I'm a new Systems Administrator at a small-medium organization, and I'm coming from a cloud background, so working with traditional SCCM is pretty new to me. Recently, I had an alarming situation where Configuration Manager seemingly uninstalled itself. I was using it earlier in the week for basic tasks, and when I tried to access it later, I received a message stating that it can't connect to the site database. After thorough troubleshooting, including checking network connectivity and permissions, I discovered what looked like an automatic uninstall sequence that happened while I wasn't even logged on. There were logs indicating that the setup process was triggered, but I can't figure out how this occurred, especially since there wasn't any direct evidence of it being caused by a human or scheduled task. I'm trying to understand if there's a chance that a failed upgrade or some other scenario could have led to this situation. Also, I'm puzzled about why SCCM is still deploying apps despite these issues. Any insights on what could have happened or how to prevent it in the future would be greatly appreciated.
4 Answers
Are you sure the database isn't running on a different server? It might be that during an upgrade or some maintenance, there was a hiccup that caused this. Keeping track of multiple servers can get tricky, and errors can easily slip through.
You're going to need to get comfortable with reading the Configuration Manager logs thoroughly. Client logs may still be available post-uninstallation, and they can provide clues regarding what happened during that uninstall process. Look for anything unusual in those logs.
It sounds like something must have triggered that uninstall process. You'll want to check your SIEM (Security Information and Event Management) logs. Programs don't just uninstall themselves without some kind of command. If this was scheduled or executed manually, your security tools should give you a clearer picture of what happened. Don't overlook the possibility of someone else in your team being involved or another automated task doing this, especially at that time when you were not connected.
Your Clients typically have their last policies cached which allows them to pull content from distribution points, even if SCCM is in a broken state. You may still be able to restore from backups to recover the site if things get worse. Check out these resources for site recovery: [link1](https://www.systemcenterdudes.com/how-to-perform-a-sccm-site-recovery/) and [link2](https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/recover-sites). Also, asking for details at a dedicated site like the one I mentioned earlier could yield some useful insights.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures