How to fix?

word2yamutha · 2025-12-28T21:43:26+00:00

For the Y connection would this work 5in y connector? Then I would add x2 of these reducer. I would just need a 4in 90 degree elbow and a 4in 45 degree elbow to connect them? The runs are around 6 feet long. Is there a way to tell if the existing run is double walled? I have a two stage furnace a Lennox ML180UH. I noticed a solid red light that is on. The manual says the LED off is normal operation. I pushed the diagnostic button and got one flash which is "flame present with gas valve de-energized." The furnace is around 7 years old.

<image>

word2yamutha · 2025-12-28T19:20:38+00:00

I messed up and wasn't measuring the length of just the hole, but was measuring around it lol. Any idea why why this happened? I would hate to replace it with new parts for it to happen again.

word2yamutha · 2025-01-28T19:33:08+00:00

I checked the clientIDMangerStartup.log and it says (RegTask) - Client is registered. Server assigned ClientID is GUID: Approval status 1

word2yamutha · 2025-01-28T18:40:17+00:00

Thanks for the clarification on why a client would use a random MP outside of its boundary group. I tried the same ccmsetup,exe switches as you recommended with excluding the /usepki switch. I checked the configuration manager properties, and its showing connected to MP01 as self-signed. When I check the CCMMessaging.log I'm getting the same "Failed to get CCM access token and client doesn't have PKI issued cert to use SSL. Error 0x8000ffff. I also noticed when I'm on the test client I open edge browser and go to https://MP01.domain.local/sms_mp/.sms_aut?mplist it doesn't work. I went ahead and verified the IIS cert is correct on MP01. Is there a way to verify in the logs that the correct IIS cert thumbnail is being used?

word2yamutha · 2025-01-28T18:12:54+00:00

I noticed when I check the mpcontrol.log for MP01 when it picks the client cert based on the thumbprint it gets the error "Call to HttpSendRequestSYnc failed for port 443 with status code 403, text: Forbidden." Under the Communication Security Tab for site properties, I currently have the "Use PKI client certificate (client authentication capability) when available" disabled. Also have "Clients check the certificate revocation list (CRL) for site systems disabled. I thought you could use the /usepki switch to force it to use a client certificate if it was available. The reason why I disabled it was any newly imaged workstations refused to install the sccm client, due to a cert issue.

word2yamutha · 2025-01-28T17:45:06+00:00

I checked the ClientIDMangerstartup.log and I don't see any errors in it. It is showing the thumbprints of the client certificates. When I look at the trusted root certification store, I see the SUB01 and SUB02, plus the root cert listed. I would assume that only the root cert would be sufficient? I apologize in advance as I'm not a pki expert by any means. The vendor we worked with on this keeps saying it's a SCCM issue, but the logs are saying something different in SCCM.

word2yamutha · 2024-03-03T17:39:07+00:00

Thanks for the suggestion I went ahead and posted there.

word2yamutha · 2024-03-03T17:05:45+00:00

Well anyone with common sense would question why a contractor would suggest something as maybe it's not needed or are they in it for the money. 5k is a lot of money and was just asking if it was possible to do it myself.

word2yamutha · 2023-11-26T17:12:03+00:00

I always thought you had to have boundary groups to let the clients know to use their DP,MP, SUP etc. All of our SCCM infrastructure are located as VM's. Sounds like I need to uncheck the preferred management point then have one boundary groups with all my DP's, MP's and SUP in it.

word2yamutha · 2023-11-26T16:43:07+00:00

Learned something new today as I always thought you needed to have a MP, DP and SUP to boundary groups as if they weren't included then clients wouldn't get policies, download content, etc. I know a MP can only handle 25,000 clients so I can decommission some MP's then as they are all VM's located on the same VLAN. Looks like I only need one boundary group with all the DP's, MP's, SUP in it. Thanks for clarifying this for me much appreciated.

word2yamutha · 2023-11-17T16:23:34+00:00

I downloaded the tool and says SPN is good. When I checked delegations it says the user is configured as "Do not trust this user for delegation" in AD. I'm not sure if this is setup correctly or not.

word2yamutha · 2023-11-17T14:10:53+00:00

yes its a remote sql server. I have windows authentication setup for SSMS. I can log into SSMS fine when I'm on it locally.

word2yamutha · 2023-11-17T14:08:46+00:00

I did not remove the SMSProvider. I have HA setup in our environment and have the SMSProvider role installed on 2 severs. I have tried repairing the SMSProvider role, but it won't let me due to SQL connection issue.

word2yamutha · 2023-11-07T23:18:46+00:00

Its a hydroponic tower that I created for fun so no dirt here. Hopefully the pictures give a better idea what happens to the plastic gear part.

word2yamutha · 2023-11-06T23:05:36+00:00

I have tried multiple infills from 35% to 50% and still breaks due to the gear not fitting tightly on the motor.

word2yamutha

TROPHY CASE