# Configuration status does not change ## Problem The status of the configurations is always in "Ready to Execute" state. ## Cause The status of configurations may remain unchanged due to one or more of the following reasons: **Time delay for configuration to get applied** 1. **User Configurations:** User configurations will be applied during user logon, after user logon, or every 90 minutes whichever is earlier. Till then the status will remain only in "Ready to Execute". 2. **Computer Configurations:** Computer configurations will be applied during system startup, after system startup, or every 90 minutes whichever is earlier. Till then the status will remain only in "Ready to Execute". 3. The agents' last contact time should be after the configuration created time. For computer configurations, you can verify the agent's last contact time and the configuration created time by clicking the status link of the corresponding configuration. For User Configurations, you need to verify the agent's last contact time from the SoM page under the Agent tab. 4. Defining a configuration with **"Install between time"** and the given time is less than the 90 minutes refresh interval. If the install between time is less than 90 minutes, there are possibilities that the agent might not contact the Endpoint Central server within the specified install between time, so the configurations will never reach the client computers/users. **Association with an Empty OU** If the OU specified as the target for a configuration does not contain users and computers, the status would remain unchanged. **Firewall Blockers** Any firewall running in the machine where Endpoint Central is installed might block the status update messages that come from client machines. **Note:** This is not applicable for Endpoint Central Cloud. **Agent Version is not up-to-date** Check for the latest agent version from the Summary page under SoM in the left tree in the Agent tab. You will find the agent version of that computer on the Computers page under the Agent tab. Both versions should be the same. If it is not the latest version, you need to upgrade the agent to the latest version. **Distribution Server has not synchronized the configuration data yet** If the computer is at a remote location and you are using Distribution Server, check the **DS Status** from Agent → SoM → Remote Offices tab on the left tree. This should be green (healthy). **Absence of Endpoint Central Agent in Client machines** Endpoint Central agent may not have been installed in all the computers within the defined scope. To verify this, view the Agent Installation Summary on the Agent page under Scope of Management. ## Resolution Detect and correct the issues as follows: **Time delay for configuration to get applied** You can apply configurations immediately by doing one of the following: - Right-click on the Endpoint Central tray icon and click **Apply Configurations** If you are using Endpoint Central below 11.2.2309.01: - Execute `C:\Program Files\DesktopCentral_Agent\bin\cfgupdate` If you are using Endpoint Central 11.2.2309.01 and above: - Execute `C:\Program Files\UEMS_Agent\bin\cfgupdate` **Association with an Empty OU** Check whether the OU specified as the target has users and computers within it. **Firewall Blockers** **Note:** This is not applicable for Endpoint Central Cloud. Add the Endpoint Central port (default 8020) to the exceptions list of Firewall. Steps include: 1. Go to Start and select Control Panel. 2. Select Windows Firewall. This opens the Windows Firewall window. 3. Select the Exceptions tab and click on Add Port. 4. Add the port name and port number here. 5. Add Port 8020 for HTTP and Port 8383 for HTTPS. 6. Click OK. **Agent Version is not up-to-date** If the agent version is not up-to-date, you need to uninstall and reinstall the agent. If the computer is in the LAN, you can uninstall and reinstall the agent by clicking on Computers in the left tree under SoM in the Agent page. For computers at remote locations, this has to be done manually. **Distribution Server has not synchronized the configuration data yet** If the **DS Status** is not healthy, there is a communication problem between the Endpoint Central Server and the Distribution Server. Check the firewall and ensure that all the required ports are open. Ensure that the Distribution Server is healthy by checking its last contact time, next replication time, and upgrade status. **Endpoint Central Agent is not installed in client machines** Verify from the SoM page under the Agent tab of the Endpoint Central Server whether the Agent is installed on the client machine. Install the Agent on the client computer if not found. If the computer is at a remote location and you are using Distribution Server, ensure that the agent is communicating with the correct distribution server. **Configuration using Install between time** When a configuration is deployed using install between time specified, make sure that the specified install between time is more than the 90 minutes refresh interval. This ensures that the Agent will contact the Endpoint Central server every 90 minutes and the configuration will be deployed. **Applies to:** Desktop Configuration, Desktop Configuration Status, Ready-to-execute state, Configuration Collection **Keywords:** Desktop Configuration Status, Unchanged Status for Configuration, User Configuration settings, Computer Configuration settings, Windows Desktop Configuration ## Unable to resolve this issue? If you feel this KB article is incomplete or does not contain the information required to help you resolve your issue, upload the required [logs](https://www.manageengine.com/products/desktop-central/logs-how-to.html) and contact support with details of the issue, including your correct email ID and phone number. The support team will contact you and assist with a resolution. ## Other KB articles - [Agent Installation](https://www.manageengine.com/products/desktop-central/knowledge-base.html#agent-installation) - [Configurations](https://www.manageengine.com/products/desktop-central/knowledge-base.html#windows-configurations) - [Inventory Management](https://www.manageengine.com/products/desktop-central/knowledge-base.html#inventory-management) - [Patch Management](https://www.manageengine.com/products/desktop-central/knowledge-base.html#patch-management) - [Software Distribution](https://www.manageengine.com/products/desktop-central/knowledge-base.html#software-distribution) - [Service Pack Installation](https://www.manageengine.com/products/desktop-central/knowledge-base.html#service-pack-installation) - [Desktop Sharing](https://www.manageengine.com/products/desktop-central/knowledge-base.html#remote-desktop-sharing) - [Active Directory Reports](https://www.manageengine.com/products/desktop-central/knowledge-base.html#active-directory-reports) - [User Logon Reports](https://www.manageengine.com/products/desktop-central/knowledge-base.html#user-logon-reports) - [Endpoint Central SP Upgrade](https://www.manageengine.com/products/desktop-central/knowledge-base.html#service-pack-upgrade) - [Miscellaneous](https://www.manageengine.com/products/desktop-central/knowledge-base.html#miscellaneous) ## 24/5 Support Support is available 24 hours a day, five days a week (Monday through Friday), excluding USA and India public holidays. **Email:** [desktopcentral-support@manageengine.com](mailto:desktopcentral-support@manageengine.com) **Speak to us** - Join the Endpoint Central Community to get instant answers for your queries by registering with the [Forum](http://forums.manageengine.com/Desktop-Central). - Follow updates on [Twitter](http://twitter.com/DesktopCentral). - Read the latest updates and best practices on the [Blog](http://blogs.manageengine.com/desktopcentral/index.html).