Users of the SMS Administrator console with only Read permission to a collection can install SMS clients (843362)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

The following Microsoft Systems Management Server (SMS) 2003 Administrator console users can install the SMS client on client computers:
  • Users with only Read permissions to the collections class.
  • Users with only Read permissions to an instance of the collections class.
  • Users with only Read permissions to an instance of the collections class
However, SMS 2003 Service Pack 1 (SP1) Administrator console users are required to have Read, Modify, and Administer permissions to the Collections class.

CAUSE

This problem occurs because the SMS Administrator console only requires that users have Read permissions to the resources in a collection to install the SMS client, or Read, Modify, and Administer to the Collections class if using SMS 2003 SP1..

RESOLUTION

Service pack information

To resolve this problem, obtain the latest service pack for Systems Management Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

885643 How To obtain the latest Systems Management Server 2003 service pack

Hotfix information

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that this article describes. Apply it only to systems that are experiencing this specific problem.

To resolve this problem, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services telephone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

Prerequisites

No prerequisites are required.

Restart requirement

You do not have to restart your computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.SMS 2003, pre Service Pack 1 (SP1)
   Date         Time   Version        Size     File name
   --------------------------------------------------------
   25-Dec-2003  12:45  2.50.2726.145  159,744  Sms_mctw.dll
SMS 2003, post SP1ENU
   Date         Time   Version        Size     File name
   --------------------------------------------------------
   20-Oct-2004  10:55  2.50.3174.1126  172,032  Sms_mctw.dll
InternationalClient Pack 1
   Date         Time   Version        Size     File name
   --------------------------------------------------------
   20-Oct-2004  10:55  2.50.3174.1126  172,032  Sms_mctw.dll
International Client Pack 2
   Date         Time   Version        Size     File name
   --------------------------------------------------------
   20-Oct-2004  10:55  2.50.3174.1126  172,032  Sms_mctw.dll

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Systems Management Server 2003 Service Pack 2.

MORE INFORMATION

For more information about the standard terminology that is used to describe Microsoft software updates, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Hotfix installation instructions

To install this hotfix, follow these steps:
  1. Create a folder in a location that your SMS site servers can use.
  2. Copy the Sms2003-rtm-kb843362-x86-enu.exe update file to the new folder.
  3. From each computer that has the SMS Administrator console installed, use an account that has administrative credentials to log on to the site server. Each computer that has the SMS Administrator console installed includes all the primary SMS site servers in your environment.
  4. Quit the SMS Administrator console if it is running.
  5. Run the Sms2003-rtm-kb843362-x86-enu.exe file, and then follow the instructions in the wizard.
After you install this hotfix, the SMS Administrator console checks the following list to determine if the user has permission to install the SMS client:
  • If the object is a collection, the user must have Modify Resource permissions for the collection.
  • If the object is a resource within a collection, the user must have Modify Resource permissions for the collection that the resource is a member of.
  • If the object is a query, the user must have Modify Resource permissions to the collection that the query is limited to. If the query is not limited to a collection, then the user must have Modify Resource permissions to the collection class.
  • If the object is a resource in a query, the user must have Modify Resource permissions to the collection that the query is limited to. If the query is not limited to a collection, then the user must have Modify Resource permissions to the collection class.
Note Permissions set for a user on instances of a collection class are overridden if the user has permissions to the collection class.
Modification Type:MinorLast Reviewed:4/14/2006
Keywords:kbQFE kbHotfixServer kbbug kbSMS2003bug kbfix kbwinservperf kbMgmtServices kbprb KB843362 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.