Support Tip: Secondary site prerequisite check fails when initiated from primary site's console

~ Vishal Gupta | Technical Lead

Here’s a quick tip on an issue you might see with System Center 2012 Configuration Manager (ConfigMgr 2012) when you try to install a secondary site on a computer running Windows Server 2012. If your primary site server is also running Windows Server 2012 and you choose the option to copy the installation files from the site server during the secondary site installation wizard, the prerequisite checks fails and the ConfigMgrPrereq.log on the site server shows errors similar to the ones below:



<08-21-2013 11:06:07> server.domain.com;    Check Server Service is running;    Error;    Setup is unable to verify that the Server Service is started.
<08-21-2013 11:06:08> INFO: OS version:0, ServicePack:0.
<08-21-2013 11:06:08> server.domain.com;    Unsupported site server operating system version for Setup;    Error;    Configuration Manager site systems can only be installed on systems running Windows Server 2008 SP2 or later.

When you try to access the shares from one server to the other it fails with the error:

The specified network name is no longer available

This can occur if Secure Dialect Negotiation, a new feature with SMB3 on Windows Server 2012, is enabled.

To workaround the issue, configure secure negotiation to be used only if required instead of it being used always which is the default. This is done by setting the registry DWORD RequireSecureNegotiate to 2 in the following Registry location:

HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters

Possible values for the registry key are mentioned below along with what each means.

0 - Disabled
1 - Required
2 - Enabled if needed

Additional information about this can be found in the following article:

SMB3 Secure Dialect Negotiation: http://blogs.msdn.com/b/openspecification/archive/2012/06/28/smb3-secure-dialect-negotiation.aspx

Vishal Gupta | Technical Lead | Microsoft GBS Management and Security Division

Get the latest System Center news onFacebookandTwitter:

System Center All Up: http://blogs.technet.com/b/systemcenter/
System Center – Configuration Manager Support Team blog: http://blogs.technet.com/configurationmgr/
System Center – Data Protection Manager Team blog: http://blogs.technet.com/dpm/
System Center – Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
System Center – Operations Manager Team blog: http://blogs.technet.com/momteam/
System Center – Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center – Virtual Machine Manager Team blog: http://blogs.technet.com/scvmm

Windows Intune: http://blogs.technet.com/b/windowsintune/
WSUS Support Team blog: http://blogs.technet.com/sus/
The AD RMS blog: http://blogs.technet.com/b/rmssupp/

The Forefront Endpoint Protection blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms- identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/