The Offer Remote Assistance HelpersCNF group is created on domain controllers that have the SMS 2003 Advanced Client installed and that have the Remote Control Agent service enabled (913003)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

The Offer Remote Assistance HelpersCNF domain group is created on domain controllers that have the Microsoft Systems Management Server (SMS) 2003 Advanced Client installed and that have the Remote Control Agent service enabled.

Note In this group name, the appended CNF stands for "Conflict Naming Found."

CAUSE

When the SMS Advanced Client is installed on a domain controller, the Offer Remote Assistance Helpers domain group is created every time that the Active Directory Installation Wizard finishes and the Client Configuration Manager (CCM) Repair operation is performed on the SMS Advanced Client.

Every time that the CCM Repair operation is performed for the SMS client on the domain controller, the Remote Control Agent service updates. If the Offer Remote Assistance Helpers group is not present in the domain, the Remote Control Agent service creates this group.

The Active Directory directory service will create an Offer Remote Assistance HelpersCNF domain group if the following conditions are true:
  • Active Directory has been installed on the server.
  • Active Directory has not yet verified the domain groups by examining the other domain controllers.
Additionally, If an administrator has previously deleted the Offer Remote Assistance Helpers group, this group is re-created with the appended CNF.

This problem occurs even if the Solicited Remote Assistance policy setting and the Offer Remote Assistance policy setting are set to Enabled on the local computer's system security policy. The default domain controller policy is configured so that the Solicited Remote Assistance policy setting and the Offer Remote Assistance policy setting are set to Not Configured.

WORKAROUND

To work around this problem, use one of the following methods.

Method 1: Disable the "Solicited Remote Assistance" policy setting and the "Offer Remote Assistance" policy setting

On a member server

  1. Click Start, click Run, type gpedit.msc, and then click OK.
  2. Under Local Computer Policy, expand Computer Configuration, expand Administrative Templates, expand System, and then click RemoteAssistance.
  3. Double-click Solicited Remote Assistance, click Disabled, and then click OK.
  4. Double-click Offer Remote Assistance, click Disabled, and then click OK.

On a domain controller

  1. Click Start, click Run, type gpedit.msc, and then click OK.
  2. Under Default Domain Controller Policy, expand Computer Configuration, expand Administrative Templates, expand System, and then click RemoteAssistance.
  3. Double-click Solicited Remote Assistance, click Disabled, and then click OK.
  4. Double-click Offer Remote Assistance, click Disabled, and then click OK.

Method 2: Repair the Remote Tools Client Agent service

  1. In the left pane of the SMS Administrators console, expand System Management Server, expand Site Database, expand Site Hierarchy, expand Site Name, expand Site Settings, and then click Client Agents.
  2. In the right pane, right-click Remote Tools Client Agent, and then click Properties.
  3. Click the General tab, and then click to clear the Enable Remote Tools on clients check box.
  4. Click Start, click Control Panel, and then click System Management.
  5. Click the Action tab, click to clear the Machine Policy retrieval and Evaluation Cycle check box, and then click Initiate Action.
  6. Click the Components tab, click Remote Tools Client Agent, and then click Repair.

    This process prevents the Offer Remote Assistance Helpers group from being created, locally or in the domain, if the Active Directory Installation Wizard runs again.

    To prevent the CNF groups from being created, allow for the replication of the Offer Remote Assistance Helpers group to all domain controllers before you install Active Directory on additional member servers.
  7. Delete the Offer Remote Assistance Helpers group. If the policy or component is disabled, the group will not return.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

This problem may also occur if the Net Logon service is restarted on the domain controller where SMS 2003 is installed.
Modification Type:MajorLast Reviewed:1/25/2006
Keywords:kbtshoot kbBug kbSMSClients kbSMSRemote Tools kbprb KB913003 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.