I’m back with ConfigMgr OSD Troubleshooting & OSD Known Issues Guide Part 2. Let’s understand how to fix the ConfigMgr OSD error that is so complex and confusing. It was really frustrating to troubleshoot and find the root cause of the issue.
We are back with another issue during TS where we were trying to deploy “Windows 10 V 1909″ and it was failing to enable “.NET 3.5“.
- We are continuing the previous blog “OSD Known Issues and Troubleshooting“
Read all about it.
- Whitepaper https://www.anoopcnair.com/download-whitepaper-on-top-10-best-practices-on-windows-10-osd-with-sccm-configmgr/
- Best Practices https://www.anoopcnair.com/windows-10-osd-best-practices/
- Below was the error printed in SMSTS log.
Running action: Run Command Line- .Net 3.5 Sub Features Failed to run the action: Running action: Run Command Line- .Net 3.5 Error 2146498529 SSL, using authenticator in request. In SSL, but with no client cert Set a global environment variable_SMSTSLastActionRetCode=2146498529
- The box in below screenshot should be checked through TS step enable .NET 3.5.
After trying everything I posted to our Forum “How To Manage Devices”. Got ideas about offline and DISM from Ankit, Jitesh, and Rajul. I have mentioned the fix too in the forum but we will discuss it here as well. https://forum.howtomanagedevices.com/endpointmanager/osd/enable-net-3-5-in-windows-10-using-ts-package-application-offline-media-script-online/#comment-4206
ConfigMgr OSD Troubleshooting
Following are the troubleshooting steps performed to fix the SCCM OSD error.
- PS Script
- Offline Installer
MS Says you need internet to enable the legacy version of “.NET” because it requires CAB Files to download. If you read the https://docs.microsoft.com/en-us/dotnet/framework/install/dotnet-35-windows-10.
Not only that. You need a specific SXS folder based on the OS version. For example, we can’t use the SOURCE/SXS from Windows 10 V 1806 if we want to enable .NET on Windows 10 V 1909. I am assuming this was done to reduce the image size.
Most easy version of fix was to inject it in WIM itself using DISM but my hands were tied as i don’t manage the OSD part (TS, Boot Image, Boot Media, WIM etc). I can only troubleshoot.
After continuous OSD troubleshooting, we decided that it’s not related to SCCM, and let’s see it from a core OS perspective.
Started reading logs collected from the failed machines.
- All logs with their description – In-depth:- https://www.anoopcnair.com/configmgr-client-logs-details-sccm-client-log/
- Log reading tips https://www.anoopcnair.com/sccm-logs-files-list-of-configmgr-log-files/
Came to one CBS log at the location “C:\Windows\Logs\CBS”. It clearly says trying to download supporting files from MS Site over Internet.
Asked the firewall team to whitelist the URL and boom. We are back in business.