DOCUMENT:Q257269 25-JUN-2000 [sms] TITLE :CCM Uses Multiple Domain Prefixes When Installing the Client PRODUCT :Microsoft Systems Management Server PROD/VER:winnt:2.0 OPER/SYS: KEYWORDS:kbsetup kbtool kbsms200 kbsms200bug kbsms200preSP2fix kbsms200sp2fix ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Systems Management Server version 2.0 ------------------------------------------------------------------------------- SYMPTOMS ======== When you use Systems Management Server (SMS) 2.0 in a multi-domain environment, the SMS Service account may be locked out and/or generate failed login attempts in the domain where SMS is installed and any other domains that are trust-related. CAUSE ===== This problem occurs because when Client Configuration Manager (CCM) is installing an SMS 2.0 client on a Microsoft Windows NT-based computer, by default it uses the SMS Service account unless an SMS Client Remote Installation account has been specified. CCM needs administrative rights when it connects to a workstation to install the SMS client. If CCM is unable to connect, it appends different prefixes to the SMS Service account in an attempt to connect to the client. For example, it might try Domain\SMSService first, and if that does not work, it may append other domain names that are present in your environment to the SMS Service account. If a duplicate SMS Service account in the other domains with the same password does not exist, login attempts do not work when CCM attempts to use the other domain prefixes. RESOLUTION ========== To resolve this problem, obtain the latest service pack for Systems Management Server version 2.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base: Q236325 How to Obtain the Latest Systems Management Server 2.0 Service Pack WORKAROUND ========== To work around this problem, use an SMS Client Remote Installation account that has access to all workstations in all domains. If CCM is successful in using this account, it does not use the SMS Service account. NOTE: SMS 2.0 Service Pack 2 permits you to specify multiple SMS Client Remote Installation Accounts for the same domain or different domains. Not only can SMS use multiple client installation accounts, it does not switch domain contexts of any account. SMS only uses the accounts that are specified in the properties, and the SMS service account. The SMS service account only uses the domain context that is specified during setup, and does not switch between available domains. This prevents the account from locking out. STATUS ====== Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Systems Management Server version 2.0 Service Pack 2. Additional query words: prodsms push ====================================================================== Keywords : kbsetup kbtool kbsms200 kbsms200bug kbsms200preSP2fix kbsms200sp2fix Technology : kbSMSSearch kbSMS200 Version : winnt:2.0 Hardware : x86 Issue type : kbbug Solution Type : kbfix kbnofix ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2000.