Configuration ManagerTroubleshooting

PXE boot failing in Configuration Manager: SMSPXE.log, boundaries and the PXE responder

Work through a failing PXE boot in order: network and IP helpers, the PXE-enabled distribution point, boot images, deployments and unknown computers, reading SMSPXE.log at each step.

PXE failures look the same from the device side — a firmware error or "booting to next device" — but the cause can sit in the network, the distribution point, the boot image or the deployment. In this post I'll take a failing PXE boot in Configuration Manager through each stage in order, show what SMSPXE.log tells you at every step, and fix the usual culprits.

Errors this guide fixes

  • PXE-E51 (no DHCP offers)PXE boot screen (firmware)
  • PXE-E53 (no boot filename)PXE boot screen (firmware)
  • PXE-E32 (TFTP open timeout)PXE boot screen (firmware)
  • Not serviced.SMSPXE.log
  • PXE-E55PXE boot screen (firmware)
  • PXE-E78PXE boot screen (firmware)
  • No boot action. Aborted.SMSPXE.log
  • no advertisements foundSMSPXE.log
How this guide is organised: Symptoms → Why it happens → How to fix it → Verify the fix → Prevent it next timeFlow diagram of the article's sections in reading order: 1. Symptoms. 2. Why it happens. 3. How to fix it (6 steps: Prove the broadcast reaches the DP; Check the DP's PXE settings; Make sure a PXE-enabled boot image is on the DP; Read the boot decision in SMSPXE.log; WinPE starts but the task sequence doesn't; Last resort: reinstall PXE). 4. Verify the fix. 5. Prevent it next time. Toolbox: SMSPXE.log, smsts.log, ipconfig, Administration › Distribution Points, Properties › PXE.1Symptoms2Why it happens3How to fix it4Verify the fix5Prevent it nexttime1Prove thebroadcast rea…2Check the DP'sPXE settings3Make sure aPXE-enabled…4Read the bootdecision in S…5WinPE startsbut the task s…6Last resort:reinstall PXETOOLBOXSMSPXE.logsmsts.logipconfigAdministration › Distribution PointsProperties › PXEHow this guide is organised: Symptoms → Why it happens → How to fix it → Verify the fix → Prevent it next timeFlow diagram of the article's sections in reading order: 1. Symptoms. 2. Why it happens. 3. How to fix it (6 steps: Prove the broadcast reaches the DP; Check the DP's PXE settings; Make sure a PXE-enabled boot image is on the DP; Read the boot decision in SMSPXE.log; WinPE starts but the task sequence doesn't; Last resort: reinstall PXE). 4. Verify the fix. 5. Prevent it next time. Toolbox: SMSPXE.log, smsts.log, ipconfig, Administration › Distribution Points, Properties › PXE.1Symptoms2Why it happens3How to fix it1Prove the broadcast reaches the DP2Check the DP's PXE settings3Make sure a PXE-enabled boot image is on theDP4Read the boot decision in SMSPXE.log5WinPE starts but the task sequence doesn't6Last resort: reinstall PXE4Verify the fix5Prevent it next timeTOOLBOXSMSPXE.logsmsts.logipconfigAdministration › Distribution PointsProperties › PXE
At a glance: how this guide is organised · 6 fix steps · 5 key tools

Symptoms#

  • The firmware shows errors such as PXE-E51 (no DHCP offers), PXE-E53 (no boot filename), PXE-E55 or PXE-E78, and nothing appears in SMSPXE.log.
  • The device gets an address, then the boot is aborted and it moves on to the next boot device.
  • TFTP errors such as PXE-E32 (TFTP open timeout) while downloading boot files.
  • WinPE loads, but restarts before the task sequence wizard appears.

Why it happens#

A PXE boot is a chain of four stages, and each fails differently:

StageWhat must happenWhere to look
1. DHCP discoveryThe client's broadcast reaches the DHCP server and the PXE-enabled distribution point (DP)Firmware PXE-E5x codes; the device's MAC address in SMSPXE.log
2. Boot decisionThe DP asks a management point whether the device has a PXE deploymentSMSPXE.log
3. TFTP downloadBoot files and a PXE-enabled boot image are on the DPFirmware PXE-E3x codes, DP content status
4. WinPE and task sequenceWinPE gets an IP address, reaches the management point and finds content through boundary groupssmsts.log in WinPE

SMSPXE.log lives on the PXE-enabled DP, normally in <drive>:\SMS_DP$\sms\logs.

How to fix it#

1. Prove the broadcast reaches the DP#

PXE boot the device and search SMSPXE.log for its MAC address. If it never appears, the problem is the network, not Configuration Manager:

  • When the client, DHCP server and DP are on different subnets or VLANs, the router needs IP helpers that forward the client's broadcasts to both the DHCP server and the PXE DP.
  • Open UDP 67 and 68 (DHCP), 69 (TFTP) and 4011 (BINL) between the client, DHCP and the DP.
  • Remove DHCP options 60, 66 and 67 at server and scope level. Microsoft doesn't support controlling PXE with them, and they often push the boot down the wrong path. The only exception is WDS sharing a server with DHCP, which needs option 60 only.
  • Test with the device on the DP's own subnet. If it boots there, fix the routing.

2. Check the DP's PXE settings#

Open Administration › Distribution Points, select the DP and choose Properties › PXE. Confirm:

  • Enable PXE support for clients and Allow this distribution point to respond to incoming PXE requests are on.
  • Enable unknown computer support is on if you image bare-metal devices.
  • If Network interfaces is limited to specific interfaces, the listed MAC addresses are correct.
  • If several PXE servers share a network, the PXE server response delay decides which one answers first.

With Enable a PXE responder without Windows Deployment Service, the DP uses the ConfigMgr PXE Responder Service (SccmPxe) instead of WDS. It supports IPv6, can share a server with DHCP, and is a good default unless you need multicast, which still requires WDS. Restart that service (or WDS) after changing network interfaces.

Note: The certificate configured in the DP's properties is handed to PXE clients so they can talk to the management point. If your management points use HTTPS, import a PKI certificate rather than using a self-signed one.

3. Make sure a PXE-enabled boot image is on the DP#

In Software Library › Operating Systems › Boot Images, open the boot image used by your task sequence and, on the Data Source tab, select Deploy this boot image from the PXE-enabled distribution point. Distribute it to the DP and confirm success under Monitoring › Distribution Status › Content Status. If a deployment targets only x64 BIOS computers, both the x64 and x86 boot images must be on the DP.

4. Read the boot decision in SMSPXE.log#

When the device is found but nothing is deployed to it, the log looks like this:

Text
MP_LookupDevice succeeded: 16777299 1 16777299 1 0
00:15:5D:00:19:CA, 32E5B71A-B626-4A4B-902E-7F94AD38B5B3: device is in the database.
00:15:5D:00:19:CA, 32E5B71A-B626-4A4B-902E-7F94AD38B5B3: no advertisements found
00:15:5D:00:19:CA, 32E5B71A-B626-4A4B-902E-7F94AD38B5B3: No boot action. Aborted.
00:15:5D:00:19:CA, 32E5B71A-B626-4A4B-902E-7F94AD38B5B3: Not serviced.
What you seeMeaningFix
device is in the database, no advertisements foundKnown device, but the task sequence is deployed to unknown computers or another collectionAdd the device to the target collection, or delete the stale record (search by MAC or SMBIOS GUID)
Unknown device, no boot actionNothing deployed to unknown computersEnable unknown computer support and deploy to All Unknown Computers, made available to media and PXE
Required deployment ignored on re-imageThe device already ran that required PXE deploymentRight-click the device or collection and choose Clear Required PXE Deployments
No line with the MAC at allThe request never arrivedBack to step 1

5. WinPE starts but the task sequence doesn't#

Press F8 (command support must be enabled on the boot image) and run ipconfig. Then open X:\Windows\Temp\SMSTSLog\smsts.log and look for Found network adapter with a valid IP address. No address usually means a missing network driver; add only network and storage drivers to the boot image. If the network is fine but content can't be found, check that the imaging subnet is in a boundary group with a DP holding the task sequence content, or that fallback is configured. My smsts.log guide covers this stage in depth.

6. Last resort: reinstall PXE#

Clear Enable PXE support for clients, confirm the removal in distmgr.log (DP on the site server) or smsdpprov.log (remote DP), and — if you used WDS — remove WDS, restart and delete the RemoteInstall folder. Re-enable PXE and redistribute the boot images.

Verify the fix#

  1. PXE boot the device. SMSPXE.log shows its MAC address, and the boot action reply now carries your deployment and boot image IDs instead of empty values.
  2. The device downloads the boot image without TFTP errors and WinPE starts.
  3. The task sequence wizard (or your required deployment) starts, and smsts.log shows the network adapter with a valid IP address.

Prevent it next time#

  • Use IP helpers, never DHCP options, for PXE across subnets.
  • Prefer the PXE responder on DPs that don't need multicast.
  • After a Windows ADK update, refresh boot images and redistribute them before the next imaging day.
  • Be careful with required PXE deployments: devices that boot from the network first can start a task sequence without anyone touching them.

References#

Written and checked against current Microsoft Learn documentation. Test changes with a pilot group before rolling them out to everyone, and if an admin center path has moved since, search for the setting name instead.

Spotted a mistake, or did this fix work differently for you? Email me or message me on LinkedIn — corrections are credited in the article.

Written by

Omer Eltayeb

Intune Subject Matter Expert in Cairo, Egypt, former Microsoft Cloud Solutions Architect, Microsoft Certified Trainer and Microsoft Innovative Educator Expert (2024–26) and Microsoft Elevate Educator Expert (2026–27). I share practical, step-by-step guides, study plans, scripts and toolkits for Microsoft Intune, Configuration Manager, Microsoft Entra ID, Microsoft Defender, Exchange and Microsoft 365 with the community.

Microsoft Certified Trainer (MCT) 2026Microsoft Innovative Educator Expert 2025–2026Microsoft Elevate Educator Expert 2026–2027ISC2 Certified Information Systems Security Professional (CISSP)Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)