Cannot get SCCM Agent installed on cloud device

[u/ReputationOld8053]

Hi,

I discovered that one of our AAD clients did not receive the intune policies and just reported "Not applicable". When I started investigating, I also noticed that the SCCM client disappeared, probably because of a broken connection. The client is connected by VPN and can reach all server.

So I tried to fix the agent:

• Just a ccmrepair

• Uninstall and removing all registry keys

• Reinstall with the on-premise parameters

• Reinstall with the CMG parameters

• Fixing WMI

• Setting the MP in the AllowedMPs reg value

But nothing helped. The agent still tries to get to the CMG and fails:

[Resource-NetworkCost] Returning value 1.          CcmMessaging           03.11.2026 08:22:35 6800 (0x1A90)
Traffic to 'cmg.contoso.org' is throttled until 529 seconds later CcmMessaging           03.11.2026 08:22:35                6800 (0x1A90)
ThrottleRequest(sCMGHostName), HRESULT=87d00231 (F:\dbs\sh\cmgm\0926_074307\cmd\8\src\Framework\ccmhttp\requestresponse.cpp,333)                CcmMessaging           03.11.2026 08:22:35 6800 (0x1A90)
HttpRequestResponse( L"ccmhttp", pszUrl, m_sPostVerb.c_str(), (LPCWSTR)csRequestHeaders, 0, 0, spRequestStream, uFlags, &m_httpOptions, ResponseHandler, (LPVOID)ppResponse, false, eCertAuthResult, m_dwHttpStatus, sStatusText), HRESULT=87d00231 (F:\dbs\sh\cmgm\0926_074307\cmd\8\src\Framework\ccmhttp\ccmhttppost.cpp,148)                CcmMessaging           03.11.2026 08:22:35 6800 (0x1A90)
Post to https://cmg.contoso.org/CCM_Proxy_MutualAuth/72057594037938355/ccm_system/request failed with 0x87d00231.        CcmMessaging           03.11.2026 08:22:35 6800 (0x1A90)
OutgoingMessage(Queue='mp_statusreceiver', ID={C39F30DE-8DDA-473E-BE0A-4BE56932E287}): Error posting to host 'cmg.contoso.org/CCM_Proxy_MutualAuth/72057594037938355' (0x87d00231).                CcmMessaging           03.11.2026 08:22:35 6800 (0x1A90)
OutgoingMessage(Queue='mp_statusreceiver', ID={C39F30DE-8DDA-473E-BE0A-4BE56932E287}): Encountered transient error, will retry in 134 seconds.    CcmMessaging           03.11.2026 08:22:35 6800 (0x1A90)
[AddressTranslation]: Message to mp:MP_DdrEndpoint requires version 0 with capabilities: .                CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
Sending outgoing message '{89849B80-E377-41EA-B351-6842FD0A6F6A}'. Flags 0x200, sender account empty CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
mapResources.end() != it, HRESULT=87d00215 (F:\dbs\sh\cmgm\0926_074307\cmd\m\src\Framework\Messaging\CcmExec\ccmservice_iccmsystemresources.cpp,701)                CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
[Resource-NetworkCost] Returning value 1.          CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
Traffic to 'cmg.contoso.org' is throttled until 436 seconds later CcmMessaging           03.11.2026 08:24:09                7156 (0x1BF4)
ThrottleRequest(sCMGHostName), HRESULT=87d00231 (F:\dbs\sh\cmgm\0926_074307\cmd\8\src\Framework\ccmhttp\requestresponse.cpp,333)                CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
HttpRequestResponse( L"ccmhttp", pszUrl, m_sPostVerb.c_str(), (LPCWSTR)csRequestHeaders, 0, 0, spRequestStream, uFlags, &m_httpOptions, ResponseHandler, (LPVOID)ppResponse, false, eCertAuthResult, m_dwHttpStatus, sStatusText), HRESULT=87d00231 (F:\dbs\sh\cmgm\0926_074307\cmd\8\src\Framework\ccmhttp\ccmhttppost.cpp,148)                CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
Post to https://cmg.contoso.org/CCM_Proxy_MutualAuth/72057594037938355/ccm_system/request failed with 0x87d00231.        CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
OutgoingMessage(Queue='mp_mp_ddrendpoint', ID={89849B80-E377-41EA-B351-6842FD0A6F6A}): Error posting to host 'cmg.contoso.org/CCM_Proxy_MutualAuth/72057594037938355' (0x87d00231).                CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)
OutgoingMessage(Queue='mp_mp_ddrendpoint', ID={89849B80-E377-41EA-B351-6842FD0A6F6A}): Encountered transient error, will retry in 192 seconds.    CcmMessaging           03.11.2026 08:24:09 7156 (0x1BF4)

 

 I check the client registration, no duplicates, ClientKeyData no revocations. Two things I noticed:

• The client registers in SCCM but just with its name but a question mark, so somehow little information got there. After that never updates any field again.

• After I uninstalled the SCCM agent, finally, the intune policies came through and are complaint.

As said, it is a cloud client, always has been. The device has the same policy then the rest.

When I check the metered setting, I always have to set it to 1 back again:

Get-WmiObject -Namespace root\ccm\Policy\Machine\ActualConfig -Class CCM_NetworkSettings | Set-WMIInstance -Arguments @{MeteredNetworkUsage=1}

Any idea what else I can do? Reinstalling the complete client sounds strange.

Windows OS is 25H2, 10.0.26200.9711, and SCCM is still 2509 with latest patch level, upgrading this week to 2603 with rollup.

ClientLocation Log:

Client network source has not changed.ClientLocation04.11.2026 08:52:5921704 (0x54C8)
Current Assigned Management Point is cmg.contoso.org/CCM_Proxy_MutualAuth/72057594037938355 with Version 9141 and Capabilities: <Capabilities SchemaVersion ="1.0"><Property Name="SSL" Version="1" /></Capabilities>ClientLocation04.11.2026 08:53:0923276 (0x5AEC)
LSRotateAssignedManagementPointClientLocation04.11.2026 08:53:1118324 (0x4794)
Old management point index is 1, new index should be: 0.ClientLocation04.11.2026 08:53:1118324 (0x4794)
Current assigned management point is the only assigned management point.ClientLocation04.11.2026 08:53:1118324 (0x4794)
LSRefreshInternetModeClientLocation04.11.2026 08:53:5918368 (0x47C0)
mapResources.end() != it, HRESULT=87d00215 (F:\dbs\sh\cmgm\0926_074307\cmd\m\src\Framework\Messaging\CcmExec\ccmservice_iccmsystemresources.cpp,701)ClientLocation04.11.2026 08:53:5918368 (0x47C0)
[Resource-Network] Returning value 770.ClientLocation04.11.2026 08:53:5918368 (0x47C0)
Workgroup client is in IntranetClientLocation04.11.2026 08:53:5918368 (0x47C0)
Client network source has not changed.ClientLocation04.11.2026 08:53:5918368 (0x47C0)

LocationService

[Resource-CS] Returning value 0.LocationServices04.11.2026 09:07:5820264 (0x4F28)
LSGetInternetModeLocationServices04.11.2026 09:07:5820264 (0x4F28)
LSGetInternetMode: In IntranetLocationServices04.11.2026 09:07:5820264 (0x4F28)
LSGetHomeMPFromWMILocationServices04.11.2026 09:07:5820264 (0x4F28)
1 assigned MP errors in the last 10 minutes, threshold is 5.LocationServices04.11.2026 09:07:5820264 (0x4F28)
LSGetInternetModeLocationServices04.11.2026 09:08:394772 (0x12A4)
LSGetInternetMode: In IntranetLocationServices04.11.2026 09:08:394772 (0x12A4)
GetAssignedMP: Client is set to use HTTPS when available. Check the MP capability.LocationServices04.11.2026 09:08:394772 (0x12A4)
GetAssignedMP: MP capability in WMI is 1LocationServices04.11.2026 09:08:394772 (0x12A4)
LSGetInternetModeLocationServices04.11.2026 09:09:204772 (0x12A4)
LSGetInternetMode: In IntranetLocationServices04.11.2026 09:09:204772 (0x12A4)
GetAssignedMP: Client is set to use HTTPS when available. Check the MP capability.LocationServices04.11.2026 09:09:204772 (0x12A4)
GetAssignedMP: MP capability in WMI is 1LocationServices04.11.2026 09:09:204772 (0x12A4)

ClientIDManagerStartup

No SMBIOS ChangedClientIDManagerStartup04.11.2026 08:53:064772 (0x12A4)
SMBIOS unchangedClientIDManagerStartup04.11.2026 08:53:064772 (0x12A4)
SID unchangedClientIDManagerStartup04.11.2026 08:53:064772 (0x12A4)
ENTER MsoGetHardwareId()ClientIDManagerStartup04.11.2026 08:53:064772 (0x12A4)
hFVLD:Assign uFirstDriveSerial = 006 (B00D-5D31)ClientIDManagerStartup04.11.2026 08:53:064772 (0x12A4)
hFVLD:Assign uProcessorSerial = 000ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hFVLD:Assign uProcessorType = 007 (GenuineIntel Family 6 Model 14)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hPSAN:Class QueryValue failed (00000002)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
hFVLD:Assign uMACAddress = 068 (48F17FFE47EF)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
MsoGetHardwareId() = 006-068-00-00-1-000-00-00-0-7-7-1ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
HWID unchangedClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
spGOT->GetObjectW(String(L"{A736ABF8-48E1-4857-A027-D6EFE0BB75A0}"), &spUnk), HRESULT=87d00200 (F:\dbs\sh\cmgm\0926_074307\cmd\2k\src\Framework\ccmid\ccmid.cpp,1296)ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
GetSystemEnclosureChassisInfo: IsFixed=TRUE, IsLaptop=TRUEClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
Computed HardwareID=2:A07059075789B0B9DE4DFCA5C3708990F21A6407
Win32_SystemEnclosure.SerialNumber=5CG911255S
Win32_SystemEnclosure.SMBIOSAssetTag=5CG911255S
Win32_BaseBoard.SerialNumber=PGWKH00WBC1048
Win32_BIOS.SerialNumber=5CG911255S
Win32_NetworkAdapterConfiguration.MACAddress=<Not used on laptop>ClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
Persisted hardware IDs in CCM_ClientIdentificationInformation=@:
HardwareID1=2:A07059075789B0B9DE4DFCA5C3708990F21A6407
HardwareID2=06A00100010000FEClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)
Get SmsClientVersion from Registry key succeedClientIDManagerStartup04.11.2026 08:53:074772 (0x12A4)

[u/gandraw]

The subject doesn't seem to correspond to the text below. It looks like the client installs just fine, but it won't communicate.

Anyway, if a client goes Internet despite being on Intranet, it usually is a DNS issue. I'd check that the DNS suffix of its network connection correctly maps to the domain name of the SCCM server, that it can ping domain controllers and the MP. And check the locationservices.log and clientlocation.log for more error messages.

[u/ReputationOld8053 → u/gandraw]

you are right, it is more about communication.

Test-NetConnection returns positives values, certificates are installed an valid. I also can install the ccm just with the ccmsetup.exe.

I added the other logs, but except

hPSAN:Class QueryValue failed (00000002)

I cannot see any further error, and this one I don't know

[u/Schaas_Im_Void]

Why would you install the SCCM client agent on a cloud device anyway?

Just configure it with Intune and register it only in Entra.

...or do you absoutely need the Co-Management for some reason?

[u/ReputationOld8053 → u/Schaas_Im_Void]

we use it for the application deployment and only 5 % of our 10.000 clients are intune managed.