Client with NatedIP

Duchemin, Dominique 2,006 Reputation points
2022-05-10T23:06:52.503+00:00

Hello,

I have some desktops at a remote site with NATed IP:

On the client side:
Machine1 IP: 10.10.103.186
Machine2 IP: 10.10.103.196

On the CM Side:
Machine1 IP: 10.253.52.100
Machine2 IP: 10.253.52.101

Any recommendations, comments? Should I used only the boundaries set to the CM Side?
For now apparently I could not send/install the Client
ccm.log

---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> The device CNBCAXXXYYYY6.ad does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> Attempting to connect to administrative share '\CNBCAXXXYYYY6\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> The device CNBCAXXXYYYY6 does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> ERROR: Unable to access target machine for request: "2097273958", machine name: "CNBCAXXXYYYY6", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Execute query exec [sp_CP_SetLastErrorCode] 2097273958, 53 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Stored request "2097273958", machine name "CNBCAXXXYYYY6", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097273958, 2 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Execute query exec [sp_CP_SetLatest] 2097273958, N'04/30/2022 07:44:57', 62 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
<======End request: "2097273958", machine name: "CNBCAXXXYYYY6". SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Thread has been inactive too long. Closing thread SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:54:57 AM 22480 (0x57D0)
--- This thread is terminating due to inactivity SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:54:57 AM 22480 (0x57D0)
----- Terminated CCR processing thread. There are now 0 processing threads SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:54:57 AM 22480 (0x57D0)

--------------------------------------------------------------------------------------------------------------------------------

Which IP should be seen in the properties on the machine?
200735-2022-05-10-16-08-31-oic-bca-ip.png
Is this IP coming from the System Discovery? Is it the local IP or the NATedIP?

As we have 5 accounts for the client push depending on the Group I was expected the 3rd or 5th for these two specific machines to proceed...
200786-2022-05-10-22-49-20-client-push-accounts.png

Thanks,
Dom

Microsoft Configuration Manager
0 comments

6 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Amandayou-MSFT 11,046 Reputation points
    2022-05-11T06:12:45.96+00:00

    Hi,

    When pushing the client, it has no relationship with the IP address reported by the client. We could use nslookup to connect the client name on the site server to check it is successful.

    For example, nslookup the client, and there will show the Address, we could use this IP address.

    200768-511.png

    If this method does not work, we could use another way to find the specific IP to access the client, and then add this IP in DNS.

    If client push installation is not suitable, we could use group policy installation method, here is the related link we could refer to:
    https://learn.microsoft.com/en-us/mem/configmgr/core/clients/deploy/deploy-clients-to-windows-computers#BKMK_ClientGP

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    2 people found this answer helpful.
    0 comments
  2. Duchemin, Dominique 2,006 Reputation points
    2022-05-11T05:44:38.553+00:00

    Hello,

    I tried both IPs and still the same issue...

    ======>Begin Processing request: "2097273958", machine name: "CNBCAOICXXXX6" SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    Execute query exec [sp_IsMPAvailable] N'UCP' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    ---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    ---> Attempting to connect to administrative share '\CNBCAOICXXXX6.ad.XXXX\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    ---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    ---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    ---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
    Execute query exec [sp_CP_GetPushRequestMachine] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Successfully retrieved information for machine CNBCAOICXXXX5 from DB SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Execute query exec [sp_CP_GetPushRequestMachineIP] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Execute query exec [sp_CP_GetPushRequestMachineResource] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Execute query exec [sp_CP_GetPushMachineName] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Received request: "2097274076" for machine name: "CNBCAOICXXXX5" on queue: "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Stored request "2097274076", machine name "CNBCAOICXXXX5", in queue "Processing". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097274076, 1 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
    ======>Begin Processing request: "2097274076", machine name: "CNBCAOICXXXX5" SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    Execute query exec [sp_IsMPAvailable] N'UCP' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    ---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    ---> Attempting to connect to administrative share '\CNBCAOICXXXX5.ad.XXXX\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    ---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    ---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    ---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
    Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:01 PM 11160 (0x2B98)
    Getting a new request from queue "Retry" after 100 millisecond delay. SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:01 PM 11160 (0x2B98)
    Sleeping for 60 minutes for queue "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:01 PM 11160 (0x2B98)
    ---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> The device CNBCAOICXXXX6.ad.XXXX does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> Attempting to connect to administrative share '\CNBCAOICXXXX6\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
    ---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> The device CNBCAOICXXXX5.ad.XXXX does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> Attempting to connect to administrative share '\CNBCAOICXXXX5\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
    ---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    ---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    ---> The device CNBCAOICXXXX6 does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    ---> ERROR: Unable to access target machine for request: "2097273958", machine name: "CNBCAOICXXXX6", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    Execute query exec [sp_CP_SetLastErrorCode] 2097273958, 53 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    Stored request "2097273958", machine name "CNBCAOICXXXX6", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097273958, 2 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
    Execute query exec [sp_CP_SetLatest] 2097273958, N'05/11/2022 04:43:46', 307 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:46 PM 25648 (0x6430)
    <======End request: "2097273958", machine name: "CNBCAOICXXXX6". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:46 PM 25648 (0x6430)
    ---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
    ---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
    ---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
    ---> The device CNBCAOICXXXX5 does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
    ---> ERROR: Unable to access target machine for request: "2097274076", machine name: "CNBCAOICXXXX5", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
    Execute query exec [sp_CP_SetLastErrorCode] 2097274076, 53 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
    Stored request "2097274076", machine name "CNBCAOICXXXX5", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
    Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097274076, 2 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
    Execute query exec [sp_CP_SetLatest] 2097274076, N'05/11/2022 04:43:50', 135 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
    <======End request: "2097274076", machine name: "CNBCAOICXXXX5". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)

    Any idea?

    Thanks,
    Dom

    0 comments
  3. Duchemin, Dominique 2,006 Reputation points
    2022-05-11T06:18:48.973+00:00

    Thanks Amandayou

    the NSLOOKUP from the Primary Server used to do the Client Push is reporting the IP Address on the client side:
    Machine1 IP: 10.10.103.186
    Machine2 IP: 10.10.103.196

    These IPs are in DNS

    But still failing to communicate !!!

    Thanks,
    Dom

  4. Duchemin, Dominique 2,006 Reputation points
    2022-05-16T16:03:14.843+00:00

    Hello,

    It is still not working... We are testing with the Network Team again today.
    Client push and GPO nothing is working

    Thanks,
    Dom

    0 comments
  5. Duchemin, Dominique 2,006 Reputation points
    2022-05-17T00:01:21.323+00:00

    Hello,

    Some tests were done this morning but no success...
    Still trying to find out which IP should be in DNS the Company 1 IP or the Company 2 IP as they are NATed...

    Thanks
    Dom

    0 comments