SCCM Clients Unable to Download Policy from Management Point.
The Actions tab in the Configuration Manager Control Panel Applet would only display two actions it was occurring for every SCCM Client in the organization.
MP_Policy.log file may be full of this error:
Detected at least one row in the result set from PolicyAssignment table which does not have a Signature, rejecting all rows.
There must be at least one policy in the dbo.policyassignment table that does not have a signature.
To find the culprit run the following query against the SQL database:
SELECT * FROM ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL)
If you get nulls in columns.
NOTE: The MachineID 0 indicates that the policy assignments in question were assigned to all clients.
To resolve this – run an additional query to clear out the bad entries in the ResPolicyMap table:
Delete FROM ResPolicyMap WHERE machineid = 0 and PADBID IN (SELECT PADBID FROM PolicyAssignment WHERE BodyHash IS NULL
After this query SCCM Clients must start operating normally, no need to restart any SCCM services.