SCCM Content Distribution Error 0x8007ffff

Prajwal Desai
Posted by Prajwal Desai

During content distribution, I noticed error 0x8007ffff on the remote SCCM distribution point. Failed to update the IIS auth module error 0x8007ffff was the complete error logged in distmgr.log file.

One of the remote DP suddenly stopped receiving the content. This current branch SCCM DP was newly setup and some of the content was already distributed earlier.

Under the Monitoring > Distribution Point Configuration Status, I did see the some failed packages. While there were few failed ones, rest of them were distributed successfully.

However when I attempted to distribute the failed packages to this remote DP, it failed. Opening the distmgr.log file showed failed to update the IIS auth module error 0x8007ffff. This is the first time I had encountered this error and let me share you the solution for this issue.

Fix SCCM Content Distribution Error 0x8007ffff

Let me show you the errors that I saw in distmgr.log file. Throughout the log file notice that there is only one error code which is 0x8007ffff.

In addition to that, listing some of the other important lines that helped me in troubleshooting.

  • Did not configure IIS module, GLE – 65535
  • ConfigureIISModules did not configure IIS Module
  • Failed to update the IIS auth module error 0x8007ffff
  • Cannot set the current Drizzle Role status for the DP
failed to update the IIS auth module error 0x8007ffff
failed to update the IIS auth module error 0x8007ffff

So one thing I could make out from the log file was the issue related to IIS module configuration on this remote SCCM DP.

Furthermore checking the IIS configuration on this remote distribution point showed no virtual directories under Sites > Default Web Site.

SCCM Content Distribution Error 0x8007ffff

Instead of uninstalling the DP role and installing it back, I first decided to repair IIS configuration on this remote SCCM distribution point. I did this because the IIS base components were missing on this distribution point server.

I used the steps from this post Install IIS Base Components on SCCM Distribution Point and executed the command on remote DP.

Launch the PowerShell as admin and run the below command.

dism.exe /online /norestart /enable-feature /ignorecheck /featurename:"IIS-WebServerRole" /featurename:"IIS-WebServer" /featurename:"IIS-CommonHttpFeatures" /featurename:"IIS-StaticContent" /featurename:"IIS-DefaultDocument" /featurename:"IIS-DirectoryBrowsing" /featurename:"IIS-HttpErrors" /featurename:"IIS-HttpRedirect" /featurename:"IIS-WebServerManagementTools" /featurename:"IIS-IIS6ManagementCompatibility" /featurename:"IIS-Metabase" /featurename:"IIS-WindowsAuthentication" /featurename:"IIS-WMICompatibility" /featurename:"IIS-ISAPIExtensions" /featurename:"IIS-ManagementScriptingTools" /featurename:"MSRDC-Infrastructure" /featurename:"IIS-ManagementService"

Close the PowerShell window once the command is executed. At this point you don’t have to restart the SCCM DP.

SCCM IIS Distribution Point Prerequisites

After running the above command, I could see the virtual directories getting created.

SCCM Content Distribution Error 0x8007ffffBelow is the snippet from distmgr.log file.

Successfully created the virtual directory SMS_DP_SMSSIG$ for the physical path D:\SMSSIG$. SMS_DISTRIBUTION_MANAGER
Successfully added file extension C:\Windows\system32\inetsrv\smsfileisapi.dll. SMS_DISTRIBUTION_MANAGER
Creating virtual directory that does not require certificates: NOCERT_SMS_DP_SMSSIG$ SMS_DISTRIBUTION_MANAGER
target processor architecture is x64 SMS_DISTRIBUTION_MANAGER
target processor architecture is x64 SMS_DISTRIBUTION_MANAGER
Successfully created the virtual directory NOCERT_SMS_DP_SMSSIG$ for the physical path D:\SMSSIG$. SMS_DISTRIBUTION_MANAGER
Successfully added file extension C:\Windows\system32\inetsrv\smsfileisapi.dll. SMS_DISTRIBUTION_MANAGER
Creating token auth virtual directory: CCMTOKENAUTH_SMS_DP_SMSSIG$ SMS_DISTRIBUTION_MANAGER
target processor architecture is x64 SMS_DISTRIBUTION_MANAGER
target processor architecture is x64 SMS_DISTRIBUTION_MANAGER
Successfully created the virtual directory CCMTOKENAUTH_SMS_DP_SMSSIG$ for the physical path D:\SMSSIG$. SMS_DISTRIBUTION_MANAGER
Successfully added file extension C:\Windows\system32\inetsrv\smsfileisapi.dll. SMS_DISTRIBUTION_MANAGER

Finally I did see all the virtual directories created under IIS > Default website on remote SCCM DP. After this the content distribution was successful.

SCCM Content Distribution Error 0x8007ffff

Share This Article
Prajwal Desai
Posted by Prajwal Desai
Follow:
Prajwal Desai is a Microsoft MVP in Intune and SCCM. He writes articles on SCCM, Intune, Windows 365, Windows Server, Windows 11, WordPress and other topics, with the goal of providing people with useful information.