given the vast amount of ip that pfe needs to build for service manager, this will be a very busy fiscal year. not my content but a great link for a great solution to handle ad password resets - http://contoso.se/blog/?p=1605
sql query to check package status:
SELECT v_Package.PackageID, Name, SiteCode, ServerNALPath, State, InstallStatus
from v_Package
join v_PackageStatusDistPointsSumm PSUMM on v_Package.PackageID=PSUMM.PackageID where PSUMM.State = 0
state 0 = Package installation complete
state 1 = Waiting to Install
select * from v_package where packageid not in (select PackageID from v_AdvertisementInfo)
seems to be an issue when the client tries to send data thru the CCM_SYSTEM_WINDOWSAUTH virt dir on the MP. Keith wrote a doc that explains how client approval should work and also has some troubleshoot tips:
http://blogs.technet.com/b/configurationmgr/archive/2010/01/20/how-it-works-automatic-client-approval-in-configuration-manager-2007.aspx