Agent installation failure
Agent installation failure. Part of the domain's workstations installation succeeded part not. Only in three Winxp workstation the installation works but in 70 not. In all win2000 workstations and all servers (win2000,win2003 win2008!) are working too. I've done the group policies (win update and win firewall) yesterday. DNS is working too.
Error message:
The MOM Server could not execute WMI Query "Select * from Win32_OperatingSystem" on computer workstation.domain.xx.
Operation: Agent Install
Install account: domain\Administrator
Error Code: 80010002
Error Description: Call was canceled by the message filter.
I couldn't find any helptogo on??
May 15th, 2008 1:46pm
Hi,
Check following to nail down the cause:
1. Can you connect to \\<target client>root\cimv2 namespace and run this query manually using wbemtest commandfromSCEserver?Can you do the same thing across the network from another box to the affected machine? The detailed steps is below:
1). Log on to the SCE server with the domain\administrator account2). Start run wbemtest.exe3). Click on Connect4). In the Namespace box, enter \\<computername>\root\cimv2 and click on Connect, where the computername here is the target problematic computers name.5). Click on Query6). In the query box, enter Select * from win32_operatingsystem (without quotation) and click on Apply.
2. Any chance these machines have something like a Checkpoint VPN client installed? Or any other software like anti-spyware/firewall that might prevent remote access to WMI?
3. Is the machine running Windows Firewall? Try to disable firewall temporarily.
4. DNS. From the SCE server can you ping the client byfqdnand does it also response the same when you ping -a the IP address? From the agent machine - perform the same test for the SCE server.
5. FromSCE server- can you access the agent machine via net use and remote registry? such as run eventvwr command to connect a remote affected client to view eventlog.
Hope this helps.
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2008 8:52am
Hi,
You were right, the answer was Checkpoint VPN. The workaround was to install Agent locally or uninstall VPN.
Thank you very much for you Help.
Kari Malinen
May 27th, 2008 9:38am
To elaborate for anyone else that may be looking for the same error:This occurred with CheckPoint's SecureClient version R60 HFA1. WMI queries from the 2003 server or a Vista desktop to a machine running this version would fail. The same WMI queries from an XP machine to the same workstation were successful. As a test, the Check Point VPN-1 Securemote service and the Check Point VPN-1 Securemotewatchdog service was disabled and the binding was removed from the NIC. WMI queries were successful. Re-established the bindings, started the services, and remote WMI queries broke in the same manner. Uninstalled R60 HFA2, installed R60 HFA2, and WMI queries work fine.I was able to install the agent remotely with no real problems. So, the problem seems to be resolved in R60 HFA2. Hope this saves someone the time I spent tracking this down.
Free Windows Admin Tool Kit Click here and download it now
June 23rd, 2009 9:05pm