SMS: Error Message When You Perform a Site Reset (268712)

SYMPTOMS

When you perform a site reset, you may receive the following error message:

Either the password for service account master domain name\account name is incorrect or administrator accounts in domain master domain name do not have administrator privileges in domain resource domain name.

CAUSE

This issue can occur if any of the following conditions exist:

You are not using the correct password.
The specified account does not have administrative rights on the computer.
The specified account has been configured to only log on to certain workstations and the site server is not included in the list of authorized workstations.
Systems Management Server (SMS) Site server is in a resource domain and the SMS service account is in the master domain.

WORKAROUND

To resolve this issue:

Verify that the password is correct.
Verify that the service account is a member of domain administrators or is a member of the local administrators group in User Manager for Domains.
Verify that the "User May Log Onto All Workstations" feature is enabled in User Manager for Domains.

NOTE: In a master domain model, user accounts are normally maintained in the master domain. By default, SMS does not place a master domain account in the resource domain local administrators group.

MORE INFORMATION

For additional information about SMS security and configuration of accounts that are used by SMS 2.0, view the SMS Security Whitepaper at the following Microsoft Web site:

http://www.microsoft.com/smsmgmt/techdetails/secessentials.asp

NOTE: SMS Security is also described in Chapter 4 of the Microsoft Systems Management Server Administrator's Guide.