SCCM-Failed to get certificate. Error: 0x80004005

Problem:

ClientIDManagerStartup.log files repeat the below error continually  ,

RegTask: Failed to get certificate. Error: 0x80004005 

Failed to find the certificate in the store, retry 1.
Failed to find the certificate in the store, retry 2.

Failed to find the certificate in the store, retry 3.
Failed to find the certificate in the store, retry 4. Failed to find the certificate in the store, retry 5. Already refreshed within the last 10 minutes, Sleeping for the next 9 minutes before reattempt.

Solution:

Windows XP:

Drive:\Documents and Settings\all users\ApplicationData\Microsoft\Crypto\RSA\MachineKeys\ 19c5cf9c7b5dc9de3e548adb70398402_50e417e0-e461-474b-96e2-077b80325612.sys.

Windows 7:

Drive:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\19c5cf9c7b5dc9de3e548adb70398402_50e417e0-e461-474b-96e2-077b80325612.sys.

Note:

Cannot locate the same file (19c5cf9c7b5dc9de3e548adb70398402_50e417e0-e461-474b-96e2-077b80325612.sys) mentioned above, check only start with 19cXXXX.

Connectivity Test Failed

Expanding the Test Steps, I found the following error message:
ExRCA is attempting to send the OPTIONS command to the server.
Testing of the OPTIONS command failed. For more information, see Additional Details.
    Additional Details:

A Web Exception occurred because an HTTP 401 – Unauthorized response was received from IIS7

Solution

Mention the , Domain\User Name (or UPN) is ,

username@domainname.com

Eg:

user1@expertise.com

Event ID 106 MSExchange Common

Manually add RPC Client Access performance counters

• Start Exchange Management Shell
• Add-PSSnapin Microsoft.Exchange.Management.PowerShell.Setup
• New-PerfCounters -DefinitionFileName "C:\Program Files\Microsoft\Exchange Server\V14\Setup\Perf\RpcClientAccessPerformanceCounters.xml" 

Task ‘Microsoft Exchange Server ‘reported error (0x8004010F): The operation failed. An object could not be found.

Error:

Task ‘Microsoft Exchange Server ‘reported error (0x8004010F): The operation failed. An object could not be found.

Solution:

1.      Tools->Options

2.      Click Mail Setup tab, click Send/Receive button

3.      Select All Accounts group and click Edit

4.      Please unchecked Download offline address book and click OK to save the change.

Please click Send/Receive button again to check whether the issue persist

SCCM to manage clients in a workgroup or untrusted domain

Fallback Status Point (FSP):

 A “catch all” Site System for Clients that cannot be installed because of various issues such as assignment, or their inability to communicate with their Management Point (MP).  Not required by default, but recommended to help with Client installation issues.

Management Point (MP) :

 SCCM Clients do not communicate directly with the SCCM Site Server and vice versa.  Instead all communication is facilitated via the Management Point.  A Default Management Point needs to be defined in every Site that has Intranet Clients.

Server Locator Point (SLP) :

 Responsible for informing SCCM Clients which MP they should access in order to install the SCCM Client software. Only required in some Client Deployment scenarios.

CCMCERTSEL :

Select domainname.com domain certificate that matches

Condition:

1. During client installation, the logged-on user must possess local administrator rights on the workgroup system.

2. Workgroup clients must be able to locate a server locator point for site assignment because they cannot query Active Directory Domain Services

           3. User targeted advertisements are not possible.

           4. Using a workgroup client as a branch distribution point is not supported.

           5. Workgroup clients cannot locate their default management point from Active Directory Domain Services, and instead must use DNS or WINS

          6. Global roaming is not supported, because clients cannot query Active Directory Domain Services for site information.

          7. Active directory system, user or user group discovery is not possible

          8. Use of software installation account is not possible

          9. Client Push installation is not possible

         10. Logon initiated installation is not possible

Required Host Entries

Once you have done this, from the run Command type c:\Windows\system32\drivers\etc

10.0.0.49                 SCCM                                                              #PRE

10.0.0.49                "SMS_SLP                            \0X1A"               #PRE

10.0.0.49                "MP_CA1                                \0X1A"            #PRE

Where ,

10.0.0.49        is our SCCM server IP,

SCCM            is our SCCM server Hostname and

CA1                is site code.

There should be 20 spaces between the quotes ("" i.e "MP_CA1 \0x1A")

Go to File Menu and click on save as type the file name as "hosts" shown below

SCCM Client Installation

 C:\>cd  Client


C:\Client>CCMSETUP.EXE FSP=server name SMSMP=domainname.com SMSSLP= server name SMSCACHESIZE=1000 CCMLOGMAXHISTORY=2 SMSSITECODE=Site code  CMCERTSEL=domainname.com
 Eg:
 C:\Client>CCMSETUP.EXE FSP=sccm SMSMP=expertise.com SMSSLP=sccm SMSCACHESIZE=1000 CCMLOGMAXHISTORY=2 SMSSITECODE=CA1 CCMCERTSEL= expertise.com

Start ->Run, Type Services.msc

After completed this process client will detect in the SCCM server  workgroup name.

Troubleshooting Tips

To troubleshoot the client push account,monitor the ccm.log file on the site server
To troubleshoot the network discovery,monitor the netdisc.log file on the site server
To troubleshoot the client assignment process,monitor the clientlocation.log file on the client

How to change the Websense Remote Filtering Server passphrase (Password)

1.    From the Remote Filtering Server, open a command prompt and navigate to the Websense bin directory.

2.    Enter the following command, replacing '<newpassphrase>' with your new passphrase:

    SecureWispProxyOptions.exe -p <newpassphrase>    (or)

    SecureWISPProxy -p <newpassphrase>

Eg:

                    SecureWispProxyOptions.exe -p password

3.    Restart the RFS service.

4.  After restart the service take the client package from C:\Programfiles(X86)\Websecuirity\bin\DFTAgent\Remote Filtering\32Bit

path and install this package in client machine

Exchange 2010 SP1 Public Folder Item Recovery

ExFolder.exe keeps in Exchange/bin Directory

& run TurnOffSNVerificationForExFolders.reg

Connect and select a Global Catalog and the public folder database where the deleted public folder was on.


Download the ExFolders

http://gallery.technet.microsoft.com/Exchange-2010-SP1-ExFolders-e6bfd405

File à Connect,

FQDN:Servername.Domainname.com