Site boundaries are not published to the Active Directory in Systems Management Server 2003 (838872)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

When you try to publish Systems Management Server (SMS) site boundaries to the Active Directory directory service, the Systems Management container is not updated. The SMS Hierarchy Manager component records entries that are similar to the following in the Hman.log file:

Update Site Boundaries in Active Directory
Active Directory DS Root:
Searching for the System Management Container.
System Management container exists.
Searching for SMS-Site-sitecode Site Object.
SMS-Site-sitecode exists, updating.
SMS-Site-sitecode could not be updated, error code = 8228.
STATMSG: ID=4912 SEV=E LEV=M SOURCE="SMS Server"COMP="SMS_HIERARCHY_MANAGER"....



Note Error 8228 indicates the following: The administrative limit for this request was exceeded.

CAUSE

This problem occurs if you try to publish more than 500 individual subnets for a single SMS Site. This problem is caused by a limitation in the number of non-linked multi-value attributes that can be stored in a single object in Active Directory.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

267855 Problems with many domain controllers with Active Directory integrated DNS zones


SMS 2003 contains a hard-coded limit to the number of Internet Protocol (IP) subnets that can belong to the boundaries of a particular site. That limit is 500.

To resolve this problem, obtain the latest service pack for SMS 2003. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

885643 How to obtain the latest Systems Management Server 2003 service pack

WORKAROUND

To work around this problem, use one of the following methods:
  • Use Active Directory sites as SMS site boundaries. This method requires that subnet objects be associated with the Active Directory site, and that the boundaries do not overlap. We recommend that you use this method when you configure SMS site boundaries in large environments.
  • Use IP address ranges instead of individual subnets. You can use this method when many contiguous subnets, such as 10.10.10.1 and 10.10.10.2, exist. The IP address range boundaries are also stored as different objects in the Systems Management container.
  • Do not publish site boundaries to the Active Directory.
  • Create additional SMS sites to manage different subnets. This method helps make sure that one site does not have 500 or more individual subnets defined for its site boundaries.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Modification Type:MinorLast Reviewed:1/26/2005
Keywords:kbActiveDirectory kbHMan kbnetwork kbSMSTopazFix kbinterop kbfix kbBug KB838872 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.