The Systems Management Server (SMS) 2003 Synchronization component does not download the latest Microsoft Baseline Security Analyzer (MBSA) and the Security Update Bulletin Catalog (MSSecure.xml) (886049)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

The Microsoft Systems Management Server (SMS) 2003 Synchronization component (Syncxml.exe) does not download the latest Microsoft Baseline Security Analyzer (MBSA) and the Security Update Bulletin Catalog (MSSecure.xml). When you examine the contents of the %SystemRoot%\System32\Ccm\Logs\Securitysyncxml.log file, you find entries that are similar to the following:ReportSMSStatusMessage() succeeded. $$<Software Updates Scan Helper><DateTime><ThreadID>

CAUSE

This issue occurs when the Download.ini file is marked read-only.

RESOLUTION

To resolve this issue, modify the properties of the Download.ini file to enable read and write access to the file, and then run Syncxml.exe again. To do this, follow these steps:
  1. To modify the properties of the Download.ini file to enable read and write access, follow these steps:
    1. Right-click Start, and then click Explore.
    2. Locate the folder where the Security Update Inventory Installer tool is installed.

      Note By default, the location is DriveLetter:\Program Files\SecurityPatch.
    3. Double-click the PkgSource folder.
    4. Right-click Download.ini, and then click Properties.
    5. Click to clear the Read-only check box, and then click OK.
  2. To run Syncxml.exe, follow these steps:
    1. Click Start, click Run, type cmd, and then click OK.
    2. Change to the folder where the Security Update Inventory Installer tool is installed, type the following at the command prompt, and then press ENTER:

      Syncxml.exe /s /unattend /site SiteServer /code SiteCode /target PackageSourceFolder

      Note SiteServer specifies the name of the computer that is running in the SMS site server role, SiteCode specifies the site code of the site that owns the indicated package object, and PackageSourceFolder specifies the name of the package source folder that contains the scan tool and database to be updated.

MORE INFORMATION

The Security Update Inventory Installer is a tool that integrates the functionality of the MBSA and the Security Update Bulletin Catalog (MSSecure.xml) into the SMS inventory process.

The Synchronization component is installed and is deployed by the Security Update Inventory Installer tool. It runs on a single client computer that has an Internet connection. The Synchronization component periodically connects to the Microsoft Downloads Web site, http://www.microsoft.com/downloads, to download the latest MBSA and Security Update Bulletin Catalog. Then, the Synchronization component uses distribution points within your system to send the latest files to client computers.

For more information about patch management, visit the following Microsoft Web site:

http://www.microsoft.com/windowsserversystem/overview/benefits/manageability/patch.mspx

For more information about how to obtain the SMS 2003 Scan Tools, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=AF0F2C14-D1DD-48F2-B2C6-B0A38B2FEF77&amp;displaylang=en

Modification Type:MinorLast Reviewed:6/13/2005
Keywords:kbSMSFeaturePack kbSMSUpdates kbSMSSecurity kbSMSDistribution kbtshoot kbMgmtServices kbprb KB886049 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.