Attempted to perform an unauthorized operation SCCM 2012 R2

Howdy,

This time, i had to rebuild my lab and when i was installing the SCCM 2012 R2 server, it kept throwing an error "Attempted to perform an unauthorized operation" once, I enter sql server name and click Next.

I looked at many other blogs, where they have mentioned either to check domain connectivity or change the location of the setup files( save locally and start install)

The first one made more sense to me as we could be authenticating with the SQL Server while connecting.

So, what i did is i ran a network monitor and tried to run the setup again. What i found is that, we try to negotiate while opening and SMB connection from SCCM to SQL but at one point, we fail to authenticate and would end up Closing the connection.

Here are the logs from the SCCM Setup:

1/20/2015 4:09:55 PM: ConfigMgrSetupWizard Information: 1 : Creating SQL connection to database master on server sql01.Contoso.com.
1/20/2015 4:09:55 PM: ConfigMgrSetupWizard Error: 1 : Exception message: [Attempted to perform an unauthorized operation.], Exception details: [System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.

Looking at the server, everything seemed ok ( from sql and sccm )

1. All the ports are open within the domain ( Allowed in windows Firewall)
2. Nothing in between to block ( they are running on hyper v same Host Server)


This was a road block!!

Then, i tried to access the Admin share of SQL Server from SCCM Server and it says access denied!!
But, it also helped me understand that the time on SCCM was not syncing up with my PDC and was way past the correct time as it would throw an error related to Time.

I used w32tm command to resync the time but somehow it would always revert back to its original time.

I then reconfigured the time to synchorize with my PDC  once the time synched, the setup successsed without issues.

Reference: https://technet.microsoft.com/en-us/library/w32tm.aspx

Software Update Point not working in Config Mgr

Howdy,

In this article, I will add some information related to the error in WCM Logs on the Config Mgr 2012 R2 when you have configured SCCM as Software Update Point.

What symptoms will you find?

- The Software Update Point never works
- The "Run Synchronization" does nothing
- You see no updates getting populated.

Issue:

The key to find any issues within Config Mgr is to look at the logs and that is what i did in this case.
Go to the Logs ( Usually under the logs folder of the SCCM Install directory) and look for WCM logs
You will find this.

Supported WSUS version found    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:44 PM    3632 (0x0E30)
Attempting connection to WSUS server: abc.contoso.com, port: 80, useSSL: False    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:44 PM    3632 (0x0E30)
System.Net.WebException: The request failed with HTTP status 404: Not Found.~~   at Microsoft.UpdateServices.Administration.AdminProxy.CreateUpdateServer(Object[] args)~~   at Microsoft.SystemsManagementServer.WSUS.WSUSServer.ConnectToWSUSServer(String ServerName, Boolean UseSSL, Int32 PortNumber)    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:45 PM    3632 (0x0E30)
Remote configuration failed on WSUS Server.    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:45 PM    3632 (0x0E30)
STATMSG: ID=6600 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_CONFIGURATION_MANAGER" SYS=abc.contoso.com SITE=BLR PID=1892 TID=3632 GMTDATE=Tue Sep 16 06:50:45.479 2014 ISTR0="abc.contoso.com" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:45 PM    3632 (0x0E30)
Setting new configuration state to 3 (WSUS_CONFIG_FAILED)    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:45 PM    3632 (0x0E30)
Waiting for changes for 60 minutes    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:45 PM    3632 (0x0E30)
Trigger event array index 0 ended.    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:48 PM    3632 (0x0E30)
  
 








So, it is very clear from the above logs that we are unable to connect to WSUS Server fro ConfigMgr. Rather, it gives 404 error which is Object not found from the web server.



Attempting connection to WSUS server: abc.contoso.com, port: 80, useSSL: False    SMS_WSUS_CONFIGURATION_MANAGER    9/15/2014 11:50:44 PM    3632 (0x0E30)
System.Net.WebException: The request failed with HTTP status 404: Not Found






Let's Look at the WSUS Configuration and its binding

So,  I have got a default binding on my WSUS Site. Now, lets look at the SUP configuration on ConfigMgr.

  

So, this is a problem now. we are trying to connect on Port 80 but, the WSUS is configured to accept connections on 8530. What is next?

There are two solutions:

1. Reconfigure the SUP on the ConfigMgr to connection 8530 and 8531 or

2. Reconfigure the WSUS to use 80 and 443

I would go with solution one as changing WSUS to use port 80 and 443 needs reconfiguration on WSUS as well as IIS.

So, in the SUP on ConfigMgr change the ports to 8530 and 8531

If there are no other errors, you should be able to connect without errors and in the WCM logs, you would see this

user(NT AUTHORITY\SYSTEM) runing application(SMS_WSUS_CONFIGURATION_MANAGER) from machine (abc.contoso.com) is submitting SDK changes from site(BLR)    SMS_WSUS_CONFIGURATION_MANAGER    9/16/2014 12:42:43 AM    3632 (0x0E30)
Attempting connection to WSUS server: abc.contoso.com, port: 8530, useSSL: False    SMS_WSUS_CONFIGURATION_MANAGER    9/16/2014 12:42:48 AM    3632 (0x0E30)
Successfully connected to server: abc.contoso.com, port: 8530, useSSL: False    SMS_WSUS_CONFIGURATION_MANAGER    9/16/2014 12:42:48 AM    3632 (0x0E30)

I hope this helps.

 

 

SCCM 2012 R2 SQL Detection Errors

Howdy,

It has been a while, that I wrote something here. Finally, I have something to write :)

This time, I came across an error when installing the SCCM 2012 R2.

The error I received is here:

'

I was going bonkers looking at it. Because, every prerequisite seemed ok. Digging Deep and looking at all those documentation, finally found out that I had installed X86 version of SQL which is unsupported by SCCM 2012 R2 :(

Once I installed X64 version of SQL everything went well.

I hope that helps you.

Reference:
http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigSQLSrvReq

Configuring WAP

We have already looked at the addition of WAP Role on Windows 2012 R2 Server Here. Today, we will look at post configuration deployment of WAP

Prerequisites:

• ADFS Server Installed and running
• Administrative account Privileges on ADFS Server
• Certificate for ADFS Proxy
• DNS resolution to ADFS Service.

Steps Here:

Click on "Open the Web Application  Proxy Wizard" from the below Server Manager Notification pane

 

You will see WAP Configuration Wizard. Click Next

You are now asked to add the ADFS Service name and an account information  that has administrative privileges on ADFS Server.

 

At this point, if you do not know the ADFS Service name, you will need to login to ADFS Server and check for ADFS Service name information. If you are already aware of it then, we are good for the next step.

In the next step, we add the ADFS Information as below

 

Adfs.contoso.com is the ADFS Service name.

In the next window, you are asked to select the ADFS Proxy certificate.

 

Select the desired certificate from the drop down menu. Please note, should already have a certificate under personal store of the local computer.

 

Click Next and confirm the WAP configuration by clicking configure.

 

 

If we have made sure the prerequisites are configured properly, the WAP Configuration wizard completes without errors

 

Click Close to Finish