Let’s check what are possible options to FIX SCCM Management Point Issues. The SCCM | ConfigMgr | Management Points are an integral part of client communication.
TL;DR
Introduction
The MPcontrol.log and IIS logs (located at W3SVC1) are always been best friends when you troubleshoot on MP related issues.
We were getting the following errors in MPControl.log and u_ex140703.log. I hope this post can help some of SCCM admins to fix MP issues in SCCM 2007 and SCCM 2012 environments.
MP List and MP Cert Test URL details
http://<ServerName>/sms_mp/.sms_aut?mplist where <ServerName> is the NetBIOS name for the MP Server.
https://<ServerName>/sms_mp/.sms_aut?mplist
where <ServerName> is the FQDN for the SCCM MP Server if an FQDN is specified in the site system properties or the short name if an FQDN has not been specified.
http://<ServerName>/sms_mp/.sms_aut?mpcert
where <ServerName> is the NetBIOS name for the MP Server.
https://<ServerName>/sms_mp/.sms_aut?mpcert
where <ServerName> is the FQDN for the SCCM MP Server if an FQDN is specified in the site system properties or the short name if an FQDN has not been specified.
Call to HttpSendRequestSync failed for port 80 with status code 500, text: Internal Server Error
BITS_POST /CCM_Incoming/{BC2132F2-8FFF-445D-884B-958EAE0B5C24} - 80 -10.10.10.136 Microsoft+BITS/7.5 500 0 126 236
CCM_POST /ccm_system_windowsauth/request - 80 ConfigMgr\8ACNBBS$ 10.10.10.136 ccmhttp 500 0 193 23
GET /sms_mp/.sms_aut mpcert 80 - 10.90.132.229 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/5.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+.NET+CLR+1.1.4322;+.NET4.0C;+.NET4.0E;+InfoPath.3) 500 0 193 2
GET /SMS_MP/.sms_aut MPLIST 80 - 10.91.137.151 SMS+CCM 500 0 193 289
Troubleshooting Management Point
1) Removed the SCCM management point role and added back. MPSetup.log says everything is installed perfectly.
2) Can’t remove IIS role from the server and add it back because MP is server is SCCM primary server and it hosts SCCM DP, WSUS roles as well.
3) SCCM client was installed on the primary server so we uninstalled the client using CCMClean.exe and deinstalled MP with no success (restarted the server as well).
4) Performed in-depth analysis on IIS 7.5 and event logs etc. No traces of recent changes and issues.
5) Checked “SMS Management Point Pool” application pool, what we had noticed was SMS Management Point Pool –> Advanced Settings –> Enable 32-Bit Applications was set to TRUE.
6) Changed the SMS Management Point Pool –> Advanced Settings –> Enable 32-Bit Applications settings to FALSE. Restarted the IIS.
7) After the change mentioned in point 6, MPLIST and MPCERT started working. Also, we had noticed that all the GET commands related to sms_mp started working.
MP LIST TEST URL ==> http://MP-server-name/sms_mp/.sms_aut?MPcert MP CERT TEST URL ==> http://MP-server-name/sms_mp/.sms_aut?MPlist
The following entries are from the IIS log.
GET /sms_mp/.sms_aut mpcert 80 - 10.10.10.229 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/5.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+.NET+CLR+1.1.4322;+.NET4.0C;+.NET4.0E;+InfoPath.3) 200 0 0 2 GET /sms_mp/.sms_aut mplist 80 -10.10.10.229 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+6.1;+Trident/5.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+.NET+CLR+1.1.4322;+.NET4.0C;+.NET4.0E;+InfoPath.3) 200 0 0 6 GET /SMS_MP/.sms_pol PRI202A7-PRI001B8-B10178C8.1_00 80 -10.10.10.229 Microsoft+BITS/6.7 200 0 0 340
8) MPControl.log at SCCM primary server started showing green signals with the following log entries:
Successfully performed Management Point availability check against local computer.~ $<SMS_MP_CONTROL_MANAGER> Call to HttpSendRequestSync succeeded for port 80 with status code 200, text: OK $<SMS_MP_CONTROL_MANAGER> Http test request succeeded.~ $<SMS_MP_CONTROL_MANAGER>
9) So Issue resolved? Tried to build a new machine and it got failed 🙁
Following entries in the IIS logs
CCM_POST /ccm_system/request - 80 - 10.10.10.177 ccmhttp 500 19 5 2
CCM_POST /ccm_system_windowsauth/request - 80 - 10.10.10.177 ccmhttp 500 19 5 234
BITS_POST /CCM_Incoming/{24D68C67-DE23-4EF2-B9D6-F8B6411BEF65} - 80 - 10.91.137.156 Microsoft+BITS/7.5 500 0 126 234
10) After changing the application pool setting for SMS Management Point Pool (website = sms_mp http://localhost/SMS_MP ), all requests coming from the client to download policies and MPLIST- MPCERT started working.
However, when a client tries to perform CCM_POST using the following websites then SCCM server IIS logs were giving above mentioned 500 errors.
So, we have decided to check the setting on the website’s CCM_Incoming, ccm_system, and ccm_system_windowsauth application pools on IIS 7.5 server.
The following are the Application Pools details of each virtual directory and IIS site!
CCM_Incoming = CCM Server Framework Pool = http://localhost/CCM_Incoming
CCM_system = CCM Server Framework Pool = http://localhost/CCM_System
CCM_system_windowsauth = CCM Windows Auth Server Framework Pool = http://localhost/CCM_System_WindowsAuth
FIX SCCM Management Point Issues
11. When we checked the application pools(CCM Windows Auth Server Framework Pool and CCM Server Framework Pool) for Enable 32-Bit Applications then we found that it was set to TRUE.
Changed Enable 32-Bit Applications settings to FALSE. Restarted the IIS.
12. Wow. That did the trick! IIS logs started getting 200 messages. We had tested OSD and it started working.
BITS_POST /CCM_Incoming/{C07B989E-E722-40FC-8412-BFBF561ER9F6} (bits_new_session:{56DA4C84-78CF-4A13-852F-B13CFG0H60A01}) 80 - 10.10.10.43 Microsoft+BITS/7.5 200 0 0 9
CCM_POST /ccm_system/request - 80 - 10.10.10.43 ccmhttp 200 0 0 295
CCM_POST /ccm_system_windowsauth/request - 80 ConfigMgr\CM002PC3$ 10.10.10.147 ccmhttp 200 0 64 206
Reinstall Management Point
I have three posts to help you to reinstall ConfigMgr Management Point as part fixing SCCM Management Point issues.
- Reinstall Management Point Role|ConfigMgr
- Install a New SCCM Management Point Role|ConfigMgr
- Learn How to Remove Management Point Role
Thanks for this information.
Can you pinpoint the source of this problem ?
I’ve read elsewhere that it was related to installing the SCCM client on the server hosting the MP role.
Can this be confirmed please ?
Thanks in advance
Thank you so much for this write up! Started seeing MP errors after failing an MP back to a different location, and changing the Enable 32-Bit Applications settings to FALSE fixed my issue.
I have tried the option specified above, but still ending up with the same error “Call to HttpSendRequestSync failed for port 80 with status code 500, text: Internal Server Error” in the MPcpntrol log.
The requested page cannot be accessed because the related configuration data for the page is invalid.Detailed Error Information:
Module IIS Web Core
Notification BeginRequest
Handler Not yet determined
Error Code 0x80070005
Config Error Cannot read configuration file due to insufficient permissions
Config File \\?\D:\Program Files\SMS_CCM\SMS_MP\web.config
any pointers would be of great help.
Note As per the link in the error, I have given read permisions to iis_iusrs on web.config and applicationhost.config files.
Hi ! – How about other web application which is used via same IIS ?
Regards
Anoop
Hi Anoop,
I was able to uninstall an reinstall MP role which fixed the error, but I started seeing other issues on clients. All the clients are showing these errors and not running the advertisements.
Software Distribution Site Settings for the client are missing from WMI. execmgr 2/8/2017 12:23:39 PM 9072 (0x2370)
Common Client Agent Settings for the client are missing from WMI. execmgr 2/8/2017 12:23:39 PM 9072 (0x2370)
Do you have any idea?
Thanks
Sana
Check the event logs to find further more errors related. Also you can try to reinstall client?
Thanks for the fast response Anoop.
I did try reinstalling the client, which didn’t work. I see machine and user policy in actions tab, when I trigger the action I see a policy update for advertisement in execmgr.log but it never executes the program.
I see a lot of these warnings in Application event logs.
The description for Event ID 63 from source Microsoft-Windows-WMI cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
PolicyAgentInstanceProvider
root\ccm\Policy\S_1_5_21_2460280860_2823173241_3174630117_873843
Thanks
Sana
I would try to remove the client using CCMClean.exe and they repair WMI. Restart the client and then try to install the SCCM client again
on the client machine or the primary server?
The warning messages I see are on the primary server. And the sccm client is installed with only 2 actions on the server as well.
Thanks
Sana
No NO NO WMI repair on Primary. I was mentioning about client. If it’s Primary. I would recommend to raise a support case with Microsoft.
On client machine, Removed client using ccmclean.exe, repaired WMI then installed SCCM client. Still see only 2 actions and execmgr.log is full of these errors.
Software Distribution Site Settings for the client are missing from WMI. execmgr 2/9/2017 11:18:16 AM 8052 (0x1F74)
Can not find client site settings execmgr 2/9/2017 11:18:16 AM 8052 (0x1F74)
Thanks
Sana
Tried that with no luck. Anything else that I should try?
Sorry I have no clue ..I’m out of resources … unless the client machine is in front of me 😉
Dear Anoop,
i have 5 MP’s in my company. 2 in main site in this 1 is http and other https. 3 in remote sites in this 2 in https. i used https for mac system enrollment. my issue (i think) i am getting mp list in primary http site only all other showing 403 access denied
Thanks for the document.
Since I installed WSUS server over SCCM already installed I began to see theese 500 errors.
Now in everithing OK again
Thank you for the feedback