当我尝试从 SCCM 2012 运行 OSD 时遇到了一个奇怪的问题。
我们有一个部署任务序列，当添加到相关 SCCM 集合时，它可以从 PXE 启动到未知计算机（要求输入计算机名称）和已知计算机正常工作。
尝试让相同的任务序列适用于在职工作站，这样我们就不必在所有位置使用 PXE，因为它并不是在所有地方都有效。在我们的案例中使用 SCCM 2012 软件中心更有意义，因为所有机器都已在旧 SOE 上安装了 SCCM 2012 客户端。
如果我只是将任务序列原封不动地通告给端点，它就会无法开始运行，并声称找不到内容。查看日志并不能发现分发点中缺少哪个包。
为了进行故障排除，我克隆了工作任务序列，禁用了除 OS WIM 之外的几乎所有步骤以及重新启动到 WinPE 等所需的步骤。一旦部署到端点，它现在可以成功启动并重新启动 PC，但是现在在应用操作系统步骤时出现错误 0x80070002。
我的故障排除现在指向基于证书的问题，但是，这并不能解释为什么它在 PXE 启动时会起作用。
!--------------------------------------------------------------------------------------------! TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Successfully completed the action (Partition Disk 0) with the exit win32 code 0 TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
MP server https://svrCM001.domain.site. Ports 80,443. CRL=false. TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Setting authenticator TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Set authenticator in transport TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Sending StatusMessage TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Setting message signatures. TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Setting the authenticator. TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
CLibSMSMessageWinHttpTransport::Send: URL: svrCM001.domain.site:443 CCM_POST /ccm_system_AltAuth/request TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
In SSL, but with no client cert TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
In SSL, but with no media cert TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
[TSMESSAGING] : dwStatusInformationLength is 4
TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
[TSMESSAGING] : *lpvStatusInformation is 0x8
TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
[TSMESSAGING] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Error. Received 0x80072f8f from WinHttpSendRequest. TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
hr, HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,8919) TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
sending with winhttp failed; 80072f8f TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Will retry in 6 second(s) TSManager 11/11/2014 6:11:19 AM 488 (0x01E8)
Retrying... TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
CLibSMSMessageWinHttpTransport::Send: URL: svrCM001.domain.site:443 CCM_POST /ccm_system_AltAuth/request TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
In SSL, but with no client cert TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
In SSL, but with no media cert TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
[TSMESSAGING] : dwStatusInformationLength is 4
TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
[TSMESSAGING] : *lpvStatusInformation is 0x8
TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
[TSMESSAGING] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
Error. Received 0x80072f8f from WinHttpSendRequest. TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
hr, HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,8919) TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
sending with winhttp failed; 80072f8f TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
Will retry in 10 second(s) TSManager 11/11/2014 6:11:26 AM 488 (0x01E8)
Retrying... TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
CLibSMSMessageWinHttpTransport::Send: URL: svrCM001.domain.site:443 CCM_POST /ccm_system_AltAuth/request TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
In SSL, but with no client cert TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
In SSL, but with no media cert TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
[TSMESSAGING] : dwStatusInformationLength is 4
TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
[TSMESSAGING] : *lpvStatusInformation is 0x8
TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
[TSMESSAGING] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
Error. Received 0x80072f8f from WinHttpSendRequest. TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
hr, HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,8919) TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
sending with winhttp failed; 80072f8f TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
Will retry in 21 second(s) TSManager 11/11/2014 6:11:36 AM 488 (0x01E8)
Retrying... TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
CLibSMSMessageWinHttpTransport::Send: URL: svrCM001.domain.site:443 CCM_POST /ccm_system_AltAuth/request TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
In SSL, but with no client cert TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
In SSL, but with no media cert TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
[TSMESSAGING] : dwStatusInformationLength is 4
TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
[TSMESSAGING] : *lpvStatusInformation is 0x8
TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
[TSMESSAGING] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
Error. Received 0x80072f8f from WinHttpSendRequest. TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
hr, HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,8919) TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
sending with winhttp failed; 80072f8f TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
Will retry in 45 second(s) TSManager 11/11/2014 6:11:58 AM 488 (0x01E8)
Retrying... TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
CLibSMSMessageWinHttpTransport::Send: URL: svrCM001.domain.site:443 CCM_POST /ccm_system_AltAuth/request TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
In SSL, but with no client cert TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
In SSL, but with no media cert TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): WINHTTP_CALLBACK_STATUS_SECURE_FAILURE Encountered TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
[TSMESSAGING] : dwStatusInformationLength is 4
TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
[TSMESSAGING] : *lpvStatusInformation is 0x8
TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
[TSMESSAGING] : WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA is set
TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
[TSMESSAGING] AsyncCallback(): ----------------------------------------------------------------- TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Error. Received 0x80072f8f from WinHttpSendRequest. TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
hr, HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,8919) TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
sending with winhttp failed; 80072f8f TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
End of retries TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Send (pReply, nReplySize), HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,1950) TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
failed to send the request TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
DoRequest (sReply, false), HRESULT=80072f8f (e:\nts_sccm_release\sms\framework\osdmessaging\libsmsmessaging.cpp,4048) TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Failed to send status message (80072f8f) TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
smStatusMessage.Send(), HRESULT=80072f8f (e:\qfe\nts\sms\framework\tscore\utils.cpp,5975) TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Error calling message lib Send(). Code 0x80072f8f TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Non fatal error 0x80072f8f in sending task sequence execution status message to MP TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Set a global environment variable _SMSTSLastActionRetCode=0 TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Set a global environment variable _SMSTSLastActionSucceeded=true TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
Expand a string: %_SMSTSMDataPath%\Logs TSManager 11/11/2014 6:12:44 AM 488 (0x01E8)
答案1
这个问题最终还是没有得到解决。尽管问题明确指向证书认证问题，但相同的启动 wim 在 PXE 启动、USB 启动和预缓存启动时都能正常工作。
因此，我们部署的“解决方案”是将任务序列的交付更改为“在启动任务序列之前在本地下载所有内容”。这迫使端点在仍在 Windows 中时下载启动 wim，从而避免在 WinPE 中出现任何身份验证问题。
干杯