The Advertised Programs Monitor does not start after you install Systems Management Server 2.0 SP 5 (826142)

SYMPTOMS

In domain environments where users log on to a master domain, and the client computers reside in a resource domain, the Advertised Programs Monitor (Smsmon32.exe) may not start on a client computer that is running Microsoft Systems Management Server (SMS) 2.0 Service Pack 5 (SP5).

Additionally, these client computers may not receive software distribution packages.

CAUSE

This issue may occur if you log on to an SMS 2.0 SP5 client computer, but you are not a member of the SMS_Client_Computer\Users group, where SMS_Client_Computer is the name of the SMS client computer. You are a member of a local Users group on a client computer if one of the following is true:

Your master domain user account is in the local Users group.
You belong to a global group in the master domain, and this global group is a member of the local Users group.

SMS 2.0 SP5 grants specific Access Control Lists (ACLs) to the following local groups on the client computer:

Administrators
Users

If you log on to a computer, and you are not a member of either of these groups, your user account cannot read the following subkey values in the registry of the client computer:

\HKEY_LOCAL_MACHINE\Software\Microsoft\SMS\Client\Client Components
\HKEY_LOCAL_MACHINE\Software\Microsoft\SMS\Client\Configuration
\HKEY_LOCAL_MACHINE\Software\Microsoft\SMS\Client\Sites
\HKEY_LOCAL_MACHINE\Software\Microsoft\NAL

RESOLUTION

To resolve this issue before you install or upgrade to SP5, follow one of these steps:

Add your master domain user account to the local Users group on your SMS 2.0 client computer.
If you belong to a global group from the master domain, add this global group to the local Users group on your SMS 2.0 client computer. For example, if you are a member of the MasterDomain\Domain Users group, add this group.

To resolve this issue on a computer that is already running SP5, add the following statement to your user logon script, where localgroup is the name of the local Users group on the client computer, and MasterDomain is the name of the domain that contains your user account:

net localgroup Users "MasterDomain\Domain Users" /ADD

Note This method may require you to log on to the client computer two or more times for the Advertised Programs Monitor to start correctly.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

297307 How to add a master domain administrator account to the local Administrators group of a resource workstation

MORE INFORMATION

SMS 2.0 SP5 introduces enhancements to increase the security of site-to-site communication and of general administration. To see an overview of fixes and design changes in SP5, visit the following Microsoft Web site:

http://www.microsoft.com/smserver/downloads/20/servicepacks/sms20sp5/fixes.asp

In the "Changes in Applying Access Control Lists to Objects" section, the Web site states that "the local users' group has been added to the object's current ACLs." However, in domain environments where users log on to a master domain and the client computers are in a resource domain, Advertised Programs Monitor may not start on the client computer.