SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr. I had a chance to install and test SCCM console servicing extension BETA. It seems very interesting and very very useful 🙂 I’m not going to take walk thorough of servicing extension tool.
You can find it in Eswar’s post http://eskonr.com/2014/07/sccm-configmgr-2012-servicing-extension-tool-available/ or Peter’s blog http://configmgrblog.com/2014/07/14/configuration-manager-servicing-extension-beta-released/.
SCCM 2012 console servicing Extension tool is useful to automate some of the tasks like query creation and also this helps to get the overview of sites in your SCCM environment. SCCM servicing extension add-on will also help to list the SCCM 2012 client versions in your environment.
In this post I’m going to explain
1) The importance of having Internet connection / access for CM12 console servicing extn,
2) log file details of Service Extension
3) How to resolve/fix access denied error on CU level details.
Also, a quick walk-through to help to download applications or tools from Microsoft Connect. I’ve seen many people complain about the problem with Microsoft Connect downloads. They are not able to download the applications or tools, the downloads are not available for them etc…
Most of our servers in corporate world don’t have direct access to internet because of security constraints. If that is the case in your environment then we can’t take FULL advantages of SCCM 2012 console servicing extension tool.
Probably, SCCM 2012 servicing extension tool would be useful when you have installed sccm / configmgr 2012 console on a remote client or terminal server which has an internet connection. SCCM Console Servicing Extension Permission Gotchas Configuration Manager ConfigMgr.
When you don’t have internet access on the SCCM 2012 console machine then you will only have limited exposure to Site Versions details. The servicing extension tool won’t provide details in the nodes including Site Updates, Client Targeting, and Blogs when you don’t have an internet connection. The following error will be displayed on the Site Update and Blogs nodes.
SCCM Servicing Extension – Site Servicing Node without Internet Connection
An Error occurred while loading the updates feed: The remote name could not be resolved: 'go.microsoft.com' Below are notifications about releases that can be installed on the selected configuration. Visit the displayed URL for More Information Error: Failed refreshing updates content The remote name could not be resolved: 'go.microsoft.com'
SCCM 2012 Servicing Extension – Site Updates Node without Internet Connection
SCCM 2012 Servicing Extension – Client Targeting Node without Internet Connection
SCCM Servicing Extension – Blogs Node without Internet Connection
Another tip that I wanted to provide in this post is not to worry about the “Access Denied” error against CU version detail of your site server in Site Versions node in SCCM 2012 servicing extension tool.
I had noticed that when you’re running from the SCCM 2012 console from CAS server then this extension tool is not able to read the registry key (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\CULevel) of the local server. However, this extension tool could be able to access to CULevel details from remote primary SCCM 2012 server. As you can see in the following picture.
You can see the error details in the SCCM 2012 Servicing extension log file called ServicingExtension.log. Log file path E:\Program Files\Microsoft Configuration Manager\AdminConsole\AdminUILog\ServicingExtension.log
[2052, PID:2204][07/15/2014 10:01:37] :CabFileDataSource: System.Net.WebException downloading CAB file from http://go.microsoft.com/fwlink/?LinkId=386333: The remote name could not be resolved: 'go.microsoft.com' [3872, PID:2204][07/15/2014 10:02:06] :SecurityException while reading CU level from server ACNCMCAS.Configmgr.com: Requested registry access is not allowed.
To fix this CU level access denied issue from SCCM 2012 Servicing Extension tool – Site Servicing – Site Versions node, you need to provide exclusive READ access or permission to the user who is running the SCCM 2012 console.
This READ permission should be given to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\.
After the changes in the permission, servicing extension tool is able to access the details about CU version installed on your site server (CAS server for my scenario) and it’s visible in the CM 12 console. I’ve not installed any CUs that is why it shows NONE.
When you run the SCCM console from primary server then you won’t be able to read the CU level details from of local primary server (registry) unless and until you provide above registry permissions. This is strange as my user [email protected] is part of local administrators group.
Sample in Built Query available on SCCM 2012 Servicing Extension Tool
ConfigMgr clients below version 5.00.7958.1303 (Cumulative Update 2 for System Center 2012 R2 Configuration Manager)
SELECT * FROM SMS_R_System WHERE Client = 1 AND ClientType != 3 AND ClientVersion IS NOT NULL AND ClientVersion < '5.00.7958.1303'
Software requirements or prerequisite for SCCM 2012 Console Servicing Extension tool
The following must be installed on the server or client computer on which CM12 Servicing Extension will be installed:
- An operating system supported by SCCM 2012. Note that Windows XP clients and Windows Server 2003 clients are not supported.
- The SCCM 2012 console from ConfigMgr 2012 SP1 or later, or SCCM 2012 R2 or later.
I’ve seen loads of people facing problems in downloading the application which are under connect. So I thought giving a quick walk through of Microsoft connect download :). First of all, you need to register and should be part of microsoft connect open BETA program (windows Live ID can be used here).
Are you not able download SCCM 2012 Servicing Extension from Microsoft connect ? Are you getting “Page NOT error on found” on Microsoft Connect page ;
1. Are you logged into Microsoft Connect ?Try to login via http://connect.microsoft.com/?lc=1033
2. The user who logged should part of Configuration Manager ConfigMgr Open Beta Program under https://connect.microsoft.com/directory/ to download the tool mentioned above.
3. When you’re part of ConfigMgr Open Beta program then you can get into the following page https://connect.microsoft.com/ConfigurationManagervnext and click on Downlaods
4. Ok, now in this page https://connect.microsoft.com/ConfigurationManagervnext/Downloads, you can see the currently available downloads for this ConfigMgr open beta program.
5. Once you click on SC 2012 Configuration Manager Servicing Extension from the above link then it will take you to actual DOWNLOAD page https://connect.microsoft.com/ConfigurationManagervnext/Downloads/DownloadDetails.aspx?DownloadID=53752