SCCM Server Side Troubleshooting And SCCM Related Interview Questions

this conference will now be recorded okay guys so today I'm gonna discuss about little bit uh the server side monitoring uh server-side monitoring and common uh troubleshooting steps so for a server side and sacm if you go to the monitoring section here in SCCM console and then you go to system status you go to site status and check if anything is uh critical or warning I don't see any problem you see all are good all are okay all are green then I go to component status then make sure everything is green here too you see I have everything Green in case if something is not working properly then it is gonna give you the warning or critical message then you go to alerts here on the top left and you see the alert alert is zero I don't see any alert alert is not there but in case if you have something is not working then alert will be there understood then you have conflicting records conflicting records in case if two is two machines with same SCCM client okay if there are two computers with same SCCM client guid if the guid is same then it is going to give you the conflicting record right then a status message queries I think we have already discussed about a status message queries this is for auditing suppose if you would like to know who created a deployment or deleted or modify you can check it from here who created a collection modify or deleted you can check it from here okay this is for auditing now how you keep your secm healthy or you can monitor the status of SCCM you need to make sure all the SSM related services are running fine so if you go to search Services here Services Dot Services you click on the services then in the services you need to make sure all the secm related Services SMS related services are running you see SMS agent host running SMS executive is running SMS notification server running SMS site backup is fine if it is not running then it's okay because it will run only during backup okay it will not run all the time this is okay SMS side component manager running SMS side BSS writer running so you have to make sure all the SMS related services are running okay in case if it is not running you can start the service restart the service so suppose your SCCM server is not working properly it is giving some issues the jobs are not happening so you can restart this SMS component manager right click and restart and then SMS executive right click and restart this one one by one you have to go in a sequence the sequence first first one you have to restart this and then restart execute then you need to make sure the server has ample amount of free disk space in this PC you need to make sure the server has ample amount of free disk space just like I have 118 GB free space so this is okay but in case if the size is less than five gigabyte or one gigabyte then it will create a problem so make sure the server has good amount of free space plus IIs websites all the websites of management Point website distribution Point website Arrow up and running so how will you check you need to search IIs okay and click on this internet Information Services foreign this mecm and then application pools now you have to make sure the pools are started the pools are not stopped in case if the management Pool Management Point Pool is stopped then it will not work it will not communicate with the client so it started already okay management one distribution Point Pool is started in case if it is not started right click and start or restart recycle okay similarly if you go to the sides here and then expand size you have the web default website all the default website you see these are the default websites mpdp client communication client information these are the websites if you have some issues you can restart from here at the right hand side you have restart option okay so you need to make sure IIs sites are running and you need to make sure there is a IIs service let's go to services IIs you see is admin service it has to be running all the time in case if it is not running then it will not load any website the website will be uh will not be working so you have to check these things all the SMS related Services IIs service right and you need to make sure the alerts are not there you need to make sure the site status are all good you need to make sure component status are all good right and similarly you have to check the database server so let me show you on database I am on database now on the database server I need to search Services here services and I need to make sure the SQL related services are running SQL related Services you see SQL running SQL agent it's equal this one SQL SQL running SQL browser if it is not running that's okay if it is not running it is not required that it has to be running that is okay plus SMS related service has to be running SMS okay the SQL related service and SMS related services understood they have to be running all the time plus you need to make sure the ample amount of free disk space is there in C drive so C drive has got 55.9 gigabyte free space so this is okay foreign you have to add a space you need to um you can do the cleanup of temporary internet files delete The Unwanted files Plus in production environment you give you give at least 500 gigabyte space to C drive or 1tb C drive understood here I have given 80 80 gigabyte only but in production you give 500 minimum 500 GB to C drive okay so this is the only way by deleting the files or we can add uh we can add another Drive suppose if the drive size is less you can add another drive like D drive or e Drive you can add a new drive here all right move some of the files from C drive into that folder that right I don't know if I should ask this question so so that will be like connected with the uh or we have to do some like configuration to connect that driveway add a new disk now you have to purchase a new hard disk and add it in the in the computer tower that's a hardware thing you have to purchase a new hard disk and connect it okay so basically in order to keep your sscm sscm healthy you have to make sure as sscm administrator if you are working as a CCM administrator on daily basis you need to make sure you check the site status component status you check the conflicting record then you check the alerts right then you have to make sure all the services are working running in CCM server all the services are running in database server I mean there's the related services not all the services SMS related services and SQL related Services all of them are running okay plus the size the free disk space is available in C drive and D drive whatever the drives you have in the service not only in primary side but you also need to check in secondary site server as well side system server as well on database server to make sure everything is having proper you know ample amount of free disk space are you guys clear yes now I wanted you guys to ask questions prepare the question and ask for this session I don't know whether you guys have prepared any question Guru you had some question I think Arun yes yes tell me uh uh if some interview questions I have prepared yes they asked me console is not working how can you reconfigure it if console is not working so there are two issues either you don't have permission of the console or the console uh is not installed properly the installation of the console is not properly done so you can repair the console how will you repair the console you can go to the control panel okay app is dot CPL in the wherever the console is installed suppose console is installed in the uh in your computer or in primary site if the console is not working this is the console Microsoft endpoint configuration manager console you can uninstall or repair you have option to uninstall and repair so either repair or uninstall and reinstall so this is first first thing second thing if the if the permission is not there then you have to give permission you need to go to Administration here and then you have to go to security then you have to go to administrative users and then make sure the permission is there okay okay next they asked also what is the log file you have check with console log file is console log file is in C drive program files x86 and then Microsoft Configuration manager admin console and then logs admin log admin UI log this is the location where the log file is there C program files x86 Microsoft config manager admin console and in this one you need to open this one SMS admin ui.log and here if you let me close this and open in cm Trace because CM Trace will be showing up the live log so I'm gonna go to C drive program files Microsoft config manager and tools and then CM Trace now let me go back to that location okay I'm gonna close this console foreign okay so I have launched this these log files let me open the console again so in case if some issues are there then that is gonna get recorded in into the log files you see what does it say missing management class description missing missing missing missing that is fine missing because we haven't configured these things I have not configured these things that is the reason the description is missing but that's okay it is apart from missing thing it is opening the console fine you see the console is fine but it is giving you let me just close this one this one it is giving you all the details I opened the file but it is giving you missing management description missing management this thing that's fine but it is not giving any error message this is the log file SMS admin ui.log got it okay what else uh they asked me the what is the self signed certificate sales sign certificate by default Microsoft SCCM gives self-signed certificate to the client computers so that the client computers can be trusted okay so if you go to Administration and then you go to security and then certificates you see SMS this is the certificate which will be issued to the machines SMS issuing this is the certificate which SCCM is issuing to the computers whenever the computer whenever the client is get installed for example you install the client on database or domain or SCCM or Windows 10 or any machine it is going to issue a certificate a certificate is just like that you are certifying that computer that this computer belongs to your hierarchy so SCCM primary site is gonna issue the certificate for the client certificate it's called self-site certificate there is another certificate that is pki certificates pki that you have to create a new certificate not SCCM SCCM will not issue the certificate you will be creating the certificate from where you will create the certificate you will create the certificate Authority on domain server how will you do that you need to install ad roles and features and then go next next next and then you have to choose the first one I active directory this one active directory certificate service so once this is done you can issue certificate for computers certificate is to is to just uh making sure the machine belongs to your company your domain your network if the other machine Let's suppose I bring my laptop and connect to your network it will not work why because that machine my machine does not have the certificate okay okay what else what is Content Library mechanism Content Library mechanism is to store the content on a on distribution point so in distribution suppose I'll show you in C drive we have Content Library okay Content Library basically have three folders data Library file library and package Library so it has a kind of interconnection between these folders so whenever you are whenever you are Distributing the content basically it gets con with the file comes here into these folders okay one file the package Library will have the signature file these are ini signature files then file Library will have the content the actual content will come here okay actual content will be here and it will be there in the dot different format Dot Sig format sorry signature file Yeah so basically the content will come here into the this one okay and once the content once the content comes here the machine will download the content from here all the machine will download the content from where from the Content Library Okay so if the file is there suppose there are two files uh dot NET Framework suppose you have software library and then application management application there are two applications which needs dotnet framework let's say uh Java Java is an application and Java and Google Chrome you have two applications here Java and Google Chrome I have not added any applications that's the reason it is blank now in case if you have two application called Java and Google Chrome now both need.net framework as a prerequisite so you add a DOT NET 3.net Framework okay in both of them but it will not copy twice it will copy only once in the Content Library why because it says oh dot NET Framework even though it is needed on two two applications but it is the same file so it will check the file and then it will keep the copy of only one file so that it can save some space otherwise it if you keep on adding the same file uh the the space will not get utilized properly understood yeah you mean like uh same repeated in applications uh take only one file and only one time it copies only one time so that space otherwise it will remember suppose if it is creating multiple copy then it will increase the size unnecessarily right yeah so that is Content Library if you need more details you know hierarchy and uh the description then you can just Google it out sscm Content Library I think I sent in the document here I have that one uh Content Library deep dive into Content Library yes this is uh you can watch this video okay do you know only the world's best University hi I'm gonna send this link to you guys on the chat window okay so Content Library um that's gonna show you the architecture and the log files and all more details you can go through that video what else foreign validation content validation is that is basically SCCM distribution Point validates the content from the source file source file suppose if you in your C drive you have a source file you remember we have created a source folder yeah yeah right so Source folder has let's say Source folder has two files so distribution points should also have how many files two files right yes suppose in source file there is an application called 7zip four and in 7-Zip folder you have two two files so when you distribute the 7-Zip how many files should be there in the distribution point two files right so it validates okay it validates whether you have two files or not so that is called content validation it automatically happens every week once in a week um let me see that content validation distribution point right click on the distribution Point properties during the installation of distribution point you get that one content validation thing yes content validation you see content validation select the priority that's fine occurs everyone doing now what what is basically having content validation verifies the Integrity of package on the distribution point so it will check whether the files are integrated integrated or not whether all the files are there or not on the distribution Point whatever the files are there on the source file it will compare from The Source location in case if it is file is missing so every one week it is gonna do the validation and whatever the missing files are there it will recopy understood let's say somebody deleted the file from distribution Point accidentally so how it will happen it will re-copy so to review the validation status for packages check the content status node in the monitoring space and you can enable that content validation every one week it is gonna do or you can do every uh Friday or Tuesday depends on it here we can schedule uh two check the package the content Integrity on the distribution point anything else if we are Distributing the content to the DP if it is fail how to troubleshoot you can check the log file test MGR log file is there in if you go to C drive program files and then Microsoft Configuration manager and then logs inside logs you have test MGR test MGR is the log file which shows you whether it is Distributing or not so for example let me show you if I go to software library and then packages for example I'm gonna distribute this one uh uh no it's already distributed this one right click and then what is the package ID one zero zero zero zero one that's the package ID right click and then distribute content mm-hmm next add distribution point I'm going to choose the distribution Point click OK next next finish so what I did I distributed the content right so you will see in the dist MGR log file that's going to show you the status [Music] you see it is showing it is showing you something started doing something what does it say let me go back it's going down down down down down down down yes adding package this to the processing queue started from here this was the package ID right yes package ID was what this one now currently zero three Allowed by case didn't started it started Distributing the package the processing the package and then no action uh as specified however there may be package server changes this package starting adding the this is the location then content DP so create a distribution processing of this this now waiting for all distribution point there is only one distribution point we have distributed okay yes we have not distributed to many distribution point and that is this distribution point okay now waiting in dp3 attempting to add this package on DP attempting to add this package on the distribution point then all the distribution point is in the site server package is content package there is nothing to be copied over what is what does it say it is in the it it is in the same server the distribution point is on the site server itself on the same server it is not a remote distribution Point okay then no network connection is needed why because it's on the same server then finished get DP usable drive it check the drive how much space is there and create a signature signature shares distribution point and then share this exist uh finish to get finished get Content Library this currently using this and successfully created yeah successfully created updated package in the data source and uh dp3 all DP have completed you see all DP has completed the distribution there is only one distribution point but in case if you've chosen if you have chosen many distribution points so all the distribution Point completed and that's done I don't see any issues here so in case if the issue is there so how will you troubleshoot the issues come there are two types of generally few issues come for example if the seed the space is not there suppose the distribution point the target distribution point in space is not there then it is going to give you the space issue in this log file got it yes in case if it shows you the the authentication suppose the access is not there to save the file into this folder into into this Content Library right so access is not there then it is gonna give you the access issue in case if IIs website is down the distribution Point IIs website is down then it is going to give you that message the HTTP Port is not working or something like that HTTP website is not a uh accessible or something so those issues can be traced in this MGR log file okay how we will fix that issue that's reflection let's see it is green it is green how we will fix you will add space in case if the space issue is there then you will have to add a space how will you add a space I mean you have to remove the remove the class wanted packages unwanted you can delete The Unwanted packages to free up the space plus you can delete The Unwanted files like temporary internet files junk files uh you know the files which are not needed in the server you can delete them plus you have to make sure the access is there how will you make sure the access is there you know uh the folder is there with permission is given already in case if permission is not there then you have to right click and give access to and then a specific people and then give access properly so access then IIs in case of IIs website is down then you have to start the IIs website so these kind of issues you can get it in the while Distributing a package what else what are the possible reasons to synchronization failure yes synchronization of wsus yes updates possible is an internet internet issues one possible reason second possible reason the space issue in case the space is less than the synchronization will have to fail because it is it has to it will utilize some of the space in that drive plus in case if you have memory issue right General issue is memory issue let's say how much memory you have I have four three gigabyte in This Server three gigabyte you see I have given three gigabyte but in case if the wsus is gonna consume more than three gigabyte then it will fail the memory issue okay so you have to make sure you have ample amount of memory so in production we give like 16 GB Ram or uh 64 gigabyte of Ram or 96 gigabyte of ram ample amount of RAM is there so that um do you you don't run into the memory issue Plus in case if the wsus service is down let's say if you go to the services here W I don't have WSU service yet because I haven't installed it but in the last one if WSU service is down you will have one WSU service in case that is down then it will not do the synchronization understood in case if IIs is admin is down then it will not done the do the synchronization these are some common issues okay wsus pool is there in IIs you will have wsus pool in case of wsus pool is down I'll show you I don't have wsus yet I haven't installed it the wsus pool will be here under under this you have application pools you will see one pool called wsus pool down at the bottom you will have that pool but in case if the the wsus pool is down as you see it is started but in case if it is stopped then it is not gonna do the synchronization no no what are the log files you can check synchronization synchronization log file there are two log files generally you check in programs files Microsoft config manager logs you have wcm log which shows you the connection between secm and database SCCM and wsus this is wsus can I this is the log file which shows you the connection between wsus and sacm wcm the main log file the synchronization log file is the last one W sync manager this is the log file which shows you the synchronization issues and progress whether it is wow happening or not or whether it is failed wsync manager.log got it if anything fails in dialogue files how to reconcile uh if any error message came in synchronization how to troubleshoot yeah yeah so how to troubleshoot you have to check the log file wsync manager will tell you which law which error suppose if the I I if the IIs pool is down you have to start the pool if the internet is not there then it will say internet connectivity is not there then you have to make sure internet connectivity is which is there in case if the C drive space is full then it will say a space issue all right okay how to reconfigure the MP on DPS reconfigure you can delete and reinstall you can come to this Administration and you can go to the server where MP and DP is installed you see DP and MP is installed let's say if you have to re redo it right click and remove MP right click and remove DP right and then we install it how will you reinstall right click and add site system roles again how will you reinstall MP suppose I suppose if you have to install an MP on database right click and then install ads Access Control right yes then you have to go next you choose MP here choose MLK and choose DP for example you would like to install MP and DP both on that server you choose that next now this is the distribution Point uh setting you see a specified distribution Point settings for example it's a new DP so I'm going to type in new distribution point so I'm creating a new DP on database server I already have a distribution point on management point now I'm going to create a new DP only on database next and then it is going to be HTTP or https depends on the connection what we have So currently I have HTTP so I'm going to leave that as it is next drive setting so suppose I will Reserve 10 GB in case if the size of the C drive is less than 10 GB then it will generate warning message that that the size is less than 10 GB kindly increase the size okay so 10 GB is the size I'm reserving okay now where will you save The Package C drive for example C or E or d whether whichever is your primary location you have to choose your primary location suppose D drive is my primary location okay so it is going to start this to start the file storing in D drive all the primary content so initially it will use the D drive let's say if d Drive is full then what will it do it is going to store in e Drive so all the files will go in here primary secondary Drive C here yeah primary and secondary drives okay so in case if D drive size is less than 10 gigabyte it will start using e-drive then next full distribution point this is full distribution point is generally needed on the location which has low bandwidth so that it will pull the content from different distribution Point not from the main distribution point so if you want you can enable that one and add the resistance huh what is pulling distribution Point distribution points suppose you have one you have main distribution point the primary distribution point is in New York let's say New York has the primary DP you have primary DP here in New York and you have two location one in Mumbai another one is in Chennai and both have DP Mumbai also have a distribution point and Chennai also have a distribution Point got it yeah yeah now you install a new server new location let's say Delhi is your new branch office new location so you are going to install a distribution point now you install new display it's a new DPA it's a new distribution point now it is up to you whether it will fetch the content from here or you can take it from here so if you are not taking from the main DP then you can make it as a pool DP so you can make it as a pull DP that means it is going to take the content from the closest distribution point closest the Delhi will take it from the nearest distribution Point yeah Delhi will take it from uh Mumbai Mumbai is the nearest one not Chennai so it is going to take it from Mumbai so Mumbai this will become full DP it is not taking it from the content the main DB it is getting the content from the Mumbai it's a full DP yes not main DP so nearest DP so this is you can enable this one and add the DP from where it will fetch the content so here you can you have only one DP but in case if you have more DP you can choose the DP from where it will take the content got it okay then next enable pixie I have already shown that to you this is for operating system deployment I'm gonna leave that as it is next multicast if you want the data to be transferred more than 25 machines more than 25 machines then you have to enable multicast multicast is for uh transferring contents on more than 25 machines in one go then only you choose multicast we don't need that one next content validation we have already discussed about it so it is going to validate the content from this uh the it is going to check the Integrity of the package on the distribution point if any files are mismatched or any issues it will copy the con content next boundary group is needed to suppose this is this distribution point is going to manage Mumbai computer so you can create a Mumbai boundary group so all the machines in Mumbai will take the content from this distribution Point okay next now here is the management Point configuration management point will work on http and generate Alert in case management point is down next management point is going to use the same database or different use database but generally we don't use this method because here n number of configuration is needed if you would like to create a new database so let's use the site database so management point is going to use the same database where the primary site is writing the data so it management point will store the configuration and everything it will collect the inventory from the computers and put it in the same database where primary site is writing next next finish simple it is gonna the install management point and distribution point on database server got it yes got it cancel what else what is end-to-end patching non-technical to n on-technical yes patching I showed you now already patch deployment end to end patching means what deploying deployment of patches to the Target machines through software Library you know I have already shown that to you in the training in software Library you go to software updates all software updates and then you synchronize the update from here and then the upgrade will come here you can download and deploy the updates to the Target machines and the Machine will get up to date but there are some non-technical what is non-technical and Technical patching and that's what I little bit confused I don't know what is non-technical they are referring to patching is all technical okay non-technical maybe they want you to to tell the theory part Theory you can tell them that it is the machine needs to get update uh as and when Microsoft is releasing the update to mitigate the vulnerability plus to add some features right to fix bugs so we have to deploy updates what what kind of updates critical and security updates are needed Microsoft is a releasing update every second Tuesday of the month foreign patching end-to-end patching I showed you now already we just discussed about it yeah that that part okay yeah well mainly they are asking what is your day-to-day activities like the day-to-day activity you can tell them I have to make sure the servers are up to us servers are healthy I don't have any alerts so I just showed you how to make sure your servers are healthy so you need to go to monitoring and check the alerts you have to check the site system you have to check the component status you need to check the services you need to check the database uh you need you have to check the free space in C drive and other drives plus your daily task is has to be deploying applications so you get calls from your users or you get tickets to deploy application on certain computers right so you create package and deploy application then every month you deploy updates right you deploy updates to the Target machines plus you have to make sure the the machines are building properly the Imaging is happening all over the places wherever the machines needs to get built so the image deployment is happening properly you need to create a task sequence and deploy a task sequence to the Target collection the field Engineers the engineers who are building the machines they don't have any problem in case they are facing problem you have to make sure you fix those problems take a look find out the issues and add some drivers in the task sequence as per the models right these are some common common uh common jobs I mean common day-to-day profile you can tell them these are the things which you are working okay okay are they asking like what is uh what is a WMA issues how to configure wmi what how to fix your wmi issues wmifics issues you have to repair wmi how will you repair wmi suppose wmi issue is there in this client machine this is my client Windows 11 machine and I need to check whether wmi is working or not in order to check wmi wmi is what it's a DNA of the computer wmi is what it's a DNA suppose I need to know about your life cycle and your age and everything I have to check your DNA understood similarly the computer DNA is wmi repository so how will you check the repository of wmi you need to go to that folder every machine has it if you go to this PC and C drive and then windows and then system 32 and then webm and then inside WebMD you have repository so wmi basically this is wmi repository it's like a small database every machine has a small database which contains information so this repository contains your computer information Hardware information software information registry information dll information all the information so whatever the computers has it everything it is present here suppose if you need to know the application which are installed in the computer it is there if you need to know the updates which are installed in the computer it is there if you need to know how much RAM is there how much processor motherboard and serial number everything is there but it is not in human readable format it is in machine readable format so your SCCM client is basically taking everything from here from wmi repository your SCCM client is completely dependent on this one in case if you have the repository file is corrupted let's say a CCM client is not able to access these files then what will happen your SCCM client will not function properly it will not be able to get the information from the computer so how will you repair wmi repository so generally first you test it how will you test it you right click on start and then run and then type in webm test now you can click on connect and then connect now here we have many classes and then instance and other things if you would like to see whether it is properly getting the information or not you can click on query now I have to get the query wmi query so I have I don't have the query handy let me I have created a video for this let me see my video in my how to's test and repair wmi Repository so the query you see foreign okay so the query wmi is basically it's gonna run the query open select select means it works in works like SQL query select star star means everything from from where from win 32 for example this is the class I'm I need to get the information of this class win32 product that means installed application class and then click on apply it's gonna give me the information in progress you see in progress now I can get the information that what all software is installed in this computer this is giving you the information that Google Chrome is installed a visual C plus plus Mozilla Firefox is installed it is giving me the information okay it is giving me what is giving me information suppose if you yeah so did this wmi working fine I don't have any problem with this wmi but let me show you the user profile these are some wmi queries I have okay suppose I need to know the the hardware information cim product okay let me type in cim Pro I don't know what is the cim product cim apply what do we get okay cim product what does it say it gives some okay so it's it shows the application itself cim and product between 32 both are same uh process let's try this process win32 process sorry connect connect query select star from from win32 underscore process it's gonna give us all the process which is running at the moment if you would like to see what all processes are running in this computer foreign so I did I not oh I have to connect query I think I have not typed in the select start from main32 underscore process select select oh select spelling is incorrect shield and apply see these are the process are running in this machine if you would like to know the services what else service service yes service so service says service these are the services running on this machine okay so this wmi is running fine so you have to test it like this so you can tell them that first you have to test it in case if the queries are not working you tried querying but it is not working then what you do you repair the wmi how will you repair you go to Services you go to services.msc which is and then you have to pause one service called Windows management instrumentation wmi service windows management instrumentation this one you have to pause this service okay pause it now you need to go ahead and delete this folder or you can rename it to old or something repository folder I'm gonna delete it gone understood and then you have to resume when you resume it it will create a new folder again you see it created a new folder and it will re collect all the information from the computer you see it is doing the wmi query in the back end and it is collecting the information from the machine you see the size is increasing it is collecting the re so repopulating all the information in the DNA of the machine yeah this is how you repair wmi Repository okay okay understood yeah understood okay guys I have to go now okay anyway question you have to let me know okay yes gosh if this was a very informative session I should try it because if we can have such session next week for one like yeah yeah you we can we can do that on Tuesday thank you thank you very much thank you very much thank you thank you bye thank you

Channel: SCCM Training Videos

Views: 3,412

Keywords: SCCM tutorial, SCCM tutorial Videos, ConfigMgr tutorial, SCCM 2019 tutorial, Make Me It Expert, SCCM Interview Question And Answer, SCCM 2016, SCCM tutorial In Chennai, SCCM tutorial in Mumbai, SCCM tutorial in India, SCCM tutorial in Canada, sccm online tutorial videos for beginners, sccm tutorial videos, sccm online tutorial india, sccm online tutorial usa, sccm online tutorial uk, sccm tutorial for learners, SCCM 2019, MECM, SCCM Training, SCCM 2020, SCCM2002, intune

Id: wUFK6bkzAdE

Length: 54min 27sec (3267 seconds)

Published: Sat Jan 28 2023