I just installed SystemCenter Configuration Manager 2012 SP1 and I installed SCCM Client agent to Windows7 workgroup pc by manually.

Install looked like succeeded. Client icon appeared in SCCM Console. But client still shows modules only "installed" and there are only two actions. I waited three days, but nothing changed. I manually kicked client action from controll panel but nothing happened.

Then, I checked client logfiles, UpdateTrustedSites.log shows "Setting SDDLString failed with return value 80070539" like below.

-----------------------

<![LOG[Starting UpdateTrustedSites with  ]LOG]!><time="22:36:19.514-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="1" thread="2544" file="updatetrustedsites.cpp:221">
<![LOG[AddDefaultPortalToTrustedSites: Setting SDDLString failed with return value 80070539]LOG]!><time="22:36:19.545-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="3" thread="2544" file="updatetrustedsites.cpp:47">
<![LOG[AddDefaultPortalToTrustedSites: Setting SDDLString failed with return value 80070539]LOG]!><time="22:36:19.545-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="3" thread="2544" file="updatetrustedsites.cpp:47">
<![LOG[Starting UpdateTrustedSites with FALSE ]LOG]!><time="22:38:32.545-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="1" thread="3144" file="updatetrustedsites.cpp:221">
<![LOG[AddDefaultPortalToTrustedSites: Setting SDDLString failed with return value 80070539]LOG]!><time="22:38:32.561-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="3" thread="3144" file="updatetrustedsites.cpp:47">
<![LOG[AddDefaultPortalToTrustedSites: Setting SDDLString failed with return value 80070539]LOG]!><time="22:38:32.561-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="3" thread="3144" file="updatetrustedsites.cpp:47">
<![LOG[Starting UpdateTrustedSites with FALSE ]LOG]!><time="22:40:09.889-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="1" thread="3628" file="updatetrustedsites.cpp:221">
<![LOG[AddDefaultPortalToTrustedSites: Setting SDDLString failed with return value 80070539]LOG]!><time="22:40:09.905-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="3" thread="3628" file="updatetrustedsites.cpp:47">
<![LOG[AddDefaultPortalToTrustedSites: Setting SDDLString failed with return value 80070539]LOG]!><time="22:40:09.905-540" date="02-13-2013" component="UpdateTrustedSites" context="" type="3" thread="3628" file="updatetrustedsites.cpp:47">

-----------------------

I couldn't find any other errors.

My question is "What is this messages's meaning".

I googled, but threre are no information about this logfile. Anyone knows?

I am having the same error message in the same log. I have been applying some IE9 group policies and surely there are some settings related to trusted zones. But I wonder why SCCM cannot update the catalog store to the trusted zone.

Any news on that?

See ClientLocation.log, LocationServices.log and ClientIDManagerStartup.log if the client was able to retrieve an MP and if it was registered.

The client is able to retrieve an MP (from the clientlocation.log). However in the LocationsServices.log, the following is reported:

"Failed to return distibution points (0x87d00215)

Error invoking LSInvokeCallback"

Any idea?

Thank you for your help.

Just a single line does not help at all. DPs have nothing to do with retrieving policies at all. Please upload the log(s) to Skydrive.

Sorry, here attached are the log files.

http://sdrv.ms/15i2f49

Thank you very much.

Any updates on this topic ? 

I have the same issue with workgroup PC's

I also have same issue...Please don't leave us hanging. What is the resolution?

• Edited by Mohnkern Monday, October 28, 2013 1:41 PM

What I did to resolve the situation to reinstall the ccm with ccmsetuo. Exe. First uninstall it and reinstall it. That is how I handled the problem.

typically, workgroup machines need to be "approved". unless you go to the hierarchy settings and select "automatically approve all computers"

otherwise, you can turn on the column "approve" in the Collection view, and right mouse/approve the machine.

:) \thanks for posting your question.