You cannot install the SMS 2003 Advanced Client on a computer that is running Windows 2000 Server or Windows Server 2003 (909847)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

You cannot install the Microsoft System Management Server (SMS) 2003 Advanced Client on a computer that is running the following software:
  • Microsoft Windows 2000 Server or Microsoft Windows Server 2003
  • Microsoft Internet Information Services (IIS)
Additionally, an error that is similar to the following is logged in the Clientmsi.log file:
Error 25001.
Setup failed due to unexpected circumstances
The error code is 800706FC
Action ended time: CcmSetObjectSecurityInit. Return value 3.
Action ended time: INSTALL. Return value 3.
Property(S): CLIENTUILEVEL = 3

CAUSE

The local IUSR and IWAM user accounts have been deleted or could not be resolved by the IIS metabase. This problem may occur if these accounts have not been synchronized with their passwords.

RESOLUTION

To resolve this problem, follow these steps:
  1. Click Start, click Run, type lusrmgr.msc, and then click OK.
  2. In the Local Users and Groups snap-in, click Users, and then verify that the local IUSR and IWAM user accounts are present. If these accounts are present, go to step 3.

    Warning If the local IUSR and IWAM user accounts are not present, do not continue with the steps in this article. For more information about re-creating the IUSR and IWAM user accounts, click the following article number to view the article in the Microsoft Knowledge Base:

    822165 IUSR and IWAM accounts are re-created when the IIS Admin service is restarted

  3. Click Start, click Run, type cmd, and then click OK.
  4. At the command prompt, move to the C:\Inetpub\Adminscripts directory.
  5. Type Adsutil.vbs set w3svc/wamusername IWAM_Computer_Name, and then press ENTER.
  6. Type Adsutil.vbs set w3svc/wamuserpass Password, and then press ENTER. Click Yes at all warning messages.
  7. Type Adsutil.vbs set w3svc/anonymoususername IUSR_Computer_Name, and then press ENTER.
  8. Type Adsutil.vbs set w3svc/anonymoususerpass Password, and then press ENTER.
  9. Type exit at the command prompt.
  10. In the Local User and Groups snap-in, right-click the IWAM user account, click Set Password, click Proceed, type the password that you created in step 6 in the New Password and Confirm password boxes, and then click OK.
  11. Right-click the IUSR user account, click Set Password, click Proceed, type the password that you created in step 8 in the New Password and Confirm Password boxes, and then click OK.
  12. Close the Local User and Groups snap-in.
  13. Click Start, click Run, type %systemroot%\system32\com\comexp.msc, and then click OK.
  14. In the Component Services snap-in, expand Component Services, expand Computers, expand My Computer, and then expand COM+ Applications.
  15. Right-click IIS Out of Process Pooled, and then click Properties.
  16. Click the Identity tab, type the user name that you used in step 5 in the User box, type the password that you created in step 6 in the Password and Confirm password boxes, and then click OK.
  17. Close the Component Services snap-in.
  18. Click Start, click Run, type iisreset, and then click OK.
Modification Type:MinorLast Reviewed:4/11/2006
Keywords:kbtshoot kberrmsg kbSMSClients kbprb KB909847 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.