All - Anyone know if there's a hotfix for KB974571, which breaks USMT portion of SCCM's operating system deployment feature. This is currently a real pain in my side, because i've got about 300 machines that I need to migrate, which all have this patch installed :).. Thanks in advance for any help!Jonathan Kloza

Hi Jonathan, This is caused by an embedded NULL value in the certificate friendly name property of the SCCM client certificate. Then the MS security patch MS09-056 (KB 974571 ) block this SCCM client certificate when do the OSD task Request State Store. Before the cert fix tool is released, as a temporary solution you can manually correct the issue in existing certificates by the procedure below : 1. On a target agent, run "mmc.exe", click File> Add/Remove Snap-in, click Add, highlight the Certificates snap-in, and click Add. 2. In the Certificates snap-in dialog box, choose "Computer account", click Next, and click Finish. 3. Click Close to close the Add Standalone Snap-in dialog box, and click OK to close the Add/Remove Snap-in dialog box. 4. Browse to Certificates (Local Computer)> SMS> Certificates. You will have two certificates in the right pane -- SMS Encryption Certificate and SMS Signing Certificate. 5. Double-click to open one of the certificates, say SMS Encryption Certificate. 6. On the Details tab, click Edit Properties. 7. Edit the Friendly name to make it something like SMS Encryption Certificate1. 8. Click OK to close the two dialog boxes. 9. Double-click to open the certificate again. Edit the Friendly name back to SMS Encryption Certificate. Click OK to close the two dialog boxes. 10. Repeat the steps 5 - 9 on the other certificate. 11. Try the OSD again.

For automating my Windows 7 build outs in OSD, you aren't going to do all this manual stuff on each workstation... for now I just don't install that patch. ;) plus it breaks other stuff as well like OCS I think. Terry

There's been an update: http://support.microsoft.com/kb/977203 User state migration fails on a SCCM 2007 SP1 client or on a SCCM 2007 SP2 client after you install security update 974571

Thanks for letting us know. Terry

With Windows 7 SP1 seems 974571 is part of it. I get the same errors we saw on XP/Win7 RTM machines with 974571 installed. But now with SP1 and no 974571 installed, I see the same. The above manual steps fixes it so I know it must be built in.Jay Parekh Project Leadership Associates