question

DucheminDominique-7551 avatar image
0 Votes"
DucheminDominique-7551 asked Amandayou-MSFT commented

Client with NatedIP

Hello,

I have some desktops at a remote site with NATed IP:

On the client side:
Machine1 IP: 10.10.103.186
Machine2 IP: 10.10.103.196

On the CM Side:
Machine1 IP: 10.253.52.100
Machine2 IP: 10.253.52.101

Any recommendations, comments? Should I used only the boundaries set to the CM Side?
For now apparently I could not send/install the Client
ccm.log

---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> The device CNBCAXXXYYYY6.ad does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> Trying the 'best-shot' account which worked for previous CCRs (index = 0x0) SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> Attempting to connect to administrative share '\\CNBCAXXXYYYY6\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:36 AM 22480 (0x57D0)
---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> The device CNBCAXXXYYYY6 does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
---> ERROR: Unable to access target machine for request: "2097273958", machine name: "CNBCAXXXYYYY6", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Execute query exec [sp_CP_SetLastErrorCode] 2097273958, 53 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Stored request "2097273958", machine name "CNBCAXXXYYYY6", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097273958, 2 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Execute query exec [sp_CP_SetLatest] 2097273958, N'04/30/2022 07:44:57', 62 SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
<======End request: "2097273958", machine name: "CNBCAXXXYYYY6". SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:44:57 AM 22480 (0x57D0)
Thread has been inactive too long. Closing thread SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:54:57 AM 22480 (0x57D0)
--- This thread is terminating due to inactivity SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:54:57 AM 22480 (0x57D0)
----- Terminated CCR processing thread. There are now 0 processing threads SMS_CLIENT_CONFIG_MANAGER 4/30/2022 12:54:57 AM 22480 (0x57D0)



Which IP should be seen in the properties on the machine?
200735-2022-05-10-16-08-31-oic-bca-ip.png
Is this IP coming from the System Discovery? Is it the local IP or the NATedIP?

As we have 5 accounts for the client push depending on the Group I was expected the 3rd or 5th for these two specific machines to proceed...
200786-2022-05-10-22-49-20-client-push-accounts.png

Thanks,
Dom


mem-cm-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DucheminDominique-7551 avatar image
0 Votes"
DucheminDominique-7551 answered DucheminDominique-7551 published

Hello,

I tried both IPs and still the same issue...


======>Begin Processing request: "2097273958", machine name: "CNBCAOICXXXX6" SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
Execute query exec [sp_IsMPAvailable] N'UCP' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
---> Attempting to connect to administrative share '\\CNBCAOICXXXX6.ad.XXXX\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 25648 (0x6430)
Execute query exec [sp_CP_GetPushRequestMachine] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Successfully retrieved information for machine CNBCAOICXXXX5 from DB SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Execute query exec [sp_CP_GetPushRequestMachineIP] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Execute query exec [sp_CP_GetPushRequestMachineResource] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Execute query exec [sp_CP_GetPushMachineName] 2097274076 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Received request: "2097274076" for machine name: "CNBCAOICXXXX5" on queue: "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Stored request "2097274076", machine name "CNBCAOICXXXX5", in queue "Processing". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097274076, 1 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 11160 (0x2B98)
======>Begin Processing request: "2097274076", machine name: "CNBCAOICXXXX5" SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
Execute query exec [sp_IsMPAvailable] N'UCP' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
---> Attempting to connect to administrative share '\\CNBCAOICXXXX5.ad.XXXX\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:42:59 PM 34216 (0x85A8)
Submitted request successfully SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:01 PM 11160 (0x2B98)
Getting a new request from queue "Retry" after 100 millisecond delay. SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:01 PM 11160 (0x2B98)
Sleeping for 60 minutes for queue "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:01 PM 11160 (0x2B98)
---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> The device CNBCAOICXXXX6.ad.XXXX does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> Attempting to connect to administrative share '\\CNBCAOICXXXX6\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:24 PM 25648 (0x6430)
---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> The device CNBCAOICXXXX5.ad.XXXX does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> Attempting to connect to administrative share '\\CNBCAOICXXXX5\admin$' using account 'AD\svcconfigmgrsrv' SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> SspiEncodeStringsAsAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> SspiExcludePackage succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> SspiMarshalAuthIdentity succeeded! SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:28 PM 34216 (0x85A8)
---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
---> The device CNBCAOICXXXX6 does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
---> ERROR: Unable to access target machine for request: "2097273958", machine name: "CNBCAOICXXXX6", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
Execute query exec [sp_CP_SetLastErrorCode] 2097273958, 53 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
Stored request "2097273958", machine name "CNBCAOICXXXX6", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097273958, 2 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:45 PM 25648 (0x6430)
Execute query exec [sp_CP_SetLatest] 2097273958, N'05/11/2022 04:43:46', 307 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:46 PM 25648 (0x6430)
<======End request: "2097273958", machine name: "CNBCAOICXXXX6". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:46 PM 25648 (0x6430)
---> NetUseAdd failed: 53: dwParamError = 0 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
---> NTLM fallback is enabled SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
---> WNetAddConnection2 failed (LOGON32_LOGON_NEW_CREDENTIALS) using account AD\svcconfigmgrsrv (00000035) SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
---> The device CNBCAOICXXXX5 does not exist on the network. Giving up SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:49 PM 34216 (0x85A8)
---> ERROR: Unable to access target machine for request: "2097274076", machine name: "CNBCAOICXXXX5", access denied or invalid network path. SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
Execute query exec [sp_CP_SetLastErrorCode] 2097274076, 53 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
Stored request "2097274076", machine name "CNBCAOICXXXX5", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
Execute query exec [sp_CP_SetPushRequestMachineStatus] 2097274076, 2 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
Execute query exec [sp_CP_SetLatest] 2097274076, N'05/11/2022 04:43:50', 135 SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)
<======End request: "2097274076", machine name: "CNBCAOICXXXX5". SMS_CLIENT_CONFIG_MANAGER 5/10/2022 9:43:50 PM 34216 (0x85A8)



Any idea?

Thanks,
Dom

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Amandayou-MSFT avatar image
2 Votes"
Amandayou-MSFT answered

Hi,

When pushing the client, it has no relationship with the IP address reported by the client. We could use nslookup to connect the client name on the site server to check it is successful.

For example, nslookup the client, and there will show the Address, we could use this IP address.

200768-511.png

If this method does not work, we could use another way to find the specific IP to access the client, and then add this IP in DNS.

If client push installation is not suitable, we could use group policy installation method, here is the related link we could refer to:
https://docs.microsoft.com/en-us/mem/configmgr/core/clients/deploy/deploy-clients-to-windows-computers#BKMK_ClientGP


If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



511.png (15.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DucheminDominique-7551 avatar image
0 Votes"
DucheminDominique-7551 answered Amandayou-MSFT commented

Thanks Amandayou

the NSLOOKUP from the Primary Server used to do the Client Push is reporting the IP Address on the client side:
Machine1 IP: 10.10.103.186
Machine2 IP: 10.10.103.196

These IPs are in DNS

But still failing to communicate !!!

Thanks,
Dom

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If client push installation method does not work, as I mentioned, we could use group policy method to install the client.

Best regards,
Amanda

0 Votes 0 ·

Hi,

Just checking in to see if there is any update. May we know the current status of the question? If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you.

Thanks and regards,
Amanda

0 Votes 0 ·
DucheminDominique-7551 avatar image
0 Votes"
DucheminDominique-7551 answered

Hello,

It is still not working... We are testing with the Network Team again today.
Client push and GPO nothing is working

Thanks,
Dom

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DucheminDominique-7551 avatar image
0 Votes"
DucheminDominique-7551 answered

Hello,

Some tests were done this morning but no success...
Still trying to find out which IP should be in DNS the Company 1 IP or the Company 2 IP as they are NATed...

Thanks
Dom

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DucheminDominique-7551 avatar image
0 Votes"
DucheminDominique-7551 answered Amandayou-MSFT commented

Hello,

Still trying to find out which IP should be in DNS the Company 1 IP or the Company 2 IP as they are NATed...
Apparently one machine got the Configuration Manager Client installed not the 2nd machine!!!
The inventory is completed on one machine...
Both machines are configured the same way in DNS.

Thanks
Dom

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

firstly, configuration manager does not care about the network configuration, whether it is NATed or not, only requesting the packet can reach each other. For our issue, it is obviously a network issue, could you help to share the detailed network topology so that as I can try to ask some network guy to see if they have any comments and get back if there is any?

1 Vote 1 ·