Re: having problems creating packages - access denied..

From: luc (luc_at_discussions.microsoft.com)
Date: 08/06/04 

Date: Fri, 6 Aug 2004 13:57:05 -0700

Cathy,

thanks for the info,

I've given a global group (which contains all of the site server computer
accounts), full share permission and also full local security permission. In
addition made sure that in local security policy, that the "access from
network" rights also had this group. Still no go.
it's a sms2k3 (advance security) site, package creating the from a network
share source (server is w2k sp4).

I also looked into the possibility of the Advance client network access
account. I created one that is just part of the domain user's group. (my
share, where files are has at least everyone with "read" access). But no go
still...

getting the following errors:

SMS Distribution Manager failed to process package "RightFax" (package ID =
NTS00008).

Solution: Review the previous status messages for further clarification
about this problem.

Second Message:

The source directory "\\campus-fax\Client\Win32" for package "NTS00008" does
not exist. The operating system reported error 5: Access is denied.

Solution: Make sure you have specified a valid package source directory on
the Data Source tab in the Package Properties dialog box in the SMS
Administrator console. If you specify a local path, it must be a local path
on the site server. If you specify a path on a network drive, verify that the
path exists and that the path is typed correctly.

Both servers are in the same domain, no firewalls.
any ideas?

tia!
luc

"Cathy Moya [MS]" wrote:

> The site server computer account needs access to the source. Also:
> Computers running Windows NT 4.0 and computers in a Windows NT 4.0 domain
> cannot be used as a package source server when the SMS site is in advanced
> security mode.
>
> When SMS 2003 is in advanced security mode and a package source is on
> another computer, SMS uses the site server computer account to connect to
> the package source computer. Computers running Windows NT 4.0 in an Active
> Directory domain cannot authenticate a computer account. Similarly,
> computers running a Windows operating system in a Windows NT 4.0 domain
> cannot authenticate a computer account. A connection from an SMS 2003 site
> server in advanced security mode would therefore fail.
>
> Hope that helps.
>
>
> --
> Cathy Moya, MCSE: Security, MCT
> Technical Writer, Enterprise Management Content Group
>
> Check out the SMS Technical FAQ:
> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
> This posting is provided AS IS with no warranties and confers no rights.
>
>
>
> "luc" <luc@discussions.microsoft.com> wrote in message
> news:EC318C63-1E21-4D2A-971A-EA7102439D82@microsoft.com...
> > Hello
> >
> > Just wondering if anyone had a problem when creating a package -- and
> setting the "source" path to a UNC, if they get any errors when sms tries to
> go get the files from the source to the DPs. (access denied).
> >
> > running sms 2k3 with advance secrurity..
> > luc
> >
> >
> >
>
>
>

Relevant Pages

  • Mysterious "Support" account created on Win2k server
    ... One of my web servers appears to have had an intrusion. ... Advanced Server, SP3, up to date on all security patches. ... I discovered that the Local Security ... single local account called "Support" that I did not recognize. ...
    (Incidents)
  • Re: Anonymous Account not working
    ... I don't see any security log entries. ... I think the problem may be with the local account. ... built the server there was another server that was named WEB02, ... renamed this server (so that the iusr and iwam accounts would be ...
    (microsoft.public.inetserver.iis.security)
  • Re: Server 2003 AD, security context APIs, "operations error" ??
    ... since that is a much more common server scenario than ... Are you saying that the NTLM security ... security context to log on remotely, but if it is not forwardable (cannot be ... access AD and read this info if the process' account has the rights in AD to ...
    (microsoft.public.platformsdk.security)
  • Re: HTTP 401.3 error: Please help - Urgent.
    ... inability to logon -- when the Security log is full AND you misconfigured ... Is this really WHAT IS CAUSING AUTHENTICATION ... PROBLEMS in my server? ... > Does this have anything to do with the IUSR_Machinename account? ...
    (microsoft.public.inetserver.iis)
  • RE: Remote Machine account could not be added to server connection gro
    ... when you add a computer account to a group, ... Active Directory on Windows Server 2003 R2 domain controllers. ... Basically the problem was caused by the fact the primary site server ...
    (microsoft.public.sms.admin)