Re: having problems creating packages - access denied..

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Cathy Moya [MS] (camoya_at_online.microsoft.com)
Date: 08/06/04


Date: Fri, 6 Aug 2004 15:15:00 -0700

Hm, that was my one big idea. Maybe someone else will jump in here.
Sometimes I've turned on Windows auditing to look more closely at the
denies.
If I had the leeway to do it and was looking for other things to try, I
might add the computer account directly to the ACLs just to see what
happens.

-- 
Cathy Moya, MCSE: Security, MCT
Technical Writer, Enterprise Management Content Group
Check out the SMS Technical FAQ:
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
This posting is provided AS IS with no warranties and confers no rights.
"luc" <luc@discussions.microsoft.com> wrote in message
news:5C055D53-B951-42FD-948F-90A65415BAEF@microsoft.com...
> Cathy,
>
> thanks for the info,
>
> I've given a global group (which contains all of the site server computer
> accounts), full share permission and also full local security permission.
In
> addition made sure that in local security policy, that the "access from
> network" rights also had this group.  Still no go.
> it's a sms2k3 (advance security) site, package creating the from a network
> share source (server is w2k sp4).
>
> I also looked into the possibility of the Advance client network access
> account.  I created one that is just part of the domain user's group. (my
> share, where files are has at least everyone with "read" access).  But no
go
> still...
>
> getting the following errors:
>
> SMS Distribution Manager failed to process package "RightFax" (package ID
=
> NTS00008).
>
> Solution: Review the previous status messages for further clarification
> about this problem.
>
>
> Second Message:
>
> The source directory "\\campus-fax\Client\Win32" for package "NTS00008"
does
> not exist. The operating system reported error 5: Access is denied.
>
> Solution: Make sure you have specified a valid package source directory on
> the Data Source tab in the Package Properties dialog box in the SMS
> Administrator console. If you specify a local path, it must be a local
path
> on the site server. If you specify a path on a network drive, verify that
the
> path exists and that the path is typed correctly.
>
>
> Both servers are in the same domain, no firewalls.
> any ideas?
>
> tia!
> luc
>
>
>
>
>
>
>
> "Cathy Moya [MS]" wrote:
>
> > The site server computer account needs access to the source. Also:
> > Computers running Windows NT 4.0 and computers in a Windows NT 4.0
domain
> > cannot be used as a package source server when the SMS site is in
advanced
> > security mode.
> >
> > When SMS 2003 is in advanced security mode and a package source is on
> > another computer, SMS uses the site server computer account to connect
to
> > the package source computer. Computers running Windows NT 4.0 in an
Active
> > Directory domain cannot authenticate a computer account. Similarly,
> > computers running a Windows operating system in a Windows NT 4.0 domain
> > cannot authenticate a computer account. A connection from an SMS 2003
site
> > server in advanced security mode would therefore fail.
> >
> > Hope that helps.
> >
> >
> > -- 
> > Cathy Moya, MCSE: Security, MCT
> > Technical Writer, Enterprise Management Content Group
> >
> > Check out the SMS Technical FAQ:
> >
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
> > This posting is provided AS IS with no warranties and confers no rights.
> >
> >
> >
> > "luc" <luc@discussions.microsoft.com> wrote in message
> > news:EC318C63-1E21-4D2A-971A-EA7102439D82@microsoft.com...
> > > Hello
> > >
> > > Just wondering if anyone had a problem when creating a package -- and
> > setting the "source" path to a UNC, if they get any errors when sms
tries to
> > go get the files from the source to the DPs. (access denied).
> > >
> > > running sms 2k3 with advance secrurity..
> > > luc
> > >
> > >
> > >
> >
> >
> >


Relevant Pages

  • Re: Event 4319 after secondary site server rebuild
    ... Yes, both the secondary site server's computer account, as well as the SMS ... Service account have full control on the System Management container, ... direct permission assignment, ...
    (microsoft.public.sms.admin)
  • Re: what is reset account?
    ... Such doesn't require perfect security, ... the GPO team's updates to the production domain and the ACL got wiped in ... can force the client to do a password change. ... computer account, along with repairing all other DNS problems etc, ...
    (microsoft.public.win2000.active_directory)
  • Re: what is reset account?
    ... adding the computer to the group and what accessit grants. ... Such doesn't require perfect security, ... can force the client to do a password change. ... computer account, along with repairing all other DNS problems etc, ...
    (microsoft.public.win2000.active_directory)
  • Re: Error message in site component manager
    ... accounts of all my SMS Servers. ... computer account into the group; add the group into the new computer's local ... I then go to AD and then to the systems management container ...
    (microsoft.public.sms.setup)
  • Re: SMS resource record directly linked to Active Directory computer account
    ... > Is there a way to make SMS 2003 SP1 require that each resource record must ... > have a corresponding computer account in Active Directory? ... SMS will automatically delete the corresponding record. ... > I'm using AD system discovery to populate SMS and push the client. ...
    (microsoft.public.sms.admin)