Why are Wake On Lan scheduled deployments not working SCCM 1802? - sccm

Wake On Lan is enabled, subnet directed broadcast method, port = 9 (I've tried several other ports).
I've worked with my network team to allow subnet directed broadcasts, and it does work using Right Click Tools (run from server) using same subnet directed broadcast method and same ports, including port 9.
Scheduled deployments are set to Wake Up but when the deadline passes the computers do not wake up. I have two other SCCM servers that I'm able to run scheduled deployments on just fine.
I've disabled Wake On Lan, monitored to make sure it is removed, enabled it again, monitored to verify it finishes installing, but it still isn't working.
I have rebooted the server as well.

This is indeed a bug in SCCM Current Branch 1802, and there was no charge for my Microsoft Premiere Support ticket. We did get the problem resolved.
There were two missing registry keys, and a missing folder, that appeared to be the culprit. We did add/change a couple of other keys, but they did not change the symptoms at all.
From MS Support:
"CB 1802 is lacking the following registry keys (exported from my UPGRADED environment):"
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\77]
"Inbox Name"="SMS_AMT_PROXY_WOL"
"Location Type"=dword:00000001
"NAL Path"=""
"Relative Path"="inboxes\amtproxymgr.box\wol.box"
"Service Rights"=dword:00000054
"User Rights"=dword:00000000
"Guest Rights"=dword:00000000
"Monitoring Enabled"=dword:00000001
(and)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Instances\77]
"Inbox Name"="SMS_AMT_PROXY_WOL"
"Location Type"=dword:00000001
"Assistant Flags"=dword:00000000
"NAL Path"=""
"Relative Path"="inboxes\amtproxymgr.box\wol.box"
"UNC Path"="\\PRI1.CONTOSO.LOCAL\SMS_P01\inboxes\amtproxymgr.box\wol.box"
"Monitoring Enabled"=dword:00000001
On my server I had to add the two keys by creating new keys using the next available number in Inbox Definitions and Inbox Instances (mine was 76).
I also had to create the wol.box folder inside of the amtproxymgr.box folder. I simply copied the existing folder named "bad" and named it wol.box.
Make sure the UNC path has your actual server FQDN name AND SCCM site name share. The above example is from the MS support person's test install.
Yes the double backslashes are there for single backslash, and quadruple for double. Not sure why but that is how many reg keys work.
As soon as I had these registry keys and the wol.box folder, the persistent errors that had been occurring every five seconds, immediately ceased and new data showed in the log that matched what I see on my other two server.

Related

WLANPolicy, distribuited to Windows11 Client on Microsoft Active Directory (WPA2 + AES)

I have an on premise AD with around 70 clients, we distribuite a wifi policy that has the pre-configuration to join the local Private Wireless Network (the one that has access to printers and network drive).
There is a computer (there was another one but was formatted) that works perfectly, join the domain, etc but when I download the wlan policy ( C:\Windows\wlansvc\Policies ) doesn't work at all.
Checking the file inside the policies, seems to work perfectl, i compared it with a compare plugin to the same configuration file that has been downloaded to my computer and still it always results in "Cannot connect to Wifi Private".
Both of the computers are Windows 11, both in domain, both under the same OU, both with policies applied.. but when I apply the certificate to the second one, there is no way.
Tried to remove it from domain, rejoin, but the only way that I have to make it work is to literally cancel manually the Wlansvc policy file, restart the WLAN network service and then I can join with user and password.
Tried also to reset network services, nothing..
Anyone who had the same issue? Anyone that knows what else I could check?
Thanks

How to prevent multiple users from simultaneously accessing an Azure VM?

We created a VM as a replacement for physical machine with rarely used software on it.
When I tested it I noticed when a second user accesses the VM, the first user is kicked out and sees the message "You have been disconnected because another connection was made to the remote computer".
However, on another VM that wasn't set up by me, I'm getting the warning "Another user is signed in. If you continue, they’ll be disconnected. Do you want to sign in any way?"
What VM or Windows setting(s) do I need to change to display this message on the new VM?
I found the following answer on serverfault more helpful than the "copy & paste reply" by Jabbar.
The message you want will appear for the 3rd user on Windows server:
By default a Windows VM in Azure is configured for remote administration, which allows up to 2 users to access the machine to undertake remote administration of that machine. If a third user attempts to connect you will see this message. you will see this if a user has disconnected, but not logged off so their session is till running and using a slot.
Windows Server will, by default, let 2 concurrent users log on. Windows 10, will only allow only 1 user.

How to restore access to a windows shared folder after host password change?

I have a shared folder on a windows 10 host machine. I could access it from a windows 10 client machine, where I had set "remember credentials" when first accessing the share. I changed the password on the host. Now the client cannot access the shared folder. That was expected. But I could not find a way on the client to allow the user to re-establish access to the shared folder.
I expected it would ask for credentials again. However I got a network error saying that windows cannot access the host machine.
Based on a number of entries on various forums, I tried a few things. The credentials manager on the client does not show the host. I stopped and restarted file and printer sharing on the client, without any change in the result. Network diagnosis and the windows troubleshooter gave no help.
The problem was due to some previous connections remaining in the network table, even though disconnected, as presented by the "net use" command from the command prompt.
>net use
Status Local Remote Network
--------------------------------------------------------------------------
Disconnected \\192.168.1.71\IPC$ Microsoft Windows Network
Disconnected \\HOST\IPC$ Microsoft Windows Network
After deleting them (via "net use /delete") the next attempt to access the host asked for credentials. Yay!
I began the path to the solution when I tried
net use z: \\host\shared /user:admin password
which gave system error 1219 stating multiple connections to a server are not allowed. Disconnect all previous connections and try again. Obviously, even though known to be disconnected, the entries prevented reconnection.

Browsing UNC Paths with a Mobile Emulator/Device

What would cause an emulator unable to view the network UNC shares? When attempting to open any computer on the network via 'Open Path' or Internet Explorer, I am tossed "The network path was not found." followed by "Network resource cannot be found or you do not have permission to access the network." Things to note:
Connecting to the IP address does not work.
I am able to browse the internet via the emulator.
ActiveSync has been configured appropriately and I have installed the needed drivers for the adapter, and the emulator is cradled.
Firewall disabled/setup with correct forwardings.
Network folder permissions are setup properly.
What strikes me as odd is I have also attempted to browse UNC shares on a physical Windows Mobile 5 device, with the same issue. This leads me to believe something within our network settings is causing this but I'm not sure where to start. People have recommended checking ActiveDirectory security policies, but what policies affect UNC shares? This has turned into a rather serious issue because until I am able to resolve this, I am unable to go through with setting up merge replication. Has anyone experienced this and successfully resolved this issue?
Your network is looking for authentication.
I get that here at my work place, too.
As long as your network key is entered correctly, you should be able to try browsing to that same path 2 or 3 more times, still getting those same obnoxious ("The network path was not found." followed by "Network resource cannot be found or you do not have permission to access the network.") messages.
At one of those times, a login box should appear where you type in a Username, Password, and Domain.
You will also have the ability at this point to save your password so you are not prompted for it every time you attempt to access something across your network.
Now here's the real crapper: After you save your Username/Password combination, there does not appear to be any mechanism within the Windows Mobile device to change that password after it expires on your network. You will never be prompted again to change that password, either. You will only get one of those silly messages above because your password is incorrect.
The only solution to this seems to be to reset the device. I have had a question open with Microsoft for about 3 years now, and it has been passed from one forum to another. I've finally just decided that it must not be able to be done, but Microsoft has never written back to tell me that.

Issues remoting to perfmon

Hey all,
I'm having trouble with PerfMon on one system out of fifteen in a development environment. Accessing it from the local machine is fine but connecting to it remotely throws a "Cannot connect" error.
Each machine is running Win 2003, is connected to the same domain and I have admin rights to all.
There were some services set to disabled which are normally enabled by default so I've set these to match the other machines on the network - still have the same problem.
Any ideas?
Cheers
**Update**
Ok - I found it was the remote registry service not running correctly causing the above error; Once that was enabled Perfmon is now telling me "No such interface supported".
If I connect through Computer Management, it fails the first time, but the second attempt is successful. Connecting through perfmon fails everytime.
Fixed - for anyone that runs into this issue, hopefully this can help you..
Enabling Remote Registry fixed my first problem.
The second issue, "No such interface supported" turned out to be permissions issues within the registry. Apparently the machine had some pretty obscure permissions set to specific registry keys a long time ago, which are now irrelevant.
Resetting permissions with secedit fixed it up -
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
Perfmon counters are now accessible remotely.
We encountered the second issue - "No such interface supported" when attempting to "Connect to another computer" in Performance monitor.
All the rules and services are running.
We found the following:
If the user was added to the local admin group, they were able to connect to another computer (irrespective of belonging to the Performance Monitor group).
If the user was not a local admin and in the performance monitor group - we were unable to connect to another computer via the "Connect to another computer" context menu.
But we were able to add the performance counters. In Performance monitor when you add a counter there is an option to "Select counters from computer". We were able to connect to the counters on the remote machine this way. Also note that if you are planning on data collecting, you would need to set the correct credentials (by default it appears to run under a local system user).
I fixed my case as follows:
Add Firewall rule Performance Logs and Alerts from the predefined rule list.
From client, run the Performance Monitor as the remote user
Eg: runas /user:remote_machine\username "mmc perfmon.msc"
Of course, the user must be at least in the user groups "Performance Log users" or "Performance Monitor Users".
The reason why perfmon.exe do not want to connect to the remote server is, it wants to connect to the Perf Monitor and the Perf Logs (Data collections).
So you have to add the user account to also the Log User group and of course to the Monitor Users.
you don't need to be local admin on the remote server!

Resources