Hi Experts, I am sorry to express my dissatisfactions with my SCE 2007 SP1 which never worked for me in its best. I have multiple problems with this product after I install it about 1 year ago. If anyone can help me to resolve this, I would be really glad. Back ground: I installed SCE SP1 in a virtual server on Windows 2003 and all my system files and express edition of database in just on drive (C:\ ) which might be a mistake for performance issue only but it should work properly. I have only XP workstations, some are with SP2, some with SP3 with office 2003 Problems: I have 3 groups of workstations scenarios; One group is working fine. I have some computers, which are showing this computer has not been contacted yet. I have another group of computer which are not showing this errors (Health: OK, Management Status: OK etc) but Installed Software is showing: Unknown. I cant deploy any software on this group of workstations. What I have done so far: I check the regedit and find WUServer - https://<SCEServer>:8531 WUStatusServer - https://<SCEServer>:8531AcceptTrustedPublisherCerts - 1 I have done wuauclt.exe /detectnow I have done wuauclt.exe /reportnow I have done gpupdate /force Uninstall agents and reinstall I have no luck so far. I have already reinstalled this server two times but every times different problem. Please dont suggest me to re-install it one more time. I am hopeful that some one can help me

Hi,1. Check whether the required ports for communication between clients and server had been opened, or disable the firewall as a test. 2. Is there a proxy server in your scenario? If not, please ensure there is no proxy setting in IE and run proxycfg -d (netsh winhttp reset proxy in vista)command on problematic SCE clients.3. Run wuauclt /detectnow and reportnow on the SCE agents.4. Check if you can browse https://<SCEServerFQDN>:8531/simpleauthwebservice/simpleauth.asmx correctly on SCE agent.HTH. Jie-Feng Ren - MSFT

Hi Jie, Thanks for your reply. I believe the communication port between client and server is 8531, which is open by group policy for every one.I don't have nay proxy server in my scenarioI run wuauclt /detectnow and reportnow on SCE agents, nothing changed. Yes, I can brouse https://server-sce.nps.qum:8531/simpleauthwebservice/simpleauth.asmxI use Dell PC (Optiplex- L170, 755,760 etc),None of the new computers areworking with SCE only thealreadydeployedPCs (some) are working correctly.I know when I have SCE, I don't need to worry about WSUS server even though WSUS install in the same server with SCE. I have checked WSUS console and find all problematic compuers are not showing in All XP Clients group. I found them in another group where all pcs are showing "This pc has not reported status yet" message. Should SCE and WSUS need to be synchronized or someting else?

Hi,Perform following steps on problematic clients:1).Click Start, click Run, type cmd in the Open box, and then click OK.2).At the command prompt, type net stop wuauserv, and then press ENTER.3).Click Start, click Run, type regedit in the Open box, and then click OK.4).Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate5)In the right pane of Registry Editor, delete the following registry entries: PingID AccountDomainSid SusClientId6) Quit Registry Editor. 7) At the command prompt, type net start wuauserv, and then press ENTER.8) At the command prompt, type wuauclt.exe /resetauthorization /detectnow, and then press ENTER. 9) Wait 10 minutes for a detection cycle to finish.If the problem still persists, please help us colloct needed information:1. On a problematic client, stop the Automatic Update service via services.msc.2. Rename the windowsupdate.log (under %windir%) to windowsupdate1.log, and then start the Automatic Update service.3. Run wuauclt /detectnow command.4. Wait for 10 minutes and then run wuauclt /reportnow command.5. We will get a new %windir%\windowsupdate.log file.please send windowsupdate.log to scedata@microsoft.com for further research.HTH.Jie-Feng Ren - MSFT

Hi Jie, Sorry I am having trouble to find two entries in registry, PindID and AccountDomainSid but I have found SusClientID and SusClientIdValidation. I have justdeleted SusClientId and completed your instruction. When I went to check that SusClientID was generated or not, I found the value is still emply. I try the next part and I already email to you with two log file, which are from my two different problematic clients group. Thanks

Hi,First, does these clients from the clone image?From the logs you send, I find following error message:WARNING: GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200I would recommend to perform following trobleshooting steps:1. Excluded the Software distribution folder from the Antivirus scanning on problematic clients.2. Refer to KB article below to install hotfix:954960Some computers do not receive updates from the WSUS serverhttp://support.microsoft.com/default.aspx?scid=kb;EN-US;954960Also, you can try to reinstall a problematic client to to see if the problem remain.HTH.Jie-Feng Ren - MSFT

I am excited to believe that I am close to end my long disappointment with SCECertainly I will follow your suggestion and let you know I am not very clear how to follow your first advice which is "Excluded the Software distribution folder from the Antivirus scanning on problematic clients"Can you please give me some advice.Thank you

It would really depend on your AV software. I work with CA's eTrust software and in my configuration I get a tree of directories to scan and protect that I can define in the configuration client I push out to all my clients. In my instance I would simply uncheck that directory. Your client may differ so the best way to approach that would be to simply do a search in the HELP section for directory exclusions or something like that. Then push those updates to all the applicable clients in your enviroment.

Sorry, I am in a very mass situation witheverything. I will follow your instruction and let you know soon.Thanks verymuch.

Sorry I am late. I checked my SCE but unable to find Office 2003 Service Pack 1 update with ID D359F493-0AAD-43FA-AF5C-6763326CD98F. So I don't have anything to Decline. Please tell me what should I do?

Can anyone tell me how to check current Region and Language setting on the WSUS server?

My KB954960 update failed with the following errorEvent Type:ErrorEvent Source:MsiInstallerEvent Category:NoneEvent ID:1024Date:8/07/2009Time:5:24:16 PMUser:NPS\mkhanComputer:SERVER-SCEDescription:Product: Microsoft Windows Server Update Services 3.0 SP1 - Update '{288B5E1C-79F5-4EEE-8C9E-998BE68F472F}' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127 For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.Data:0000: 7b 32 43 30 44 37 45 33 {2C0D7E30008: 35 2d 45 45 36 45 2d 34 5-EE6E-40010: 44 43 37 2d 42 41 31 33 DC7-BA130018: 2d 32 43 36 38 41 45 44 -2C68AED0020: 45 42 35 39 44 7d 20 7b EB59D} {0028: 32 38 38 42 35 45 31 43 288B5E1C0030: 2d 37 39 46 35 2d 34 45 -79F5-4E0038: 45 45 2d 38 43 39 45 2d EE-8C9E-0040: 39 39 38 42 45 36 38 46 998BE68F0048: 34 37 32 46 7d 20 31 36 472F} 160050: 30 33 03 Help please

Hi,Open WSUS console and go to options page. Click on "update files and languages" and you can check current update languages. Stop automatic update and rename the %windir%\softwaredistribution folder. Then, start automatic update service to see if update can be installed. Btw, as this problem is different from original, I suggest you can open a new thread if this problem still persists. We can discuss it at there.Thanks. Jie-Feng Ren - MSFT

Thank you Jie, I check current update languages. Stop automatic update and rename the %windir%\softwaredistribution folder. Then, start automatic update service to see if update can be installed but it failed again with following error. As per your advice, I open a new trread onhttp://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/c5e72446-bed4-4dfb-b4be-a66b83037b29By the way I have some Critical Active Alerts on my SCE serverDo you think that these are directly related to my problems? -----------------------------------------first Alert Context: ------------------ < DataItem type =" System.CorrelatorData " time =" 2009-07-09T07:55:29.9290513+10:00 " sourceHealthServiceId =" FE6723E9-B788-8036-536A-93C98A712314 " > < Item0Count > 1 </ Item0Count > < Item0Context > < DataItem type =" Microsoft.Windows.EventData " time =" 2009-07-08T21:48:27.0000000+10:00 " sourceHealthServiceId =" FE6723E9-B788-8036-536A-93C98A712314 " > < EventOriginId > {34E78663-1570-42FB-A0F5-D8EE4B0DD6E2} </ EventOriginId > < PublisherId > {277B44B0-22D2-677B-9E33-9625B8B5C0D2} </ PublisherId > < PublisherName > OpsMgr Config Service </ PublisherName > < EventSourceName > OpsMgr Config Service </ EventSourceName > < Channel > Operations Manager </ Channel > < LoggingComputer > SERVER-SCE </ LoggingComputer > < EventNumber > 3221254672 </ EventNumber > < EventCategory > 0 </ EventCategory > < EventLevel > 1 </ EventLevel > < UserName > N/A </ UserName > < RawDescription > OpsMgr Config Service has lost connectivity to the OpsMgr database, therefore it can not get any updates from the database. This may be a temporary issue that may be recovered from automatically. If the problem persists, it usually indicates a problem with the database. Reason:%n%n %1 </ RawDescription > < LCID > 3081 </ LCID > < Params > < Param > A connection was successfully established with the server, but then an error occurred during the login process. (provider: Shared Memory Provider, error: 0 - No process is on the other end of the pipe.) </ Param > </ Params > < EventData /> < EventDisplayNumber > 29200 </ EventDisplayNumber > < EventDescription > OpsMgr Config Service has lost connectivity to the OpsMgr database, therefore it can not get any updates from the database. This may be a temporary issue that may be recovered from automatically. If the problem persists, it usually indicates a problem with the database. Reason: A connection was successfully established with the server, but then an error occurred during the login process. (provider: Shared Memory Provider, error: 0 - No process is on the other end of the pipe.) </ EventDescription > </ DataItem > </ Item0Context > < Item1Count > 0 </ Item1Count > < Item1Context /> </ DataItem > ------------------------Second Alert name: Silent ClientsAlert Context: Date and Time: 8/07/2009 5:35:42 PM Description: Log Name: Application Many client computers have not reported back to the server in the last 30 days. 65 have been detected so far. Source: Windows Server Update Services Event Number: 13032 Level: 1 Logging Computer: SERVER-SCE User: N/A Event Data:----------------------Third Alert Name: Agemt proxying needs to be enabled for a health service submit discovery data about otherAlert Conctext: Date and Time: 3/07/2009 11:45:45 AM Description: Log Name: Operations Manager Data Access Layer rejected retry on SqlError: Request: p_ManagedEntityInsert -- (BaseManagedEntityId=42955827-dd13-e17a-6fd8-0fc7912d457d), (TypedManagedEntityId=42955827-dd13-e17a-6fd8-0fc7912d457d), (ManagedTypeId=3192133d-e867-eeed-7c8e-99b8091a7357), (FullName=Microsoft.Windows.Computer.IPSubnetMembership:255.255.255.0,;0.0.1.0), (Path=255.255.255.0,), (Name=0.0.1.0), (TopLevelHostEntityId=b8a7eaa8-80d7-bdaa-2499-645250038380), (DiscoverySourceId=93735c53-a418-ad4a-6963-b2f2cd56a260), (HealthServiceEntityId=6fd48c57-c26b-68b1-c693-9bc848108be8), (PerformHealthServiceCheck=True), (TimeGenerated=3/07/2009 1:45:22 AM), (RETURN_VALUE=1) Class: 16 Number: 777980008 Message: Health service ( 6FD48C57-C26B-68B1-C693-9BC848108BE8 ) should not generate data about this managed object ( 42955827-DD13-E17A-6FD8-0FC7912D457D ). Source: DataAccessLayer Event Number: 33333 Level: 2 Logging Computer: SERVER-SCE User: N/A Event Data: ------------------------------------------------Forth Alert Name: OleDB: Results ErrorAlert Context: Date and Time: 8/07/2009 9:28:29 PM Description: Log Name: Operations Manager OleDb Module encountered a failure 0x80004005 during execution and will post it as output data item. Unspecified error Workflow name: Microsoft.SystemCenter.SqlBrokerAvailabilityMonitor Instance name: SERVER-SCE.nps.qum Instance ID: {FE6723E9-B788-8036-536A-93C98A712314} Management group: SERVER-SCE_MG Source: Health Service Modules Event Number: 11852 Level: 2 Logging Computer: SERVER-SCE User: N/A Event Data: --------------------------------------------------------

Hi all, My Problem partly resolved. I managed to run Workaround and most of my computers (not all) are communication with my SCE server 954960Some computers do not receive updates from the WSUS serverhttp://support.microsoft.com/default.aspx?scid=kb;EN-US;954960 But I still some more trouble clients. Some are showing Management: Error, some are showing Not Yet Contacted

I had this issue with a couple of my clients. Here is what I did to resolve the issue.On clients in the building I went and manually installed the Agent. Then I chose to modify the the install and removed the management group that it was pointing to and then added it back. Then a couple of hours later the agent started reporting. It took about 24 hours for SCE to get the full details of the computer and it's inventory. I'm not sure if this will work for you but it's worth a shot.

Thanks Jonathan_C,Currently I am testingtwo clients by uninstalling and reinstalling the management software. I will leave those overnight to see the result.I have notice some comptuers health serveris not working orshowing amber.

After you reinstall the agent launch the setup again and do a modify. Make sure it's pointing to the right management group.

I reinstall agent but I still have same problem. how to check what management group the client into?

If you run the manual setup for the agent you should have the option to Modify. When you modify the install you will see the current management groupt the client is reporting to. If the inital value is not the correct group select remove and answer yes. It will then complete the setup. Then go back preform the same steps and verify you have the correct management group.

I have done manual client installation and make sure that I have the correct Management group. I have restarted, run wuauclte.exe /detectnow and wuauclt.exe /reportnow but I am still having same problem. I have very simple installation with a single management package but I am having lots of problem with lots of clients. I use the following, Management Group name: Server-SCE_MGManagement server: Serer-SCE.xxx.xxManagement Server Port: 5723