Configuration Manager OSD task sequence fails with error code 0x80004005

The MECM / SCCM task sequence may fail with following error:

An error occurred while retrieving policy for this computer (0x80004005). For more information, please contact your system administrator or helpdesk operator.

The error code 0x80004005 is a generic error code which means Access Denied. There may be number of reason behind this and you should analyze smsts.log to understand exact reason behind this error code.

Time Sync Issue

Error in smsts.log

SyncTimeWithMP() failed. 80072ee7.TSMBootstrap 25-4-2018 18:02:191501 (0x0580)

Failed to get time information from MP: MPServerName

If you see above errors in smsts.log then it can be related with time sync issue

Check the date and time on client machine BIOS. You can press F8 in Windows PE screen to open command prompt and validate the date and time from command line. In case of time issue, correct the time and retry the Task sequence.

DNS Issue

Error in smsts.log

unknown host (gethostbyname failed)

sending with winhttp failed; 80072ee7

Failed to get client identity (80072ee7)

The above error indicates DNS related issues. You can launch command prompt by pressing F8 and validate the following things.

  • Check if an IP address has been assigned to machine by DHCP server.
  • Check if you can ping Management Point using Management Point server FQDN.

If you have used Dynamic media while creating the USB boot disk then try Site-based media and select the management point client reporting to.

Self-Signed certificate has expired

The above issue also happen due to expired self signed certificates. Follow the below steps to check self-signed certificate expiry date.

  • Open Configuration Manager console
  • Navigate to \Administration\Overview\Site Configuration\Servers and Site System Roles
  • Select the Site System in top right pane
  • Right click on Distribution Point in bottom right pane and select Properties
  • In the Distribution Point Properties windows, go to Communication tab and validate Self-signed certificate date.

Related Posts:

Subscribe to Techuisitive Newsletter

Be the first to know about our new blog posts. Get our newsletters directly in your inbox and stay up to date about Modern Desktop Management technologies & news.

Scroll to Top