SCCM showing errors related to IBCM server in a DMZ Forest

John Q 11 Reputation points
2021-10-26T22:37:57.943+00:00

IBCM was setup by someone before me and I suspect there is something wrong with it, or an issue in between our SCCM and the server.
In System Status > Site Status, I'm seeing the following errors:

Application Catalog web service point

Configuration Manager cannot create the object "cn=SMS...DMZ1.domain.COM" in Active Directory (dmz1.domain.com).

Possible cause: The site server's machine account may not have full control rights for the "System Management" container in Active Directory
Solution: Give the site server's machine account full control rights to the "System Management" container, and all child objects in Active Directory.

Possible cause: Another Active Directory object named "cn=SMS-MP..IBCM.DMZ1.domain.COM" already exists somewhere outside of the "System Management" container
Solution: Locate the other object with the same name, and delete the object from its current location. Then allow the site to create a new object.

Possible cause: The Active Directory schema has not been extended with the correct ConfigMgr Active Directory classes and attributes.
Solution: Turn off Active Directory publishing for each site in the forest, until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the installation media.

Software update point

MP Control Manager detected User Service is not responding to HTTP requests. The HTTP status code and text is 12175, .

Possible cause: Internet Information Services (IIS) isn't running or configured to listen on the ports over which the site is configured to communicate.
Solution: Verify that the designated Web Site is configured to use the same ports which the site is configured to use.

Possible cause: The designated Web Site is disabled in IIS.
Solution: Verify that the designated Web Site is enabled, and functioning properly.

Possible cause: The User Service application pool identity does not have the required logon privileges.
Solution: Verify that the User Service application pool is configured to run under Network Service account.

Possible cause: ASP.NET is not installed.
Solution: Ensure ASP.NET 4.5 or above is selected under Web Server - Application Development and Features in Windows Server.

Possible cause: ASP.NET application does not function properly.
Solution: Browse to http(s)://localhost/CMUserService_WindowsAuth/ApplicationViewService.asmx on the local server machine and follow error instructions.

MP Control Manager detected MP is not responding to HTTP requests. The http error is 2147500037.

Possible cause: MP service is not started or not responding.
Solution: Manually restart the SMS Agent Host service on the MP.

Possible cause: IIS service is not responding.
Solution: Manually restart the W3SVC service on the MP.

For more information, refer to Microsoft Knowledge Base article 838891.

The "System" is another server on a different domain that I believe was setup as the IBCM server/role.
The Site status of other servers/roles including the server I'm using SCCM Configuration Manager console on to connect to appear to be in "OK" state.

Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
902 questions
Microsoft Configuration Manager
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Simon Ren-MSFT 30,116 Reputation points Microsoft Vendor
    2021-10-28T05:56:54.537+00:00

    Hi,

    Thanks for posting in Microsoft Q&A forum.

    Per my experience, both errors are expected, they don't mean a real wrong status. If the IBCM site system is working well, we can safely ignore the general errors. Because:

    1, The application catalog website point and web service point are deprecated for eariler Configuration Manager version, the first error is not a real error. Refer to:
    Unsupported and removed features

    2, Because of the higher security requirements of managing client computers on a public network, IBCM requires the use of PKI certificates. So the SUP or MP on the IBCM server will not respond to HTTP requests, it requires HTTPS. For more information about IBCM, please refer to below articles:
    Plan for internet-based client management in Configuration Manager
    SCCM INTERNET BASED CLIENT MANAGEMENT

    Thanks for your time.

    Best regards,
    Simon

    If the response is helpful, please click "Accept Answer" and upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.