wtorek, 24 września 2013

SCCM 2012 - *.bat files are not being copied to distribution point

We've recently installed the new IntelSCS addon for AMT Vpro on SCCM 2012 -> https://downloadcenter.intel.com/Detail_Desc.aspx?lang=eng&DwnldID=20921
Couple of days ago I had this strange ticket form our application administrator, he told me that there is some sort of problem with IntelSCS package (that was automatically created by the IntelSCS addon). In workstation log I found information that file "Remote_Discover.bat" was not found:

 

That was bit of strange, additionally because this package was created by the addon itself.
The first step was to check if those files are in the distribution point, it appeared that all files, beside all *.bat files, were copied successfuly:


I checked the source path in packade, it was ok. It was pointing to the “Local folder on site server” it was like E:\…. and was ok, the bat files was also there.
I reached to the bottom of my mind ;) and reminded that it might be something with that local paths, I have changed the path to “Network path (UNC name)“. After updating distribution point with that package – guess what :) , it was ok now:



So if some of your files won’t distribute, firstly think about changing the path to the sources from Local  to UNC.

ZABBIX - listing permissions

Today one of our security officer asked me to retrieve a list of users and permissions from our zabbix systems.

The problem occured while I was trying to associate users' groups to hosts' groups. There is in fact one subsite "permissions" under "Administration" -> "Users" after clicking on particular group link. But you cannot copy any information from there. Additionally if you have many groups that would be tidious task.

Instead of that I decided to retrieve the permissions from the database: here is the working sql command:

SELECT r.permission as "Permissions", g.name as "User Group", z.name as "Host Group" FROM zabbix.rights as r
join zabbix.usrgrp as g
on r.groupid = g.usrgrpid
join zabbix.groups as z
on z.groupid = r.id

 
 
2 in the "permission" column means "read" access, 3 means "read/write" permissions.

sobota, 3 sierpnia 2013

[SOLVED] SCCM 2012, "waiting for content" problem with ID 10035 and KB2840628

Lately I have received complaining from my colleagues from Helpdesk that no packages are being deployed on workstations.

All they saw is 0% of compliance and it didn't seem to go any further.

I made a package with GIMP and deployed it to my workstation

I looked at my workstation's logs, and this is what I have received in DataTransferService.log:

UpdateURLWithTransportSettings(): OLD URL - http://SCCMSRV01.domain.pl/SMS_MP    DataTransferService    2013-08-02 10:52:28    44312 (0xAD18)
UpdateURLWithTransportSettings(): NEW URL - http://SCCMSRV01.domain.pl:80/SMS_MP    DataTransferService    2013-08-02 10:52:28    44312 (0xAD18)
Added (source=.sms_pol?WRO20146-WRO0006A-9A35FD00.1_00,dest={1FEF9F05-C6EE-4825-ABA3-A0524765E569}.tmp) pair from manifest.    DataTransferService    2013-08-02 10:52:28    44312 (0xAD18)
DTSJob {F7B9EB0E-F104-4A8F-B884-771D78205282} created to download from 'http://SCCMSRV01.domain.pl:80/SMS_MP' to 'C:\Windows\CCM\Temp'.    DataTransferService    2013-08-02 10:52:28    44312 (0xAD18)
DTSJob {F7B9EB0E-F104-4A8F-B884-771D78205282} in state 'PendingDownload'.    DataTransferService    2013-08-02 10:52:28    61696 (0xF100)
DTSFlag is 0x0000bc8a    DataTransferService    2013-08-02 10:52:29    61696 (0xF100)
Exclude file list:     DataTransferService    2013-08-02 10:52:29    61696 (0xF100)
Using branch cache option    DataTransferService    2013-08-02 10:52:29    61696 (0xF100)
DTSJob {F7B9EB0E-F104-4A8F-B884-771D78205282} in state 'DownloadingData'.    DataTransferService    2013-08-02 10:52:29    61696 (0xF100)
DTSJob {F7B9EB0E-F104-4A8F-B884-771D78205282} in state 'RetrievedData'.    DataTransferService    2013-08-02 10:52:47    61672 (0xF0E8)
DTSJob {F7B9EB0E-F104-4A8F-B884-771D78205282} successfully completed download.    DataTransferService    2013-08-02 10:52:47    61672 (0xF0E8)
DTSJob {F7B9EB0E-F104-4A8F-B884-771D78205282} in state 'NotifiedComplete'.    DataTransferService    2013-08-02 10:52:47    44312 (0xAD18)
DTS job {F7B9EB0E-F104-4A8F-B884-771D78205282} has completed:
    Status : SUCCESS,
    Start time : 08/02/2013 10:52:28,
    Completion time : 08/02/2013 10:52:47,
    Elapsed time : 18 seconds    DataTransferService    2013-08-02 10:52:47    44312 (0xAD18)


So for me it seemed everything was allright, later I have checked the ContentTransferManager.log:

Starting CTM job {8BBAAE65-7549-4B57-8651-630B600FF7BC}.    ContentTransferManager    2013-08-02 07:07:37    7428 (0x1D04)
Starting CTM job {AB9D3FC4-17FF-484B-BD7E-288BF695E026}.    ContentTransferManager    2013-08-02 10:52:48    61696 (0xF100)
Created CTM job {AB9D3FC4-17FF-484B-BD7E-288BF695E026} for user S-1-5-18    ContentTransferManager    2013-08-02 10:52:48    61696 (0xF100)
Created and Sent Location Request '{E5143893-7C75-421E-898A-8C4DE7CE57FA}' for package WRO0006A    ContentTransferManager    2013-08-02 10:52:48    55380 (0xD854)
CTM job {AB9D3FC4-17FF-484B-BD7E-288BF695E026} entered phase CCM_DOWNLOADSTATUS_DOWNLOADING_DATA    ContentTransferManager    2013-08-02 10:52:48    55380 (0xD854)
Queued location request '{E5143893-7C75-421E-898A-8C4DE7CE57FA}' for CTM job '{AB9D3FC4-17FF-484B-BD7E-288BF695E026}'.    ContentTransferManager    2013-08-02 10:52:48    55380 (0xD854)


Here also seemed to be ok, but after a while, it wasn't going to Persisted locations for CTM job line, the next line should look like this:

Persisted locations for CTM job {56F1683C-F883-411E-B963-6A868147EA10}:
    (LOCAL) http://SCCM01SRV.domain.pl/SMS_DP_SMSPKG$/Content_bc428407-54be-40f7-ab09-518d83f591c8.1    ContentTransferManager    2013-07-04 12:19:35    33744 (0x83D0)



So I looked at the execmgr.log

The logged on user is domain.pl\pawel.jarosz    execmgr    2013-08-02 07:07:49    5392 (0x1510)
Requesting content from CAS for package WRO0006A version 1    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Policy arrived for parent package WRO0006A program Gimp 2.8.4    execmgr    2013-08-02 10:52:48    61672 (0xF0E8)
Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="WRO0006A",ProgramID="Gimp 2.8.4", actionType 6l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l    execmgr    2013-08-02 10:52:48    61672 (0xF0E8)
Raising event:
[SMS_CodePage(852), SMS_LocaleID(1045)]
instance of SoftDistProgramOfferReceivedEvent
{
    AdvertisementId = "WRO20146";
    ClientID = "GUID:9CD52450-3D15-46D6-A907-0DBD7E2F4FE1";
    DateTime = "20130802085248.054000+000";
    MachineName = "WROPI01PJ";
    ProcessID = 5840;
    SiteCode = "WRO";
    ThreadID = 61672;
};
    execmgr    2013-08-02 10:52:48    61672 (0xF0E8)
Successfully created a content request handle {5257F3D8-DFF1-41C1-A7C1-73B91DA47E6D} for the package WRO0006A version 1    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Program Gimp 2.8.4 change to state STATE_ADVANCED_DOWNLOAD content in progress    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Execution Request for advert WRO20146 package WRO0006A program Gimp 2.8.4 state change from NotExist to AdvancedDownload    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="WRO0006A",ProgramID="Gimp 2.8.4", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Mandatory execution requested for program Gimp 2.8.4 and advertisement WRO20146    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Creating mandatory request for advert WRO20146, program Gimp 2.8.4, package WRO0006A    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Raising event:
[SMS_CodePage(852), SMS_LocaleID(1045)]
instance of SoftDistWaitingContentEvent
{
    AdvertisementId = "WRO20146";
    ClientID = "GUID:9CD52450-3D15-46D6-A907-0DBD7E2F4FE1";
    DateTime = "20130802085248.144000+000";
    MachineName = "WROPI01PJ";
    PackageName = "WRO0006A";
    PackageVersion = "1";
    ProcessID = 5840;
    ProgramName = "Gimp 2.8.4";
    SiteCode = "WRO";
    ThreadID = 61696;
};
    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Successfully raised SoftDistWaitingContentEvent event for program Gimp 2.8.4    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Execution Request for advert WRO20146 package WRO0006A program Gimp 2.8.4 state change from WaitingDependency to WaitingContent    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="WRO0006A",ProgramID="Gimp 2.8.4", actionType 1l, value , user NULL, session 4294967295l, level 0l, verbosity 30l    execmgr    2013-08-02 10:52:48    61696 (0xF100)
Raising client SDK event for class CCM_Program, instance CCM_Program.PackageID="WRO0006A",ProgramID="Gimp 2.8.4", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l, verbosity 30l    execmgr    2013-08-02 10:52:48    62952 (0xF5E8)


So i was stupid now :) The entry says Program Gimp 2.8.4 change to state STATE_ADVANCED_DOWNLOAD content in progress but it isn't!

I was googling a little bit more, and find this blog entry:

http://blogs.technet.com/b/configmgrteam/archive/2013/07/17/issues-reported-with-ms13-052-kb2840628-and-configmgr.aspx

"Issue 3: Configuration Manager 2007" says about issue I had, although it was saying about SCCM 2007 I decided to give it a shot :)

To make change you need to make change is SQL Management studio on SCCM database:



After that change, all tha packages started to be properly distributed to clients :)



poniedziałek, 1 lipca 2013

SCCM 2012 – Content distribution to Distribution Points – “Error during connection to SMS_DP$” and “0×80041013″.

Today one of mine colleagues from Helpdesk, asked me why one package hasn't been distributed correctly to some Distribution Points. The <strong>PkgXferMgr.log</strong> said to me that:

There is no existing connection, Win32 error = 67    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
There is no existing connection, Win32 error = 67    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Error during connection to \\DPJAS.DOMAIN.COM\SMS_DP$ (67).    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Error is considered fatal.    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Cannot connect to server DPJAS.DOMAIN.COM at remote site DPJAS.DOMAIN.COM, won't try send requests going to site DPJAS.DOMAIN.COM for an hour or until there are no active send requests.    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Could not establish connection.    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Attempt to connect failed.    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Notifying pkgXferJobMgr    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)
Sending failed. Failure count = 26, Restart time = 6/28/2013 3:07:49 AM Central European Daylight Time    SMS_PACKAGE_TRANSFER_MANAGER    2013-06-28 02:37:49    9192 (0x23E8)


I was astonished because I haven't changed anything, as I logged on DPJAS server it appared that one of my administrator colleague has moved the SMS_DP$ share. Not only moved but moved and forgot to share it again, so it wasn't visible on the network. I turned sharing again, gave proper permissions, and one more time looked in log after redistributing content.

The message I that have received was:

ExecStaticMethod failed (80041013) SMS_DistributionPoint, AddFile    SMS_PACKAGE_TRANSFER_MANAGER    2013-07-01 12:19:13    11128 (0x2B78)
CSendFileAction::SendFiles failed; 0x80041013    SMS_PACKAGE_TRANSFER_MANAGER    2013-07-01 12:19:13    11128 (0x2B78)
CSendFileAction::SendFiles failed; 0x80041013    SMS_PACKAGE_TRANSFER_MANAGER    2013-07-01 12:19:13    11128 (0x2B78)
Notifying pkgXferJobMgr    SMS_PACKAGE_TRANSFER_MANAGER    2013-07-01 12:19:13    11128 (0x2B78)
Sending failed. Failure count = 1, Restart time = 7/1/2013 12:49:13 PM Central European Daylight Time    SMS_PACKAGE_TRANSFER_MANAGER    2013-07-01 12:19:13    11128 (0x2B78)


After about 30 minutes of trying that operation to run on other DPs, I moved that folder to D drive where it was - my colleague moved it to the F drive.

Another redistribution operation, and guess what :) I t was the drive fault! Still do not how could it be as long as the share was visible properly :/

czwartek, 27 czerwca 2013

[SOLVED] Tivoli Data Protection for Microsoft SQL Server and Lync Server 2013 database backup.

Lately I was trying to make backup of Lync Server 2013 databases with Tivoli Data Protection for Microsoft SQL Server.

Tivoli client in version 5.5.6.0-TIV-TSMSQL-WinX64.exe installed correctly. Lync Server 2013 installs 3 instances on the server, those instances' names are: RTC, RTCLOCAL and LYNCLOCAL.

To none of them I couldn't connect with TSM DP. I was trying many configurations in tdpsql.cfg file, but no luck. As I was inputting as FROMSQLserver and SQLserver the <SERVER_NAME> I got error ACO5424E.

About which we can find here that is the name problem, so after running "select @@servername" it returned me "<SERVER_NAME>\RTC". After inputting it in the configuration file not much has changed, because I was receiving ACO5422E which seems to be findable in the Internet, but my error was 0x80130151 which gives us 0 entries in uncle google.

The first thought was - "I bet it is the version failure". So I installed version 6.3.1.0-TIV-TSMSQL-Win.exe, before I had to install some of the Visual Studio 2010 prerequisites. But, as I opened it, and went to "Protect and Recover Data" there was nothing... a desert of nothingness...

So another hour of modifying config files and the idea of returning the the previous version appeared. So I have uninstalled the new one, and installed the 5.5.6.0 version. And... guess what :) the client has connected correctly! It may have been the lack of that Visual Studio 2010 components, the new client may also have repaired some configuration files (but AFAIK there are only 3 which were ok).

[SOLVED] WSUS doesn't approves updates, although it has proper "approval rule".

Recently I had a strange symptom, for example, when newly created Windows 7 client was searching updates on the Microsoft Update website it saw about 150 of updates, at the same time seeing 1 from local WSUS server.

Sometimes I use to say that something is simple as shovel... or fu*king. WSUS should be one of those things, but apparently it is not. I was already one battle with it - TECHNET THREAD.
Hence I know that WSUS can be let say, a pain in the ass, in parlance.

That state with updates was a little bit strange, all the more, I have "Automatic Approval" rule on my WSUS for almost all updates - i'm just not approving the Service Packs.

The investigation lead me to our root WSUS server. As I looked at the "Update Report" of one conflict update the state was "Not Approved". I was astonished. Why for God's sake! Doesn't the rule says you shall install it you stupid motherfu*ker!

I tried to restart services, the whole server, there was no warnings, no error in event logs.

Then, as I was for hundred time waching the "Automatic Approval" dialog box, I picked one rule, and I thought "hmmm.. why not" and clicked the "Run now" button.

After that operation the updates started to be available for clients!

Apparently the "run now" operation unblocked the pipe :) But what was the reason for that, have no idea :/

niedziela, 7 kwietnia 2013

[SOLVED] – A management group with the same name (xxxx) is already registerted to data warehouse management group “xxxx”

Hi all,

Recently I had a problem. The Data Warehouse server [SCDW] has detached from my Service Manager server [SCSM]. Without any reason :/

I have read in the Internet to unregister it and register again - "Wow, seems to be easy as pie" - I though, I have unregistered it, but trying to register it once again I have received an error:

"A management group with the same name (xxxx) is already registerted to data warehouse management group "xxxx"

Shit, what to do now?! Not many articles were written about it in the Internet, In fact, I have found just one:

http://social.technet.microsoft.com/Forums/en-US/systemcenterservicemanager/thread/4dc5cac4-49c3-4d10-ad0d-6b0bb4a4a2f2

The Unregister-SCDWSource didn't worked for me - because It has been already unregistered. The hope seems to be one powershell command:

Remove-SCDWMgmtGroup...

But it does not persist in System Center 2012, it was in 2012 version.

So the only hope was from one guy that has been dealing with it in test environment, and resolved by removing 3 records from database:

SELECT *
  FROM [DWStagingAndConfig].[dbo].[MT_Microsoft$SystemCenter$ResourceAccessLayer$SdkResourceStore]
GO

I have tried that command, saw the records and deleted them, and guess what? The SCDW wizzard has moved!.. BUT! at the last page, where "create" button is, I have received an error:

"Data source is already registered with the datawarehouse"

So the same error that one guy wrote on that froum.

So, still shit. maybe even bigger, so I went back to the snapshot, and tried to fight it without modyfying the database.

I made up final decision to uninstall the SCDW server. But still I wasn't sure it would help, but no risk no fun.

After removing it, I started the installation wizzard.

I was considering to install it with the old database's names, or give new ones. The second choice was better, in fact, if I would left the old names, the field with management group was grayed out, so basically I don't think that would help with "A group is in use..." problem, because I would use the same group during registering, and I wanted to change that group name. The wizzard made it for me - for each database name it added "_1", so I simply accepted it.

From last time I remembered that the SCDW installation process it is easy as pie, so I was very astonished when on "Configure Analysis Services for OLAP cubes" I have received error "A server in unavailable" - "what the hack" - the wizzard has perfectly worked with databases in previous steps - as wrote, it discovered that I have done it before and databases persists - it has added the "_1" sign after each DB name. Why it cannot connect to DB server in this step?!

First thought was to checked the Analysis Service on my SQL server - a good old service restart :) but it didn't helped, so maybe the permissions? I have changed the user on which I was installing the SCDW server (those fields where you give username and password in wizzard), but no luck.

With a help of that post:

http://social.technet.microsoft.com/Forums/en-US/setup/thread/33c307a7-5ad9-430b-939c-bf3931495677/

I have discovered the log file, and guess what was in file?:

Error:GetSqlInstanceList(), Exception Type: Microsoft.AnalysisServices.OperationException, Exception Message: File system error: The following file is corrupted: Physical file: ...\Data\DWASDataBase.0.db\ReviewActivityDim.0.dim\5.ApprovalCondition_ReviewActivityApprovalId.(All).sstore. Logical file.

That would make sence - because as the wizzard changed the databases names in previous steps - adding "_1", it hasn't done it in this step! It was weird because I have checked "create new database" and It didn't find the old one - but what it has common with connecting to the database server?! I mean the file name :/

The same was happening when I have checked "use existing database", so apparently, the wizzard just didn't changed the database name because it couldn't connect to DB server. I have changed the DB name by adding "_1" and clicked "next", and guess what? "A server in unavailable"...

What the hell!!! What is common in connection to server and corrupted OLD!!!  database file name.

I have looked at the log file - the error was exactly the same!!! So apparently the SCSM wizzard has a bug, and even having inputed a new name, it tries to install OLAP cubes under one name "DWASDataBase" in the same old folder "DWASDataBase.0.db".

I have logged on the DB server, stopped the Analysis Service, renamed the folder to "DWASDataBase.0.db_BAK", rerun the service, and... guess what :) The wizzard pass the step to the end, the installation was finalized successfully.

I have logged to my SCSM server and tried to register the SCDW server - WORKED LIKE A CHARM!