Thursday, February 21, 2013

Conficker GPO Causing SCCM Client Health Check Failed!!!

As mentioned above, the Conficker GPO applied to all the computers via GPO causing all the SCCM Client Health Check failed. And this only happened to all the Windows XP computers. This is because the SCCM Client Health Check is using the SYSTEM account to schedule the health check task but the Conficker GPO is not allow SYSTEM account to perform the necessary job. Therefore created a massive health check failure in my project.

The solution is to either disable the Conficker GPO or to allow SYSTEM account to make changes. My customer chose to disable the Conficker GPO. Soon after the policy disabled, the health check monitoring slowly changed to green from red. :)

This problem also discussed in http://social.technet.microsoft.com/Forums/en-US/configmanagerdeployment/thread/ddbfe6c3-ee54-4b2a-a3a7-a6515d974f76