myITforum.com Community Forum myITforum.com Community Forum

Home  Forums  Blogs  Live Support chat  Search Articles  Wiki  FAQ  Email Lists  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Photo Gallery  Member List  Search  Calendars  FAQ  Ticket List  Log Out

All Forums RSS Feed Subscription:


  


Permission to netowrk resources

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
  Printable Version
All Forums >> [Management Products] >> Microsoft Systems Management Server >> SMS 2003 >> Permission to netowrk resources Page: [1]
Login
Message << Older Topic   Newer Topic >>
Permission to netowrk resources - 8/20/2008 3:04:30 PM   
mh958

 

Posts: 23
Score: 0
Joined: 7/9/2007
Status: offline 		Greetings,

Both of my SMS servers can not access network folders on any computer or server in our company. When trying to access a distribution point share, we get the following error. \\smsdist\smspkgd$ is not accessible. You might not have permission to use this network resource. Contact the administrator of his server to find out if you have access permissions.

The specified network name is no longer available.

I have tried running an interactive cmd window on both SMS servers, and I get the same errors trying to access the drives. I can't actually see any network drives. This is also the case if I run cmd under my credientals. The firewall is disabled on both SMS servers.

We tried rebuilding the network stack, and removing the network controllers, and re-installing them.

Our workstations are WindowsXP, both SMS servers are Win2k3 with SP2, and were recently upgraded to SMS 2003 SP3 from SP1.

The main thing I notice is that I can talk to the smspkgd$ share on Win2k3 servers that have SP1, but not to servers that have SP2 on them.
I am curious if anyone knows if this is an issue. Let me know what additional info I might need to provide.

I may end up having to call MS, but thought I would try here first. I appreciate the help.

-Mike

< Message edited by mh958 -- 8/20/2008 3:08:04 PM >
Post #: 1
RE: Permission to netowrk resources - 8/20/2008 3:20:38 PM   
EdwardKK


Posts: 131
Score: 0
Joined: 5/14/2007
Status: offline 		The client on the DPs wouldn't impact the population of the DPs.  DPs are populated by the SMS server not a client on those servers (AFAIK).   if the SMS server has rights it can create/modify the shares as needed.  The sms client on those DPs wouldn't do anything.

It looks to me as if the SMS server can't locate the DP.  I'd start at the basics.  Can your SMS server ping those other boxes?  If so, then can it open ANY share on them?  Could you have a problem with DNS resolution?  etc. 

If you can verify that the SMS server can access the other server, verify that the SMS computer account is a member of the domain admins group.  (not the SMS service account, but check that too)  

If that's correct, I'd consider removing the SMS server from the domain and re-adding it to the domain.  It's possible that the computer account for your SMS server has gotten messed up in AD, and as a result it's not getting the rights it should get from AD on those DPs.

(in reply to mh958)
Post #: 2
RE: Permission to netowrk resources - 8/20/2008 3:33:44 PM   
mh958

 

Posts: 23
Score: 0
Joined: 7/9/2007
Status: offline 		Both SMS01 and SMS02 can ping the DP's, and resolve correctly.

Both SMS01 and SMS02 can open a share
ex. "\\CHICAGO1\" but can not access the  "\\CHICAGO1\Public" share
From both servers I can open a share on my workstation, but not on a Domain Controller.

Accessing any share on CHICAGO1 gets me an "Access Denied"

Both Servers are Domain Admins... as well as the Service Account.

I am not sure what I could break if I remove the SMS server from the Domain and re-add it.
Thanks

-Mike



< Message edited by mh958 -- 8/20/2008 3:43:24 PM >

(in reply to EdwardKK)
Post #: 3
RE: Permission to netowrk resources - 8/20/2008 4:16:38 PM   
EdwardKK


Posts: 131
Score: 0
Joined: 5/14/2007
Status: offline 		ARe you setting up your DPs as Servers?  or server shares?

(in reply to mh958)
Post #: 4
RE: Permission to netowrk resources - 8/20/2008 4:26:27 PM   
hcortez463


Posts: 780
Score: 62
Joined: 4/8/2005
Status: offline 		can you access the share by IP address,, ive seen this and in my env. it was a WINS issue..

_____________________________

If it Helps, Please rate....

(in reply to EdwardKK)
Post #: 5
RE: Permission to netowrk resources - 8/20/2008 10:21:52 PM   
mh958

 

Posts: 23
Score: 0
Joined: 7/9/2007
Status: offline 		They are Domain Controllers with shares on them. Yes they are server shares.
I will try accessing them via IP address, but I am pretty sure when I did that last time, I had the same result.

(in reply to hcortez463)
Post #: 6
RE: Permission to netowrk resources - 8/21/2008 10:50:10 AM   
blaird

 

Posts: 7
Score: 0
Joined: 3/13/2006
Status: offline 		Maybe... document the share setup, remove the share (allow change to bake for a while), then recreate the shares again.  Just an idea!

(in reply to mh958)
Post #: 7
RE: Permission to netowrk resources - 8/21/2008 10:55:26 AM   
mh958

 

Posts: 23
Score: 0
Joined: 7/9/2007
Status: offline 		Yeah, I can't do that for all the shares on all the servers. :)

Trying to provide more information, I get this in the Event Viewer on "SMS02" server
under the "Security Tab"

===========================
Event Type:    Failure Audit
Event Source:    Security
Event Category:    Logon/Logoff
Event ID:    531
Date:        8/21/2008
Time:        9:49:44 AM
User:        NT AUTHORITY\SYSTEM
Computer:    SMS02
Description:
Logon Failure:
    Reason:        Account currently disabled
    User Name:   
    Domain:       
    Logon Type:    3
    Logon Process:    Authz  
    Authentication Package:    Kerberos
    Workstation Name:    SMS02
    Caller User Name:    SMS02$
    Caller Domain:    MPLS
    Caller Logon ID:    (0x0,0x3E7)
    Caller Process ID:    804
    Transited Services:    -
    Source Network Address:    -
    Source Port:    -

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

===========================

The SERVER is not disabled when I look at it in AD.


(in reply to blaird)
Post #: 8
RE: Permission to netowrk resources - 8/21/2008 11:52:51 AM   
EdwardKK


Posts: 131
Score: 0
Joined: 5/14/2007
Status: offline 		I'm still pretty sure it's the account in AD.  Either that or you have a problem with the security on the folder share or the folder itself.

(in reply to mh958)
Post #: 9
RE: Permission to netowrk resources - 8/21/2008 1:01:03 PM   
hcortez463


Posts: 780
Score: 62
Joined: 4/8/2005
Status: offline 		yeah sounds like the AD account. is the server in the local admin group of that pc.. it will use SMB with the machine name to connect if no account is specified..

_____________________________

If it Helps, Please rate....

(in reply to EdwardKK)
Post #: 10
Page:   [1]
All Forums >> [Management Products] >> Microsoft Systems Management Server >> SMS 2003 >> Permission to netowrk resources Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts



  
Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.328