seems to be an issue when the client tries to send data thru the CCM_SYSTEM_WINDOWSAUTH virt dir on the MP. Keith wrote a doc that explains how client approval should work and also has some troubleshoot tips: http://blogs.technet.com/b/configurationmgr...

select * from v_package where packageid not in ( select PackageID from v_AdvertisementInfo )

sql query to check package status: SELECT v_Package.PackageID, Name, SiteCode, ServerNALPath, State, InstallStatus from v_Package join v_PackageStatusDistPointsSumm PSUMM on v_Package.PackageID=PSUMM.PackageID where PSUMM.State = 0 state...

given the vast amount of ip that pfe needs to build for service manager, this will be a very busy fiscal year. not my content but a great link for a great solution to handle ad password resets - http://contoso.se/blog/?p=1605