Task Sequence Install Applications 80074005, HTTP 401 Unauthorized

Always use the FQDN when specifying your Network Access (and possibly other) accounts within Configuration Manager, ie: “DOMAIN.COM\NetAccess”.  I found that this can resolve issues where you are building WORKGROUP or UNTRUSTED DOMAIN systems and they are failing to obtain content from the Distribution Point.  In short, it appears that IIS/Kerberos does not appreciate systems from other domains coming in and specifying the NETBIOS domain name as part of the Network Access Account, ie: “DOMAIN\NetAccess”.  This may be because systems in those domains have a different DNS suffix and/or are unable to resolve the NETBIOS domain name.