SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

I had a chance to install and test SCCM 2012 console servicing extension BETA. It seems very interesting and very very useful download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas I’m not going  to take walk through of servicing extension tool. You can find it in Eswar’s post http://eskonr.com/2014/07/sccm-configmgr-2012-servicing-extension-tool-available/ or Peter’s blog http://configmgrblog.com/2014/07/14/configuration-manager-servicing-extension-beta-released/.

SCCM 2012 console servicing Extension tool is useful to automate some of the tasks like query creation and also this helps to get the overview of sites in your SCCM 2012 SP1 or R2 environment. SCCM 2012 servicing extension add-on will also help to list the SCCM 2012 client versions in your environment. In this post I’m going to explain 1) The importance of having Internet connection / access for CM12 console servicing extn, 2) log file details of Service Extension 3) How to resolve/fix access denied error on CU level details. Also, a quick walk through to help to download applications or tools from Microsoft Connect. I’ve seen many people complain about the problem with Microsoft Connect downloads . They are not able to download the applications or tools, the downloads are not available for them etc…download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

Most of our servers in corporate world don’t have direct access to internet because of security constraints. If that is the case in your environment then we can’t take FULL advantages of SCCM 2012 console servicing extension tool. Probably, SCCM 2012 servicing extension tool would be useful when you have installed sccm / configmgr 2012 console on a remote client or terminal server which has internet connection.

When you don’t have internet access on the SCCM 2012 console machine then you will only have limited exposure to Site Versions details. The servicing extension tool won’t provide details in the nodes including Site Updates, Client Targeting and Blogs when you don’t have internet connection.Following error will be displayed on the Site Update and Blogs nodes.

SCCM 2012 Servicing Extension – Site Servicing Node without Internet Connection

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

An Error occurred while loading the updates feed: The remote name could not be resolved: 'go.microsoft.com'
Below are notifications about releases that can be installed on the selected configuration. Visit the displayed URL for More Information
Error: Failed refreshing updates content
The remote name could not be resolved: 'go.microsoft.com'

SCCM 2012 Servicing Extension – Site Updates Node without Internet Connection

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

SCCM 2012 Servicing Extension – Client Targeting Node without Internet Connection

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

SCCM 2012 Servicing Extension – Blogs Node without Internet Connection

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

Another tip that I wanted to provide in this post is not to worry about the “Access Denied” error against CU version detail of your site server in Site Versions node in SCCM 2012 servicing extension tool. I had noticed that when you’re running from the SCCM 2012 console from CAS server then this extension tool is not able to read the registry key (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\CULevel) of the local server. However, this extension tool could be able to access to CULevel details from remote primary SCCM 2012 server. As you can see in the following picture.

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

You can see the error details in the SCCM 2012 Servicing extension log file called ServicingExtension.log. Log file path E:\Program Files\Microsoft Configuration Manager\AdminConsole\AdminUILog\ServicingExtension.log 

[2052, PID:2204][07/15/2014 10:01:37] :CabFileDataSource: System.Net.WebException downloading CAB file from http://go.microsoft.com/fwlink/?LinkId=386333: The remote name could not be resolved: 'go.microsoft.com'
[3872, PID:2204][07/15/2014 10:02:06] :SecurityException while reading CU level from server ACNCMCAS.Configmgr.com: Requested registry access is not allowed.

To fix this CU level access denied issue from SCCM 2012 Servicing Extension tool – Site Servicing – Site Versions node, you need to provide exclusive READ access or permission to the user who is running the SCCM 2012 console. This READ permission should be given to the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Setup\. After the changes in the permission, servicing extension tool is able to access the details about CU version installed on your site server (CAS server for my scenario) and it’s visible in the CM 12 console. I’ve not installed any CUs that is why it shows NONE.

When you run the SCCM console from primary server then you won’t be able to read the CU level details from of local primary server (registry) unless and until you provide above registry permissions. This is strange as my user Anoop@configmgr.com is part of local administrators group.

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

Sample in Built Query available on SCCM 2012 Servicing Extension Tool

ConfigMgr clients below version 5.00.7958.1303 (Cumulative Update 2 for System Center 2012 R2 Configuration Manager)

SELECT * FROM SMS_R_System WHERE Client = 1 AND ClientType != 3 AND ClientVersion IS NOT NULL AND ClientVersion < '5.00.7958.1303'

 Software requirements or prerequisite for SCCM 2012 Console Servicing Extension tool

The following must be installed on the server or client computer on which CM12 Servicing Extension will be installed:

  1. An operating system supported by SCCM 2012. Note that Windows XP clients and Windows Server 2003 clients are not supported.
  2. The SCCM 2012 console from ConfigMgr 2012 SP1 or later, or SCCM 2012 R2 or later.  

I’ve seen loads of people facing problems in downloading the application which are under connect. So I thought giving a quick walk through of Microsoft connect download :). First of all, you need to register and should be part of microsoft connect open BETA program (windows Live ID can be used here). 

Are you not able download SCCM 2012 Servicing Extension from Microsoft connect ? Are you getting “Page NOT error on found” on Microsoft Connect page ;

1. Are you logged into Microsoft Connect ?Try to login via http://connect.microsoft.com/?lc=1033

2. The user who logged should part of Configuration Manager ConfigMgr Open Beta Program under https://connect.microsoft.com/directory/ to download the tool mentioned above.

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

3. When you’re part of ConfigMgr Open Beta program then you can get into the following page  https://connect.microsoft.com/ConfigurationManagervnext and click on Downlaods

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

 4. Ok, now in this page https://connect.microsoft.com/ConfigurationManagervnext/Downloads, you can see the currently available downloads for this ConfigMgr open beta program.

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

 

5. Once you click on SC 2012 Configuration Manager Servicing Extension from the above link then it will take you to actual DOWNLOAD page https://connect.microsoft.com/ConfigurationManagervnext/Downloads/DownloadDetails.aspx?DownloadID=53752

download console configmgr2012 configmgr sccm cm2012  SCCM 2012 Console Servicing Extension BETA Internet Connection Requirements and Permission Gotchas

Posted in: CM2012, ConfigMgr (SCCM), Configmgr2012, Console, Download

4 Comments

  1. Wayne says:

    Sorry, adding my lo on user “administrator@domain.com” and setting that key permissions to just read still gives me a “denied”
    Is a reboot needed?

  2. Wayne says:

    Nope. Reboot made no difference.

  3. Wayne says:

    However, running the console as admin fixed the problem!

Leave a Comment and Contact Anoop

Visit Us On TwitterVisit Us On FacebookVisit Us On Google PlusVisit Us On YoutubeVisit Us On LinkedinCheck Our Feed