SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr. I had a chance to install and test SCCM console servicing extension BETA. It seems very interesting and very useful 🙂 I’m not going to take a walk-through of the servicing extension tool.

You can find it in Eswar’s post http://eskonr.com/2014/07/sccm-configmgr-2012-servicing-extension-tool-available/ or Peter’s blog http://configmgrblog.com/2014/07/14/configuration-manager-servicing-extension-beta-released/.

SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

SCCM 2012 console servicing Extension tool is useful to automate some of the tasks like query creation, and also this helps to get the overview of sites in your SCCM environment. SCCM servicing extension add-on will also help list the SCCM 2012 client versions in your environment.

In this post, I’m going to explain

Patch My PC

1) The importance of having Internet connection/access for CM12 console servicing extn,

2) log file details of Service Extension

3) How to resolve/fix access denied error on CU level details.

Also, a quick walk-through to help download applications or tools from Microsoft Connect. I’ve seen many people complain about the problem with Microsoft Connect downloads. They cannot download the applications or tools, and the downloads are not available for them, etc…

Adaptiva

Most of our servers in the corporate world don’t have direct access to the internet because of security constraints. If that is the case in your environment, we can’t take FULL advantage of the SCCM 2012 console servicing extension tool.

The SCCM 2012 servicing extension tool would probably be useful when you have installed the sccm / ConfigMgr 2012 console on a remote client or terminal server with an internet connection. SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr.

When you don’t have internet access on the SCCM 2012 console machine, you will only have limited exposure to Site Versions details. When you don’t have an internet connection, the servicing extension tool won’t provide details in the nodes, including Site Updates, Client Targeting, and Blogs. The following error will be displayed on the Site Update and Blogs nodes.

SCCM Servicing Extension – Site Servicing Node without Internet Connection

SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
An Error occurred while loading the updates feed: The remote name could not be resolved: 'go.microsoft.com'
Below are notifications about releases that can be installed on the selected configuration. Visit the displayed URL for More Information
Error: Failed refreshing updates content
The remote name could not be resolved: 'go.microsoft.com'

SCCM 2012 Servicing Extension – Site Updates Node without Internet Connection

SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

SCCM 2012 Servicing Extension – Client Targeting Node without Internet Connection

CM12-Servicing Extensions 2
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

SCCM Servicing Extension – Blogs Node without Internet Connection

CM12-Servicing Extensions 3
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

Another tip that I wanted to provide in this post is not to worry about the “Access Denied” error against the CU version detail of your site server in the Site Versions node in the SCCM 2012 servicing extension tool.

I noticed that when you’re running from the SCCM 2012 console from the CAS server, this extension tool cannot read the registry key (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\CULevel) of the local server. However, this extension tool could access CULevel details from the remote primary SCCM 2012 server, as you can see in the following picture.

CM12-Servicing Extensions 4

You can see the error details in the SCCM 2012 Servicing extension log file called ServicingExtension.log. Logfile path E:\Program Files\Microsoft Configuration Manager\AdminConsole\AdminUILog\ServicingExtension.log 

[2052, PID:2204][07/15/2014 10:01:37] :CabFileDataSource: System.Net.WebException downloading CAB file from http://go.microsoft.com/fwlink/?LinkId=386333: The remote name could not be resolved: 'go.microsoft.com'
[3872, PID:2204][07/15/2014 10:02:06] :SecurityException while reading CU level from server ACNCMCAS.Configmgr.com: Requested registry access is not allowed.

To fix this CU level access denied issue from SCCM 2012 Servicing Extension tool – Site Servicing – Site Versions node, you need to provide exclusive READ access or permission to the user who is running the SCCM 2012 console.

This READ permission should be given to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\.

After the changes in the permission, servicing extension tool can access the details about the CU version installed on your site server (CAS server for my scenario), and it’s visible in the CM 12 console. I’ve not installed any CUs; that is why it shows NONE.

When you run the SCCM console from the primary server, you won’t be able to read the CU level details from the local primary server (registry) unless and until you provide the above registry permissions. This is strange as my user [email protected] is part of the local administrators’ group.

CM12-Servicing Extensions 5
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

Sample in Built Query available on SCCM 2012 Servicing Extension Tool

ConfigMgr clients below version 5.00.7958.1303 (Cumulative Update 2 for System Center 2012 R2 Configuration Manager)

SELECT * FROM SMS_R_System WHERE Client = 1 AND ClientType != 3 AND ClientVersion IS NOT NULL AND ClientVersion < '5.00.7958.1303'

 Software requirements or prerequisite for SCCM 2012 Console Servicing Extension tool

The following must be installed on the server or client computer on which CM12 Servicing Extension will be installed:

  1. An operating system supported by SCCM 2012. Note that Windows XP clients and Windows Server 2003 clients are not supported.
  2. The SCCM 2012 console from ConfigMgr 2012 SP1 or later, or SCCM 2012 R2 or later.  

I’ve seen loads of people facing problems downloading the application under connect. So I thought of giving a quick walk-through of the Microsoft connect download :). First, you need to register and be part of the Microsoft connect open BETA program (Windows Live ID can be used here). 

Are you not able to download SCCM 2012 Servicing Extension from Microsoft connect? Are you getting “Page NOT error on found” on Microsoft Connect page ;

1. Are you logged into Microsoft Connect? Try to login via http://connect.microsoft.com/?lc=1033

2. The user who logged in should be part of Configuration Manager ConfigMgr Open Beta Program under https://connect.microsoft.com/directory/ to download the tool mentioned above.

SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

3. When you’re part of ConfigMgr Open Beta program then you can get into the following page  https://connect.microsoft.com/ConfigurationManagervnext and click on Downlaods

CM12 Servicing Extensions 9
SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr

 4. Ok, now in this page https://connect.microsoft.com/ConfigurationManagervnext/Downloads, you can see the currently available downloads for this ConfigMgr open beta program.

CM12 Servicing Extensions 10

5. Once you click on SC 2012 Configuration Manager Servicing Extension from the above link then it will take you to actual DOWNLOAD page https://connect.microsoft.com/ConfigurationManagervnext/Downloads/DownloadDetails.aspx?DownloadID=53752

CM12 Servicing Extensions 11

Author

Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…

4 thoughts on “SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr”

Leave a Reply to Wayne Cancel reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.