This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 8%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Getting error while installing client via client push method. Used this method, Because automatic site wide client installation is not working waited 2hrs no results.
attaching the error part.
FYI I am using MECM 2002 CB
======>Begin Processing request: "2097152002", machine name: "CLW70" SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
Execute query exec [sp_IsMPAvailable] N'LT1' SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> Attempting to connect to administrative share '\CLW70.LEO.COM\admin$' using account 'LEO\Administrator' SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> NetUseAdd succeeded! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> The 'best-shot' account has now succeeded 2 times and failed 0 times. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> Connected to administrative share on machine CLW70.LEO.COM using account 'LEO\Administrator' SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> Attempting to make IPC connection to share <\CLW70.LEO.COM\IPC$> with Kerberos authentication SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> SspiEncodeStringsAsAuthIdentity succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> SspiExcludePackage succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> SspiMarshalAuthIdentity succeeded for IPC$ authentication! SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:07 AM 6076 (0x17BC)
---> NetUseAdd failed: 64: dwParamError = 0 for IPC$ authentication SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:26 AM 6076 (0x17BC)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:26 AM 6076 (0x17BC)
---> Attempting to make IPC connection to share <\CLW70.LEO.COM\IPC$> SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:26 AM 6076 (0x17BC)
---> Searching for SMSClientInstall.* under '\CLW70.LEO.COM\admin$\' SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
---> Unable to connect to remote machine "CLW70.LEO.COM" using Kerberos with alternate account, error - 0x800706ba. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
--> NTLM fallback is enabled, remote machine "CLW70.LEO.COM" is continuing with client push. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
---> Unable to connect to WMI on remote machine "CLW70.LEO.COM", error = 0x800706ba. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
---> Unable to connect to remote machine "CLW70" using Kerberos with machine account, error - 0x80070005. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
--> NTLM fallback is enabled, remote machine "CLW70" is continuing with client push. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
---> Unable to connect to WMI on remote machine "CLW70", error = 0x80070005. SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
---> Deleting SMS Client Install Lock File '\CLW70.LEO.COM\admin$\SMSClientInstall.LT1' SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
Execute query exec [sp_CP_SetLastErrorCode] 2097152002, -2147024891 SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
Stored request "2097152002", machine name "CLW70", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097152002, 2 SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
Execute query exec [sp_CP_SetLatest] 2097152002, N'10/19/2021 19:25:27', 6 SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
<======End request: "2097152002", machine name: "CLW70". SMS_CLIENT_CONFIG_MANAGER 20-Oct-21 12:55:27 AM 6076 (0x17BC)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 69%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERJ%3C/text%3E%3C/svg%3E)
Well to start with you are using an unsupported version of CB. Secondly, how do you know that site wide upgrade is not working? Where are you checking?
By default, client push uses the computer account for the site server, i.e., if you have no accounts configured for client push, it will use the computer account. There's not much more to add as ultimately, the behavior is exactly the same, it just uses a different account. For this work, the site server's computer account must be a local admin on the target devices -- this is no different than a user account that you supply. The only difference here really is that the computer account password is automatically managed by AD, rotated every 30 days (by default), randomly set to a 120 character string, and cannot be logged into interactively. These characteristics all make it much easier to use and more secure as well (for this purpose).
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 99%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERD%3C/text%3E%3C/svg%3E)
Sorry, You meant to keep this empty?
I am using computer account only.
let me upgrade to the latest version 2107.
I will reach again if I got same issue.
Thanks for your help guys.
I am using computer account only.
That's not what the above log snippet shows.
Hi @Jason Sandys , Could you please share any urls/write-ups regards to using computer account in client push installation? I think I'm also facing the same issue. :(
Sorry, not following exactly what you want here. What information exactly are you after?
Sorry, I'll give a short brief. We have been seeing same behavior like mentioned in original post of this thread across many of our devices when they are discovered or found no CM Client installed. Error message is identical too. Also I read your suggestion to use computer account as client push account instead of user account. That's the one I'm interested to know more about.
Hi @sai krishna ，
Agree with RahulJindal, MECM 2002 CB arrives support end date, so it will cause unexpected problem.
It is suggested to upgraged to the latest sccm version to check if the problem is solved.
Here is the aticle about support for Configuration Manager current branch versions:
https://learn.microsoft.com/en-us/mem/configmgr/core/servers/manage/current-branch-versions-supported
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
ok, then let me upgrade to 2006 CB. I will check it again.
2006 is nearing end of support as well so not sure why you'd upgrade to it. 2107 is the latest. This won't address your issue though as the issue above is specific to the single client called out and connecting to it remotely using the account specified. Are you truly using the domain admin account though? If so, you need to stop and set up a least privilege accont for client push or better yet, use the computer account of the primary site server,
Also, there's no difference in functionality between automatic client push and console-initiated client push, one just happens to get kicked off automatically.
My guess as to why it can't connect successfully is a firewall not allowing the traffic or a local policy on the target system rejecting the remote auth attempt. Either way though, your first step is 100% to stop using the domain admin or any domain admin account -- that's just begging for trouble.
Error code 0x800706ba = "The RPC Server is unavailable"
Error code 0x80070005 = "Access is denied"
To Jason's point, there is almost certainly a firewall between the site server and the new client-to-be. If it's a newly built machine and there's not a domain policy that turns the Windows Firewall off, it will be on by default on all interfaces.
No domain admin account (+1)