Re: MSSecure.cab

From: Richard Threlkeld (MVP)
Date: 12/22/04 

Date: Wed, 22 Dec 2004 09:36:59 -0800

Ok. On SMS 2003 there is no SMSCliToknLocalAcct& account to configure. By
default the Sync program is set to run with a user logged on and with those
users rights. If this is how you want it to be configured then you'll need
to make sure that the user that is logged on has SMS object level permission
to that package so that it can be refreshed as well as permission to the
SoftwareUpdates class (really the node in the SMS Admin console, look at the
perms) and full NTFS rights to the package source. 

-- 
Richard Threlkeld
Microsoft MVP - SMS
http://myitforum.techtarget.com/blog/rthrelkeld/
"John" <hush@dontspamme.com> wrote in message 
news:eJAiHQC6EHA.3416@TK2MSFTNGP09.phx.gbl...
> Hi Guys,
>
> To answer your questions together.
>
> Version is SMS2003 SP1. SP recently installed. SQL Server is on a remote 
> machine. Both running Windows 2003. SQL SP3a.
> The provider is on the SQL Server
> John
>
> "Adam Welker [MSFT]" <adamwel@online.microsoft.com> wrote in message 
> news:eiHnlZ65EHA.540@TK2MSFTNGP12.phx.gbl...
>> Is SQL local or remote and if remote where is the provider located?
>>
>> -- 
>> Adam Welker
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>>
>>
>>
>> "Richard Threlkeld <MVP>" <r_threlkeldAThotmail.com> wrote in message 
>> news:OltwIU55EHA.2316@TK2MSFTNGP15.phx.gbl...
>>> What version of SMS are you on?
>>>
>>> -- 
>>> Richard Threlkeld
>>> Microsoft MVP - SMS
>>> http://myitforum.techtarget.com/blog/rthrelkeld/
>>>
>>>
>>> "John" <hush@dontspamme.com> wrote in message 
>>> news:uNzNoR35EHA.3756@TK2MSFTNGP14.phx.gbl...
>>>> Hi Richard,
>>>>
>>>> Thanks very much for the reply. I've had a read of the link to 
>>>> MyITForum you specified. I have one question. My Sync Host is my Site 
>>>> Server. From what you have said below, and the link, it appears that I 
>>>> need to give permission to the SMSCliToknAcct& local account. However. 
>>>> my Site Server does not have this account locally.  Am I missing the 
>>>> point here? I would prefer to keep this set up on the Site Server and 
>>>> running unattended. All appears to be ok with the SiteServer client 
>>>> side. I'm able to view details within Resource Explorer, matching the 
>>>> Servers spec, so HINV and SINV are working OK.
>>>>
>>>> Does the Site Server still have an SMSCliToknAcct& account? Also, you 
>>>> specify that the account sunning SyncXML should have rights to the 
>>>> Package Data Source directory and the package object. The package Data 
>>>> source directory is the location specified on the Package Properties:
>>>>
>>>>
>>>> SiteServer\c$\Program Files\SecurityPatch\PkgSource
>>>>
>>>> Am I right? And My Package Object Security Tab lists myself, my 
>>>> colleage, a Domain Admin account and the NT Authority/System as having 
>>>> full rights on the package. How can I give permissions to the 
>>>> SMSCliTokAcct& if it doesn't esist on the system, and isn't available 
>>>> to add to the Package Properties tab?
>>>>
>>>> Sorry to ask so many questions
>>>>
>>>> Regards,
>>>>
>>>> John
>>>>
>>>> "Richard Threlkeld <MVP>" <r_threlkeldAThotmail.com> wrote in message 
>>>> news:uCLXqYs5EHA.3708@TK2MSFTNGP14.phx.gbl...
>>>>> Here is the key:
>>>>>
>>>>> "Failed to update Distribution Points.  Error code: 2147942405. 
>>>>> Consider use of /unattend and separate DP update schedule."
>>>>>
>>>>> 2147942405 translates to "Access is denied".  The problem is that the 
>>>>> cab is downloaded file to your source but the account running the Sync 
>>>>> doesn't have rights to SMS most likely.  Try using the steps in this 
>>>>> article: http://myitforum.techtarget.com/articles/1/view.asp?id=5281
>>>>>
>>>>> -- 
>>>>> Richard Threlkeld
>>>>> Microsoft MVP - SMS
>>>>> http://myitforum.techtarget.com/blog/rthrelkeld/
>>>>>
>>>>>
>>>>> "John" <hush@dontspamme.com> wrote in message 
>>>>> news:e35XfVo5EHA.2624@TK2MSFTNGP11.phx.gbl...
>>>>>> Hi Richard.
>>>>>>
>>>>>> Attached is my most recent log. I have had to manually download and 
>>>>>> place the mssecure files as sync does not download for me.
>>>>>>
>>>>>> Regards,
>>>>>>
>>>>>> John
>>>>>> "Richard Threlkeld <MVP>" <r_threlkeldAThotmail.com> wrote in message 
>>>>>> news:O%23yo0Qf5EHA.3124@TK2MSFTNGP11.phx.gbl...
>>>>>>> Can you post your SecuritySyncXML.log?
>>>>>>>
>>>>>>> -- 
>>>>>>> Richard Threlkeld
>>>>>>> Microsoft MVP - SMS
>>>>>>> http://myitforum.techtarget.com/blog/rthrelkeld/
>>>>>>>
>>>>>>>
>>>>>>> "Luke Packard [MSFT]" <lukep@online.microsoft.com> wrote in message
>>>>>>> news:uaQ2FpI5EHA.2600@TK2MSFTNGP09.phx.gbl...
>>>>>>>> Cross posting to software_updates newsgroup
>>>>>>>>
>>>>>>>> -- 
>>>>>>>> Luke Packard [MSFT]
>>>>>>>>
>>>>>>>> SMS 2003 Technical FAQ:
>>>>>>>> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
>>>>>>>>
>>>>>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>>>>>> rights.
>>>>>>>>
>>>>>>>> "Fred" <hush@dontspamme.com> wrote in message
>>>>>>>> news:eR1C$of4EHA.1192@tk2msftngp13.phx.gbl...
>>>>>>>>> Guys,
>>>>>>>>>
>>>>>>>>> SMS2003 on Win2003.
>>>>>>>>>
>>>>>>>>> I've installed the Scan tools (Sy, Office and MS04-028) and set 
>>>>>>>>> them up
>>>>>>>>> to synch daily. Synch is running but the latest version of the 
>>>>>>>>> file is
>>>>>>>>> not being downloaded. My xml file doesn't include MS04-040. MS are 
>>>>>>>>> due to
>>>>>>>>> release all their monthly fixes tomorrow. I have downloaded the 
>>>>>>>>> latest
>>>>>>>>> file, MSSecure_1033.cab.
>>>>>>>>>
>>>>>>>>> Where abouts do I need to put this to force clients to use it? . 
>>>>>>>>> Do I
>>>>>>>>> need to put the cab file in this location, or extract the xml file 
>>>>>>>>> and
>>>>>>>>> put that there?I assume that clients will download a copy locally 
>>>>>>>>> next
>>>>>>>>> time they sync?
>>>>>>>>>
>>>>>>>>> Thanks
>>>>>>>>>
>>>>>>>>> Fred
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>