1.sms client config manage 提示 客戶端無(wú)法安裝成功,1003,依存服務(wù)無(wú)法啟動(dòng)
客戶端請(qǐng)求安裝
為了成功使用客戶端請(qǐng)求來(lái)安裝 Configuration Manager 2007 客戶端,您必須將下列項(xiàng)目作為例外添加到Windows 防火墻:
文件和打印機(jī)共享 Windows 管理規(guī)范 (WMI)
為了使客戶端計(jì)算機(jī)與 Configuration Manager 2007 站點(diǎn)系統(tǒng)通信,您必須將下列項(xiàng)目作為例外添加到Windows 防火墻:
TCP 端口 80(用于 HTTP 通信)
TCP 端口 443(用于 HTTPS 通信)
這些是默認(rèn)端口號(hào),可以在 Configuration Manager 2007 中更改。有關(guān)詳細(xì)信息,請(qǐng)參閱如何為Configuration Manager 客戶端配置請(qǐng)求端口。如果這些端口已更改,您還必須在 Windows防火墻上配置匹配的例外。
網(wǎng)絡(luò)訪問(wèn)保護(hù)
為了使客戶端計(jì)算機(jī)與系統(tǒng)健康驗(yàn)證程序點(diǎn)成功通信,您需要允許下列端口:
UDP 67 和 UDP 68,用于 DHCP
TCP 80/443,用于 IPSec
遠(yuǎn)程控制
為了使用 Configuration Manager 2007 的遠(yuǎn)程工具功能,您需要允許下列端口:
TCP 端口 2701
TCP 端口 2702
On the computer running Windows Firewall, open ControlPanel.
Right-click
Onthe
The following Configuration Manager 2007 features requireexceptions to be made on the Windows Firewall:
If you are running the Configuration Manager console on acomputer running Windows Firewall, queries will fail the first timethey are run.
After failing to run the first time, the operating systemdisplays a dialog box asking if you want to unblock statview.exe.If you unblock statview.exe, future queries will run withouterrors. You can also manually add statview.exe to the list ofprograms and services onthe
In order to successfully use client push to install theConfiguration Manager 2007 client, you must add the following asexceptions to the Windows Firewall:
In order to successfully use Group Policy to install theConfiguration Manager 2007 client, you mustadd
In order for client computers to communicate with ConfigurationManager 2007 site systems, you must add the following as exceptionsto the Windows Firewall:
TCPPort
In order for client computers to successfully communicate withthe system health validator point, you need to allow the followingports:
In order to use the remote tools features of ConfigurationManager 2007, you need to allow the following ports:
To enable Remote Assistance to be initiated from the SMSAdministrator console, add both the customprogram
To enable Windows event viewer, Windows performance monitor andWindows diagnostics to be accessed from the Configuration Managerconsole, you must enable
============
客戶端批準(zhǔn)方式怎么選的, 自動(dòng)批準(zhǔn)全部還是自動(dòng)批準(zhǔn)信任域? 如果是只批準(zhǔn)信任域,站點(diǎn)又是跨域的,需要在Management Point上設(shè)置信任域。如果有非域內(nèi)的機(jī)器,需要手動(dòng)批準(zhǔn)。
http://technet.microsoft.com/en-us/library/bb694183.aspx
還有其他可能原因,例如:
1. GUID重復(fù)??梢栽诳蛻舳诉\(yùn)行CCMDelCert強(qiáng)制獲得新的GUID。
http://support.microsoft.com/kb/828367
2. 客戶端和MP在不同的林并而且為外部信任關(guān)系。MP對(duì)客戶端的批準(zhǔn)是要通過(guò)Kerberos驗(yàn)證的。Kerberos不能穿透林。
===================================
根據(jù)該錯(cuò)誤信息,我建議您嘗試以下步驟來(lái)解決該問(wèn)題:
步驟1: 請(qǐng)?jiān)谝慌_(tái)有問(wèn)題的客戶端上檢查,確保SCCM push installation帳戶屬于本地管理員組。
步驟2: 在那臺(tái)有問(wèn)題的客戶端,暫時(shí)關(guān)閉firewall,然后再次測(cè)試該問(wèn)題。
步驟3: 在那臺(tái)有問(wèn)題的客戶端,打開命令行窗口,運(yùn)行“net share”,確保admin$ share存在
步驟4:在那臺(tái)有問(wèn)題的客戶端上,確??蛻舳瞬灰獑⒂肧MB signing,檢查以下注冊(cè)表鍵值: Hkey_Local_Machine\System\CurrentControlSet\Services\LanManServer\Parameters EnableSecuritySignature -> make sure the value is set to 1 RequireSecuritySignature -> make sure the value is set to 0 Hkey_Local_Machine\System\CurrentControlSet\Services\LanManworkstation\Parameters EnableSecuritySignature -> make sure the value is set to 1 RequireSecuritySignature -> make sure the value is set to 0
如果更改了以上任何注冊(cè)表鍵值,請(qǐng)重啟該客戶端,然后再次嘗試從SCCM服務(wù)器端安裝客戶端。如果問(wèn)題仍然存在,請(qǐng)幫我收集以下信息: SCCM server: <SCCM installation path>\logs\ 在那臺(tái)有問(wèn)題的客戶端: %systemroot%\system32\ccmsetup
另外:
1. 該客戶端的IP地址是被屬于Site boundary中的。
2. 此外,我想知道您是如何定義source file的,即您在哪里存放client.msi文件和ccmsetup.exe文件,請(qǐng)告訴我您的share path。請(qǐng)確保該share path中沒有空格。
3. 另外,請(qǐng)從一臺(tái)好的客戶端上導(dǎo)出%systemroot%\system32\ccmsetup上的日志文件,這樣我可以做一個(gè)比較。
聯(lián)系客服