FEP Client Troubleshooting: The ConfigMgr Client
When you implement FEP, you might need to troubleshoot certain things that require actually troubleshooting the Configuration Manager agent. The below steps should get you started - for complete detail on troubleshooting Configuration Manager, see http://technet.microsoft.com/en-us/library/bb632812.aspx.
Client side
Install the ConfigMgr Toolkit V2 it will make things a lot easier to investigate and will allow you to view the FEP policy internals within the ConfigMgr policy classes in WMI using PolicySpy: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=5A47B972-95D2-46B1-AB14-5D0CBCE54EB8/
Logs: - use the SMS Trace that comes with the toolkit and check two locations for the log files: C:\Windows\System32\CCM\Logs and :C:\Windows\SysWOW64\CCM\Logs.
- CAS.log – Package download issues - look for lines like Download location found 0 - \SCCMSERVER.DOMAIN\SMSPKGC$\CMP00004\ or Download started for content CMP00003.1
- Execmgr.log – look for something like: Successfully prepared command line "C:\Windows\system32\cscript.exe" "ApplyPolicy.vbs" or Raised Program Prelim Success Event for Ad:CMP20003, Package:CMP00005, Program: Install
- DCMAgent – for any DCM issues
- ClientLocation – SCCM connectivity issues – look for Current Management Point is SCCMSERVER.DOMAIN with version 6487 and capabilities: <Capabilities SchemaVersion="1.0"/>.
- InventoryAgent.log - Hardware+Software inventory - Inventory: Cycle completed in 0.047 seconds
- DataTransferService.log – This is probably where you’re going to find an error.
PolicySpy (toolkit) - check the client info – see that you are connected to the correct server *just like info from the logs. Look for instances of CCM_ISV_SoftwarePolicy to find the FEP policies inside of the ConfigMgr policy classes. They will be listed under ISV Data properties.
- Use Ctrl+R (Request Machine Assignments) to try to speed up things
- Use Ctrl+E (Evaluate Machine Policy)
Control Panel applet: Open Configuration Manager from the Control Panel
- DCM: click the Configuration tab (you should have some baselines there), click Evaluate for the FEP Baseline named "FEP Monitoring - Definitions and Health Status". Monitor DCMAgent.log, review Report (click View Report in the applet). Note that the client only sends state messages up every 15 minutes at a minimum, so it may take a while before definition status is updated.
- Hardware Inventory: click the Actions tab, and then click Hardware inventory cycle. Click Initiate Action. Review the InventoryAgent.log file.
Check firewall settings
Ensure that at least the .NET Framework 2.0 is installed. This is required for the DCM feature of ConfigMgr to function at all.
Last but not least – try a restart
Server side
- Check in ConfigMgr to see how BITS is configured for clients: Site Management -> <Site Code> -> Site Settings -> Client Agents -> Computer Client Agent –> right-click and then click Properties. On the BITS tab, look at the throttling window and the transfer rates both inside and outside of the throttling window.
- Check logs in C:\Program Files (x86)\Microsoft Configuration Manager\Logs
- CCM log – Server status, fallback status, ports etc…
- Replmgr.log – replication issues
- In the Configuration Manager dashboard, check:
- System Status
- Advertisement status errors
- Site Status errors
- Check boundaries
- Check that you actually assigned the program: In the Configuration Manager tree, expand Software distribution, expand Advertisements, right-click the adverstisement, click Properties, and then click the Schedule tab.
And since there are a lot of other things, you might want to check the Configuration Manager Support Team Blog https://blogs.technet.com/b/configurationmgr/