I am trying to remove the NAA account from my SCCM since we are fully HTTPS now, and theoretically the NAA account is not necessary anymore. However, the moment I remove the account, OSD fails on the "Apply Operating System Image" step.
Troubleshooting I have done so far:
- Verify that the OS package is NOT set to "access content directly from the DP" in the task sequence step options.
- OS image package is NOT set to "copy the content in this package to a package share on DPs" in data access tab.
- Task sequence DP deployment option is set to "Download content locally when needed by the running task sequence".
- Recreate client certificate for DP according to the PKI certificate requirements.
- Redistribute boot image to the DP after recreating client certificate.
- Verified that IIS cert is bound.
- Verified root cert is installed in SCCM primary site.
- DP and IIS certs are assigned to the DP server.
- Boot image has been recreated and distributed to DP.
- Windows Authentication IIS feature is installed and enabled on the DP.
- IIS Services are running on the DP, including ASP.Net state service.
In the smsts.log on the client I'm getting the errors in the attached pictures.
