AD system discovery question/issues
Question #1 is about my Active Directory System Discovery in my SCCM 2007 SP2 environment. All roles are contained on the same server except the Fallback status point. How are DDRs created? What are the specific conditions that need to be met for a DDR to be created? Does a computer have to be online to be able to have a DDR created?Question #2 is also about my Active Directory System Discovery in my SCCM 2007 SP2 environment. I receive the following warning in my ConfigMgr Status Message Viewer below. I have 2700 DDRs already created but there are many computers that do not have DDRs. Some are currently connected to the network and some are laptops that are currently offline.---------------------------------------------------------------------------------------------------SMS Active Directory System Discovery Agent reported errors for 19530 objects. DDR's were generated for 0 objects that had errors while reading non-critical properties. DDR's were not generated for 19530 objects that had errors while reading critical properties.
Possible cause: The SMS Service might not have access to some properties of this object. The container specified might not have the properties available.Solution: Please verify the Active Directory schema for properties that are not replicated or locked. Refer to the discovery logs for more information.---------------------------------------------------------------------------------------------------I then check the "adsysdis2.log" and see the following:
INFO: discovered object with ADsPath = 'LDAP://DC1.xx.edu/CN=ig05,OU=IG,OU=Library,OU=LABS,OU=Workstations,DC=xx,DC=edu'~ $$<SMS_AD_SYSTEM_DISCOVERY_AGENT><Mon Feb 22 15:00:32.516 2010 Central Standard Time><thread=4568 (0x11D8) ERROR: GetIPAddr - getaddrinfo() for 'IG05.workstations.xx.edu' failed with error code 11004. $$<SMS_AD_SYSTEM_DISCOVERY_AGENT><Mon Feb 22 15:00:32.523 2010 Central Standard Time><thread=4568 (0x11D8)ERROR: Machine ig05 is offline or invalid.~ $$<SMS_AD_SYSTEM_DISCOVERY_AGENT><Mon Feb 22 15:00:32.526 2010 Central Standard Time><thread=4568 (0x11D8)>
--------------------------------------------------------------------------------------------------This computer is online and I can ping it from the Management Point. Why isn't there a DDR being created and why is this error occuring in the log?
February 23rd, 2010 12:42am
1. The computer has to have an active (not disabled) account in AD and it has to resolve to an IP address. It does not have to reply.2. GetIPAddr - getaddrinfo() for 'IG05.workstations.xx.edu' failed with error code 11004 sounds to me like IG05 does not resolve to an IP in DNS but that just a guess. When you say you can ping it are you pinging it via the FQDN exactly as displayed in the log?Number 2 sounds like a DNS issue to me.Check out this posthttp://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/c1541eca-a162-4273-b217-862810f29a21John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2010 5:59am
This link gives you idea about DDR.http://technet.microsoft.com/en-us/library/bb633103.aspx
February 23rd, 2010 1:58pm
Thanks for the info. That helped me locate the problem. After looking at DNS I found that computers in certain vlans are not registering in DNS because the person in charge of DHCP disabled some of the scopes. That will need to be addressed.
Free Windows Admin Tool Kit Click here and download it now
February 25th, 2010 12:27am


