You cannot install the Systems Management Server 2003 Advanced Client on a computer that has Internet Information Services installed (884870)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

You cannot install the Microsoft Systems Management Server (SMS) 2003 Advanced Client on a computer that has Microsoft Internet Information Services (IIS) installed. Messages that are similar to the following may be logged in the event log:
Event ID: 10002
Source: DCOM
Type: Error
Description: Access denied attempting to launch a DCOM Server. The server is: GUID
Event ID: 10010
Source: DCOM
Type: Error
Description: The server GUID did not register with DCOM within the required timeout.

CAUSE

This problem occurs when one or more of the following conditions are true for the IIS anonymous account on the computer where you want to install the SMS 2003 Advanced Client:
  • The IIS anonymous account is disabled.
  • The IIS anonymous account is deleted.
  • The IIS anonymous account is configured incorrectly in the IIS metabase.
Note The IIS anonymous account is typically named IUSR_ServerName. However, any account can be configured as the IIS anonymous account.

WORKAROUND

To work around this problem, use one of the following methods.

Method 1: Enable the IIS anonymous account

Important If you suspect that the IIS metabase is corrupted, you must repair the IIS metabase before you use this workaround. For additional information about IIS, visit the Microsoft Web sites that are listed in the "More Information" section.

You must enable the IIS anonymous account before you install the SMS 2003 Advanced Client. To do this, follow these steps:
  1. Click Start, point to All Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
  2. Right-click DomainName, and then click Find.
  3. In the Find box, click Users, Contacts, and Groups.
  4. Type the name of the IIS anonymous account, and then click Find Now.
  5. In the Search results box, right-click the IIS anonymous account, and then click Properties.
  6. On the Account tab, click to clear the User must change password at next logon check box, click to clear the Account is disabled check box, and then click OK.
After you enable the IIS anonymous account, you can install the SMS 2003 Advanced Client on the computer that has IIS installed.

Method 2: Remove IIS

Use this method if the computer does not require IIS. To do this, follow these steps:
  1. Click Start, point to Control Panel, and then click Add or Remove Programs.
  2. Click Add/Remove Windows Components.
  3. In the Components box, click Application Server, and then click Details.
  4. In the Subcomponents of Application Server box, click to clear the Internet Information Services (IIS) check box, click OK, and then follow the instructions in the Windows Component Wizard to complete the wizard.
After you remove IIS, you can install the SMS 2003 Advanced Client on the computer.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

IIS is required to support some SMS 2003 site system roles. If the computer is an SMS 2003 site system that requires IIS, do not remove IIS. Additionally, use Method 1 that is described in the "Workaround" section to work around this problem.

Carefully evaluate security implications before you remove anonymous access to management points and to BITS-enabled distribution points. We recommend that you rigorously test permission changes that you may make to your SMS infrastructure before you implement them in a production environment.

The SMS 2003 Advanced Client Setup program cannot succeed when it cannot validate the IIS anonymous account on a computer that has IIS installed. When the SMS 2003 Advanced Client Setup program detects that IIS is installed on a computer, the SMS 2003 Advanced Client Setup program tries to set permissions for the IIS anonymous account. To do this, the SMS 2003 Advanced Client Setup program must validate the IIS anonymous account.

After the SMS 2003 Advanced Client is installed, you can disable or delete the IIS anonymous account if anonymous authentication is not required.

Important If the computer is an SMS 2003 management point or a BITS-enabled distribution point, do not remove IIS. Additionally, we recommend that you do not remove anonymous access to the computer. If you must remove anonymous access to the computer, disable the IIS anonymous account instead of deleting it. If you delete the IIS anonymous account, DCOM errors may accumulate in the event log.

For additional information about related issues, click the following article numbers to view the articles in the Microsoft Knowledge Base:

324276 How to configure Internet Information Services Web authentication in Windows Server 2003

332167 How to configure IIS to control the anonymous password

833734 You experience various problems when you use the Password Change pages in IIS 6.0


For additional information about IIS, visit the following Microsoft Web sites:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/html/secmod104.asp

http://www.microsoft.com/resources/documentation/iis/6/all/proddocs/en-us/iiswelcome.mspx

Modification Type:MajorLast Reviewed:10/27/2004
Keywords:kbMgmtServices kbwinservperf kbSMSClients kbSMSInstall kbtshoot kbprb KB884870 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.