RE: SMS 2.0 & winXP sp2

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Keith P. Rutledge [MSFT] (keithrut_at_online.microsoft.com)
Date: 09/20/04 

Date: Mon, 20 Sep 2004 14:57:00 GMT

Hello,

There are two primary causes for this and they are documented on two
different web
pages, so I am including the URLs and the text (with some editing) for easy
access:

 Here is the relevant section from the Microsoft Systems Management Server
2003
Clients FAQ (see the last item, “Windows XP SP2).”
<http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/tfaq03.msp
x>

"SMS Administrator console: Windows Firewall has three settings: On, On
with no
exceptions, and Off. When you select the Don’t allow exceptions check box,
the SMS
Administrator console cannot connect to any SMS site database from the
Windows XP
client. This is by design. If Windows Firewall is set to On (recommended),
the SMS
Administrator console cannot display all of the items in the console tree
until you
add the program unsecapp.exe and the port TCP 135 to the list of programs
and
services on the Exceptions tab of Windows Firewall."

You can test this by simply setting the Firewall to Off. If the Admin
console works
at that point, you can enable and configure the firewall as follows:

1. Click "Start", open "Control Panel" and launch "Windows Firewall".
2. From the "General" tab in the "Windows Firewall" applet, ensure that
Windows Firewall is enabled ("On"), and the "Don't allow exceptions"
setting is <not> selected.

3. To unblock the network connection for the SMS Administrator console,
from the "Exceptions" tab, click the "Add Program" button.
4. From the "Add a Program" dialog box, click the "Browse" button, then
open the following filename: <%windir%>\system32\wbem\unsecapp.exe
5. Scope can be defined as necessary by clicking the "Change scope"
button, then click "OK" to add the unsecapp.exe program to the
exception list.

6. The program must now be enabled. In the list of "Programs and
Services", locate the "unsecapp.exe" program that was just added and
place a check mark next to it.
7. Click the "Add Port" button.
8. From the "Add a Port" dialog box, type "135" (without the quotation
marks) for "Port number", ensure that "TCP" is the protocol selected,
and type a "Name", for the exception, such as "<SMS Administrator
Console>" (without the quotation marks).
9. Scope can be defined as necessary by clicking the "Change scope"
button, then click "OK" to add the port to the exception list.

10. The port setting must now be enabled. In the list of "Programs and
Services", locate the exception that was just added, such as < "SMS
Administrator Console" (without the quotation marks)> and place a check
mark next to it.
11. Click "OK" to save changes and close the "Windows Firewall" applet.

Regards,

Best Regards,

Keith Rutledge, MCSE NT4/2000
Microsoft Online Support Engineer
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Quantcast