An SMS 2003 server locator point stops working on a computer that is running Windows Server 2003 with Service Pack 1 (913666)
The information in this article applies to:
- Microsoft Systems Management Server 2003
SYMPTOMSWhen you install a Microsoft Systems Management Server (SMS) 2003 server locator point on a computer that is running Microsoft Windows Server 2003 with Service Pack 1, a client computer cannot discover the SMS site code when you click Discover in the Systems Management Control Panel item. Additionally, the following event is logged in the System log on the computer that is running Windows Server 2003:
Source: DCOM
Event ID: 10016
Description: The machine-default permission settings do not grant Activation permission for the COM Server application with CLSID {D452CB77-FB08-4CB3-B7EE-2F5369982BBE} to the user ServerName\IUSR_ servername SID (S-1-5-21- xxxxxxx).
This security permission can be modified using the Component Services administrative tool.When you use the Client Site Assignment Tool, you receive the following error message:
No Site Assignment Found The SMS 2003 server locator point also stops working after you perform any one of the following tasks: - You disable and then enable the SLP.
- You reset a site.
- You upgrade the SLP in any of the following ways:
- From SMS 2003 to SMS 2003 SP1
- From SMS 2003 to SMS 2003 Service Pack 2 (SP2)
- From SMS 2003 SP1 to SMS 2003 SP2
CAUSEThis problem occurs because the Local Launch permissions for the Internet Guest account are removed.WORKAROUNDTo work around this problem, reset the COM permissions so that the Internet Guest account (IUSR_ server_name) has Local Launch permissions. To do this, follow these steps: - On the site server, click Start, click Run, type Dcomcnfg.exe, and then click OK.
- In Component Services, expand Component Services, expand Computers, expand My Computer, and then expand DCOM Config.
- Right-click SMS_SERVER_LOCATOR_POINT, and then click Properties.
- Click the Security tab.
- In the Launch and Activation Permissions section, click Edit.
- In the Group or User names area, click to select the IUSR_server_name user account.
- In the Permissions for IUSR_server_name area, click to select the Allow check boxes for Local Launch and for Local Activation.
- Click OK, and then close the Component Services snap-in.
- Click Start, click Run, type cmd, and then click OK.
- At the command prompt, type IISRESET, and then press ENTER.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Modification Type: | Major | Last Reviewed: | 10/2/2006 |
---|
Keywords: | kbtshoot kbBug kbSMSSLP kbprb KB913666 kbAudITPRO |
---|
|