries on PRI02 site (RDP01 belongs to PRI02) and everything was correct. I tried to redistribute packages, delete and re-add the boundary and boundary group for Remote office, but none of these fixed the issue. After struggling for a bit, I decided to check the boundary on PRI01 site.  When I connected to PRI...

Creating Chrome extension package in SCCM 2012

Last month I was asked to create an SCCM package for chrome extension -  'RingDNA'  (Intelligent dialer for salesforce) .  Well , at first place , it looks stupid, creating an package for chrome ext. which is just one click away installing from chrome web store, anyways , I still gave a try. Steps:- 1. First of all, I downloaded the .crx file using this  Chrome Extension down loader  -  http://chrome-extension-downloader.com/ 2. In the Registry, I created a new key under the  Extensions  key with the same name as the ID of your extension. If you don't know the ID, follow these steps to note the ID-             a) Install the required extension manually             b) Open settings from chrome  menu bar > click on  Extensions > enable  developer mode                          from top righ...

How Symantec disabled Corporate Wifi on some of the machines.

Image
Issue - Today , some laptop users started reporting as they are unable to connect to corporate wireless after System Center Endpoint protection(SCEP) installation took place. I found, most of the laptop users were having this issue.  Troubleshooting done - I immediately uninstalled SCEP but that didn’t help , tried removing Wi-Fi profiles under the path ‘C :\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\ Interface’ but that didn’t help too. Error - When checking event viewer, the only error that showed up is as follows 5 times in a row.          “Error skipping EAP method DLL path name validation failed. Error: typeId=25, authorId=0,vendorId=0,vendorType=0”, This error indicates a registry or missing corrupt file issue. ‘ EAPHost is a Microsoft Windows Networking component that provides an Extensible Authentication Protocol (EAP) infrastructure for the authentication of following protocols such as   802.1X   ...

Error message when you try to install a SQL Server 2008/2008 R2 SP3: “The NT service 'MSSQLSERVER' could not be started

Image
Issue - We encountered an issue while working on a SQL 2008 R2 SP3 Installation. While running SP43 setup files suddenly a window populated with message . Error Message – “SQL Server has encountered the following error: The NT Service: MSSQLSERVER could not be started, error code 0x884B20001” Troubleshooting done – 1.      Some blogs were suggesting, it’s a permission issue, immediately we logged in to the server with different admin account and tried to install SP3 but it threw the same error. 2.      When we checked the “installed updates” under “ programs and features” , we found that SP3 got installed. We tried to remove installed components of service pack 3 but again it was giving “Access Denied” error. 3.      We tried to repair SQL instance but again we came across “Access Denied” error. 4.      We checked the summary.txt (C:\Program Files\Microsoft SQL Server\100\Setup...

Troubleshooting Frequent Account lockout

Image
Most of the users account will get locked from locally desktops and Mobile devices or idle sessions left on Server / workstation, We need to start Account lookout troubleshooting from below order. Client side troubleshooting Mobile devices Server side   troubleshooting Client side Perform the below steps on client side (Local desktop / Laptop) Clear Temporary Files Delete Cookies ->Temp Files -> History -> Saved passwords -> Forms from all the Browsers. Start — > Run –> Temp –> Delete all temp files. Start –> Run –> Prefetch –> Delete all Prefetch files. Remove Mapped drives from my computer.  My Computer –> Right click on Shared drive –> click on Disconnect If Adobe reader is installed, backend it will be trying to check for latest update, Delete the Adobe updater file from below path. Delete the AdobeUpdater.dll file in the folder C:\Program Files\Adobe\Reader version \Reader Remove stored passwords from Contro...

Unable to connect to Wireless profile being pushed using GPO

Image
Today , some laptop users started reporting as they are unable to connect to ‘Wireless profile’ after SCEP installation has taken place. I found, most of the laptop users were having this issue. I immediately uninstalled SCEP but that didn’t help , tried removing Wi-Fi profiles under the path ‘C :\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\ Interface’ but that didn’t help too. Error - When checking event viewer, the only error that showed up is as follows 5 times in a row.          “Error skipping EAP method DLL path name validation failed. Error: typeId=25, authorId=0,vendorId=0,vendorType=0”, This error indicates a registry or missing corrupt file issue. ‘ EAPHost is a Microsoft Windows Networking component that provides an Extensible Authentication Protocol (EAP) infrastructure for the authentication of following protocols such as   802.1X   and   Point-to-Point (PPP). Cause - Symantec didn’t uninsta...

Half of clients report: MP has rejected registration request due to failure in client certificate - SCCM 2012 R2

Image
Reference -  http://windowsitpro.com/security/q-there-easy-way-automatically-re-enroll-certificate-holders-received-certificate-old-ca-ne https://social.technet.microsoft.com/Forums/en-US/8d98726d-4f8f-4866-a91a-724c4ffbfdd1/mp-has-rejected-registration-request-due-to-failure-in-client-certificate   Recently we moved our Certification Authority to Windows Server 2012 , subsequently migrating hashing algorithm from sha1 to sha2. After some days we started witnessing above issue on SMS_MP_Control_Manager componet. Even though we had replaced the New Root CA cert on sccm site settings. Error:-  MP has rejected registration request due to failure in client certificate Solution :-  All ConfigMgr certificates and machine certificates on clients were supposed to re-enrolled.  To force all holders of a particular certificate to automatically enroll for a replacement certificate issued by a CA , used the Reenroll all Certificate...

How to Enable Multiple Concurrent User in Remote Desktop Windows 7

Links: 1.  http://forum.sambapos.com/t/step-by-step-on-how-to-configure-multiple-concurrent-rdp-clients-to-run-sambapos-iphone-ipad-galaxy-tablet/769 2.  http://www.nextofwindows.com/how-to-enable-multiple-concurrent-user-in-remote-desktop-windows-7/

MP has rejected registration request due to failure in client certificate

Image
Issue:- We have System Center Configuration Manager 2012 R2 deployed on Windows Server 2008R2 host. Recently we have moved our Certification Authority to Windows Server 2012 , renewed Root CA Certificate and intermediate Certificates also migrated Hashing algorithm from 'sha1' to 'sha2'  . New Root CA and intermediate CA also present on client machines and on SCCM. However, i have discovered these errors on MP: MP has rejected registration request due to failure in client certificate (Subject Name: ) chain validation. If this is a valid client ,  Even though Newly imaged machines are getting SCCM client installed but won't see all the client cycle under 'Actions tab' and also  'client certificate shows "None".  The operating system reported error 2148204809: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.  Solution:- Register  new Certificate of Root CA    under SCCM20...

The task sequence cannot be run because the program files cannot be located

Image
When starting deployment on Site servers deployment fails with the following error:  Failed to run Task sequence . The task sequence cannot be run because the program files for ******** cannot be located on a distribution point. For more Information, contact your System Administrator or Helpdesk Operator. Check following steps to troubleshoot the issue: -Check if boundary groups are connected to site servers and boundaries are set -Redistribute and Validate the ConfigMgr client package on multiple site servers (multiple times) -Check if VLAN communication is working on security, firewall and access control list The following errors are seen in SMSTS.log -Content location request for PR100003:3 failed. (Code 0x80040102) -Failed to resolve PackageID=<?> -Failed to resolve selected task sequence dependencies. Code(0x80040102) -ThreadToResolveandExecuteTaskSequence failed. Code(0x80040102) Reference  : http://henkhoogendoorn.blogspot.in/2015/04/the-ta...

How to Issue A certificate in Certificate Authority server?

Image
How to Issue A certificate in Certificate Authority server? 1) Start MMC Tool Click Start -> Run -> Entry MMC and click 'OK' 2) Click File -> Add/Remove SnapIn... 3) Add Certificate Authority Select 'Certificates Authority' in left panel and click 'Add' to move to right panel , Then Click 'OK' 4) Click Next 5) Issue The Certificate A. Expand 'Certification Authority' Node; B. Expend 'DBM-CA' C, Click 'Pending Requests' B. In right panel, Right click Request ID -> Issue. 6) Done Now you can Install certificate from http://*.*.*.*/certsrv

RPC Server Unavailable trying to connect to CA

Issue -  Unable to connect to a CA using certificate authority console. Description   - Recently, we build up a new Standalone CA. We wanted to delegate  'cert issuing' task to Help desk Team but whenever we were trying to connect to this CA console using desktop CA console, we were encountering below error. Along with above issue, neither of us were able to connect to any of the services like connecting to C drive, remote registry etc.  Error  - RPC Server Unavailable error 0x6a (WIN32: 1722) Tried  - 1. Tried disabling 'windows firewall', didn't work             2.  Tried starting remote procedure call locator service, did not work.             3.   Sometimes event 13 with "Server RPC is unavailable" means “access is denied”. A possible cause of this issue is that one of the following objects is not added to the Built-in\Users group: ...

Event Log Notification via PowerShell and Task Scheduler

Reference  -  http://www.experts-exchange.com/articles/12237/Event-Log-Notification-via-PowerShell-and-Task-Scheduler.html http://sharepointjack.com/2013/powershell-to-send-an-email-when-something-happens-in-the-event-log/ http://powershell.com/cs/forums/t/6485.aspx

How to Enable Notifications for Pending Certificate Requests

Reference -   http://www.expta.com/2012/07/how-to-enable-notifications-for-pending.html http://blogs.technet.com/b/jhoward/archive/2010/06/16/getting-event-log-contents-by-email-on-an-event-log-trigger.aspx

Clients Unable to update - "Cached cookie has expired or new PID is available"

Issue  -   Recently we started witnessing  that one of the site clients ( specifically servers) were unable to install updates.  the Client is unable to communicate to the WSUS Server.  nothing shows in software Center. It gives soap, cookie, and sync errors. We're currently using SCCM 2012 R2 Error -   windowsupdate.log: 2011-10-27 00:11:06:391  808 9b8 PT WARNING: Cached cookie has expired or new PID is i 2011-10-27 00:11:06:391  808 9b8 PT Initializing simple targeting cookie, clientId = , target group = 000-IB Produkcija, DNS name = 2011-10-27 00:11:06:391  808 9b8 PT   Server URL =  http://wsus-zga/SimpleAuthWebService/SimpleAuth.asmx 2011-10-27 00:11:06:485  808 9b8 PT WARNING: GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200 2011-10-27 00:11:06:4...