fault
Posts: 32
Score: 2 Joined: 7/21/2008 Status: offline
|
Hi guys, Just playing around with SMS 2003 in my lab environment. I'm wanting to secure it with minimal accounts/privileges as required. I'm running in Advanced Security mode with Advanced Clients only. I have not specified any Client Push Installation Accounts. With this configuration, I get the following errors on the SMS site server in ccm.log: quote:
======>Begin Processing request: "GZOVRXAR", machine name: "XP1" SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) ---> Trying each entry in the SMS Client Remote Installation account list SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) ---> Warning: no remote client installation or SMS service account found SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) ---> Attempting to connect to administrative share '\\XP1\admin$' using machine account. SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) ---> Failed to connect to \\XP1\admin$ using machine account (5) SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) ---> ERROR: Connected to XP1 registry, but couldn't connect to the \\XP1\admin$ share using account '' SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) ---> ERROR: Unable to access target machine for request: "GZOVRXAR", machine name: "XP1", error code: 5 SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) STATMSG: ID=3014 SEV=W LEV=M SOURCE="SMS Server" COMP="SMS_CLIENT_CONFIG_MANAGER" SYS=SMS1 SITE=SYD PID=1732 TID=3360 GMTDATE=Fri Aug 08 23:34:18.621 2008 ISTR0="XP1" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=0 SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) Retry request id for "GZOVRXAR" set to "XP1" SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) Stored request "XP1", machine name "XP1", in queue "Retry". SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) <======End request: "XP1", machine name: "XP1". SMS_CLIENT_CONFIG_MANAGER 9/08/2008 9:34:18 AM 3360 (0x0D20) Documentation out there seems to say that you must specify at least one Client Push Installation Account (e.g., Automated Installation by Using the SMS Administrator Console). But I would have thought that you could use the machine account (e.g., XP1$) which has elevated privileges to install the client? The logs also seem to suggest that it attempts to even do this (i.e., first two lines above highlighted in red) but specifies that it failed to connect. Anyone know why the machine account cannot be used? Specifying a domain level account with local administrative privileges on the client works fine, but I'm interested in the above situation. Thanks.
|