SCCM PXE OSD Fails on the "Apply OS Image" Step After Removing NAA

GARRISON CARLSON 0 Reputation points
2025-04-29T18:36:00.7+00:00

I am trying to remove the NAA account from my SCCM since we are fully HTTPS now, and theoretically the NAA account is not necessary anymore. However, the moment I remove the account, OSD fails on the "Apply Operating System Image" step.

Troubleshooting I have done so far:

  • Verify that the OS package is NOT set to "access content directly from the DP" in the task sequence step options.
  • OS image package is NOT set to "copy the content in this package to a package share on DPs" in data access tab.
  • Task sequence DP deployment option is set to "Download content locally when needed by the running task sequence".
  • Recreate client certificate for DP according to the PKI certificate requirements.
  • Redistribute boot image to the DP after recreating client certificate.
  • Verified that IIS cert is bound.
  • Verified root cert is installed in SCCM primary site.
  • DP and IIS certs are assigned to the DP server.
  • Boot image has been recreated and distributed to DP.
  • Windows Authentication IIS feature is installed and enabled on the DP.
  • IIS Services are running on the DP, including ASP.Net state service.

In the smsts.log on the client I'm getting the errors in the attached pictures.

Screenshot 2025-04-03 111603

Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
1,065 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.