A couple of computers are failing to contact the internet MP and get policy after being on an internet-only connection for a day or so. Other machines on the same connection are not having that issue. When machines are on the internet they usually display Client certificate: PKI in the configuration manager properties windows. However one of those two machines shows Client certificate: self-signed and the other Client certificate: none. They both have the machine certificate issued through GPO just like the others and looks like it's installed by looking at the certificates mmc snapin view. Any ideas what might be the issue or how to troubleshoot it? I can open https://%MPFQDNHERE%/ccm_system/request with no issues (though of course i get access denied when the page opens afterwards which is expected)

Have you tried to reissue the client cert and reinstall the sccm client. seems lilke the cloient is not installed properly or not receving its policies...

Hi,

I think you could start from here:

A closer look at Internet Based Client Management in ConfigMgr 2012

http://blogs.technet.com/b/configurationmgr/archive/2013/12/11/a-closer-look-at-internet-based-client-management-in-configmgr-2012.aspx