Secondary site and proxy management point objects are not removed from Active Directory when you delete a secondary site in Systems Management Server 2003 (886162)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

After you remove a secondary site and a proxy management point from your Microsoft Systems Management Server (SMS) 2003 hierarchy, SMS 2003 Advanced Client computers try to use the proxy management point of the secondary site that you have removed.

CAUSE

This problem occurs because SMS 2003 does not remove the Active Directory objects for secondary sites or proxy management points when you use the SMS Administrator Console to delete a secondary site or a proxy management point.

WORKAROUND

Warning This article contains information about editing the namespace. Before you edit the namespace, verify that you have a backup copy that you can restore if a problem occurs. If you edit the namespace incorrectly, you can cause serious problems that may require you to reinstall any product that uses the namespace. Microsoft cannot guarantee that problems that result if you incorrectly edit the namespace can be solved. Edit the namespace at your own risk.
To work around this problem, use the Active Directory Service Interfaces (ADSI) Edit tool to manually remove the secondary site and management point objects from Active Directory.

Note The ADSI Edit tool is located in the Windows Support Tools folder on the Microsoft Windows 2000 Server CD and the Microsoft Windows Server 2003 CD. To set up Support Tools, start the Setup.exe program in the Support\Tools\Setup folder. After you install Support Tools, follow these steps:
  1. Click Start, click Run, type adsiedit.msc in the Open box, and then click OK.
  2. Expand Domain [ServerName.domain], expand DC=domain,DC=domainextension, expand System, and then click CN=System Management.
  3. In the right pane, right-click CN=SMS-MP-SecondarySiteCode-ProxyManagementPointServerName, and then click Delete.
  4. In the right pane, right-click CN=SMS-Site-SecondarySiteCode, and then click Delete.
  5. On the File menu, click Exit, and then click No.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

A proxy management point is used by roaming Advanced Clients to retrieve policies at remote locations. The proxy management point receives inventory data and status messages and sends them to the secondary site server to be forwarded to the parent site, increasing bandwidth-usage efficiency for roaming clients. A proxy management point also services the Advanced Clients that are in its roaming boundaries and are assigned to its primary site. A proxy management point can only be installed in a secondary site, not in a primary site.

The ability to configure a proxy management point is an important feature of SMS. However, you should consider the potential for security issues when you plan the number of management points that you deploy in your site deployment strategy.

For additional information about how to plan and deploy SMS 2003, visit the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/sms/sms2003/deploy/spgsms03/spsms04.mspx

Modification Type:MinorLast Reviewed:6/13/2005
Keywords:kbtshoot kbnofix kbSMS2003bug kbMgmtServices kbprb KB886162 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.