Configmgr troubleshooting clients with update scan issues for office 365 client updates

Introduction:

Office 365 ProPlus is one of the subscription service plans in the new Office. It is productivity software (including Word, PowerPoint, Excel, Outlook, OneNote, Publisher, Access, Skype for Business) that is installed on your desktop or laptop computer. Office 365 ProPlus is a user-based service that allows people to access Office experiences on up to 5 PCs or Macs and on their mobile devices. Traditional Office installations were tied to the computers they were installed on.

Few months ago ,we have started rolling out office 365 proplus (cloud version) using Configmgr Current Branch. I have created application using powershell app deployment toolkit in combination with offscrub scripts from Microsoft.   Using these 2 scripts,you can fully automate the installation office 365 proplus by removing the old versions (2007,2010,2013 and 2016 MSI based ) of office and install cloud version. I will write blog post on how to use these 2 scripts and create application to install proplus and what are the GPO settings you need to consider for this proplus for performance issues,patching mechanism etc.

Problem:

Coming to this blog post, we have mixed environment which includes laptops ,desktops and VDI (virtual desktop infra) machines. So proplus installed on all these machines using SCCM .Installation went smooth and users started using the office for their day to work.

All looks good from user point of view but when it comes to managing this office proplus with updates ,you need to understand how it works and what are the settings applied on the on PC for proplus.

After the proplus installed on many computers, we started noticing the office 365 update section in SCCM (software library –office 365 client management--office 365 updates ) for patching and found that, some of the clients are reporting update status but majority of them are reporting unknown as shown below.

By the way ,we are going with semi-annual channel as we do not want to update proplus every month hence we look at semi-annual channel updates only for deployment.

image

Solution:

After looking at the unknown status with bigger count ,i started looking at clients chassis type as some of them are working good but majority are not. This is because ,we have used same package for proplus and and one GPO with proplus settings and one client agent settings.

When am using one configuration for all ,why there is difference in update scan status for office 365 client updates ?

Use the default report Home > ConfigMgr_Sitecode > Software Updates - A Compliance > Compliance 6 - Specific software update states (secondary)  to know the unknown clients.

After reviewing the unknown client, found that,majority of the clients are VDI hence there is something on VDI machines.

Got one VDI assigned on my name so i can troubleshooting to find the root cause.

Following are the checklist perform on the VDI that is having issue:

1. Check if SCCM client is working good and healthy .How do you say it is healthy ? Check in SCCM console of policy request and its inventory .

2.Is the client receiving policies and what is the software updates status on this PC ? look at its last software update scan and also last patching status. If this is working fine then for sure ,something wrong with office 365 proplus application how it was installed or the configurations applied on VDI’s.

3. Verified in SCCM that ,client agent settings are configured correctly with ‘Enable management of the office 365 client agent’ to ‘Yes’ in software update section .This setting can also be enabled through GPO. This is one of the requirement as SCCM Client check Office COM interface to be enabled  as it act as communication between office and Configmgr. This functionality must be turn ON.You can check the registry key on client PC for officemgmtcom (HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Office\16.0\common\officeupdate\OfficeMgmtCOM)

After all the above checklist, i could not find anything wrong .Everything seems to be good.

While am troubleshooting on this ,found a Microsoft article referring to Troubleshooting Office 365 ProPlus https://blogs.technet.microsoft.com/askpfeplat/2017/03/23/troubleshooting-office-365-proplus-patching-through-system-center-configuration-manager/

After reading the article,found that, there is one setting that i need to verify which i mentioned in the checklist above 3) Verify COM interface is registered or not .As we have enabled this through GPO and also using SCCM Client agent settings ,COM interface should be registered (officemgmtcom) . So how to verify if COM interface registered or not ?

You can do this by verifying existence of following registry key on the client. This registry is same for proplus on each PC.

[HKEY_CLASSES_ROOT\CLSID\{B7F1785F-D69B-46F1-92FC-D2DE9C994F13}\InProcServer32]

@=”C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RCom.dll”

On the problem client ,i could not find this registry key ({B7F1785F-D69B-46F1-92FC-D2DE9C994F13})

image

As per the technet blog ,i suspect AV (antivirus ) on the client is blocking com interface , hence involved AV Team but there is nothing after troubleshooting and also tried disabling the AV on the client then start ,stop the Microsoft Office Click-to-Run Service service.

Issue did not resolve even after AV disable .What could go wrong ?

we talk few times about COM interface and must be registered for this process hence i started looking at component services that is where the COM object register as well.

From the run command ,type dcomcnfg to open MMC .Browse to component services –>computers –>My computer.

This is what i see with red arrow colour down arrow which means component services are disabled hence COM interface unable to register. Why is this disabled ? is this through GPO ? if so ,why not disabled for laptops and desktops but only for VDI ? This is offline topic to be discussed internally with respective teams who disabled it.

image

There is service that is responsible for it, which is ‘COM+ System Application’ .Start the service (must do with admin rights)

image

After you start the service,close component services MMC and reopen again.

Browse to COM+ Applications and see if there is any entry related to OfficeC2R.

image

How do we get OfficeC2R com object here ?

As a simple fix, i restarted Microsoft Office Click-to-Run Service (ClickToRunSvc) so the COM object will get created hence registry also created but that did not work.

so what  i have done is the following fix which worked and also created simple batch script applied to all computers that did not find the registry key.

How to get OfficeC2RCom Object ?

  1. Open Regedit and change the value of the registry key HLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate\OfficeMgmtCOM  from 1 to 0

image

2. Restart ‪Microsoft Office Click-to-Run Service

image

3. Open Regedit and change the value of the registry key HLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate\OfficeMgmtCOM  from 0 to 1

4. Restart ‪Microsoft Office Click-to-Run Service again.

5. Open dcomcnfg to check OfficeC2RCom object and go to Regedit and check the registry key [HKEY_CLASSES_ROOT\CLSID\{B7F1785F-D69B-46F1-92FC-D2DE9C994F13}\InProcServer32]

Registry check

image

COM object verification (OfficeC2RCom )

image

I did not find any reference link or i missed that says ,COM+ System Application service must be started for this proplus.

Conclusion to Restore OfficeC2RCom:

  1. Start the COM+ System Application service
  2. Open Regedit and change the value of the registry key HLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate  from 1 to 0
  3. Restart ‪Microsoft Office Click-to-Run Service.
  4. Open Regedit and change the value of the registry key HLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate\OfficeMgmtCOM  from 0 to 1
  5. Restart ‪Microsoft Office Click-to-Run Service again.
  6. Open dcomcnfg to check OfficeC2RCom and go to Regedit and check the registry key [HKEY_CLASSES_ROOT\CLSID\{B7F1785F-D69B-46F1-92FC-D2DE9C994F13}\InProcServer32]

I have created a script that does the above actions .So you can create application/package and deploy to clients that doesn't have above office com+ Application.

Though the root cause simple and because of the service disable ,but to get the COM interface back,went through lot of troubleshooting .

Hope it helps!

10 Responses to "Configmgr troubleshooting clients with update scan issues for office 365 client updates"

  1. Thanks for the info! The article mentions this a couple times: "change the value of the registry key HLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate from 1 to 0" ...but the screenshot shows a highlighted registry value of "HKLM\SOFTWARE\Policies\Microsoft\office\16.0\common\officeupdate\officemgmtcom" -- I'm guessing the screenshot is correct and the instructions are leaving out the actual name of the registry value.

    Reply
    1. Hi Anthony,
      Thanks for the correction. Yes it is OfficeMgmtCOM key value but i did not mentioned that in the post except the highlighting the value.
      I have now updated the post with right reg values.

      Thanks,
      Eswar

      Reply
  2. Hi Eshwar,

    Very well documented with the steps followed for verifying the office proplus registry key values. In my case the system has the older version of 1803 semi annual channel client update (Version 1803 (Build 9126.2259). Even after deploying the latest update Version 1803 (Build 9126.2275) from the report side the system shows has compliant with version 2275. But system is still running with the older update version 2259. Let me know the fix for resolving this issue.
    Regards

    Sharath K

    Reply
    1. Do you see Build 9126.2275 installed on the PC or still running 2259 ? if it is 2259 then you might need to run update scan and further look at updatescan logs and also wmi for that particular patch.

      Thanks,
      Eswar

      Reply
  3. Thanks for the great article, but I'm bit confused here, the funny thing, I'm still troubleshooting, but I found a device with all settings correct, but the service COM+ is set to manual, but not started.

    Reply
    1. COM+ service manual is correct and that will get started automatically when needed. you dont need to worry about it.
      the only thing you need to look at is ,COM+ entry created or not in registry matters. If all settings correct but still no COM+/registry entries,i suspect ,AV is blocking it.

      Regards,
      Eswar

      Reply
    1. Hi J,
      You can actually create package something like and push via SCCM.

      I had package with 3 files into it.
      1.Registry file (.reg) that change the value from 1 to 0 (change one to zero)
      2.Registry file (.reg) that change the value from 1 to 0 (change zero to one)

      3.Batch script that has 5 line commands as follows
      a)import the registry key to change value from 1 to 0
      b)net stop service
      c)net start service
      d)import the registry key to change value from 0 to 1
      e) net stop service
      f)net start service

      I will try to upload this folder as file into the blog post.

      Regards,
      Eswar

      Reply
  4. Great article. Having worked with VDI in the past, the only thing I can think of why that service got disabled is because of the optimization script that your Golden Image. The Vmware optimization script disables the majority of the services on the VM.

    Reply
    1. Hi Flavio,
      Thats true but for office 365 proplus,com+ application service is mandatory else you cannot patch updates.
      I have now uploaded the script that does the fix the for you.

      Regards,
      ESwar

      Reply

Leave a Reply to Sharath K Cancel reply