Re: Central Site info not flowing down

If you go to a command prompt and type net helpmsg 1240
you get:
The account is not authorized to log in from this station.

So it looks like you have account restrictions in place. Check your security
policies.

--
Cathy Moya, CISSP, MCSE: Security
Technical Writer, Windows Enterprise Management Division User Assistance

Check out the SMS Technical FAQ:
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
This posting is provided AS IS with no warranties and confers no rights.

"Stan" <thestan01@xxxxxxxxx> wrote in message
news:9A2B4884-67A7-4262-B41F-F629A61D786E@xxxxxxxxxxxxxxxx
> Already had the computer accounts added to the Site to Site group and the
> servers have been bounced. On the the sender.log and this is the only
> error
> I can find in the sender.log - There is no existing connection, Win32
> error =
> 1240. I've searched but can't find any info on this
> --
> Stan
>
>
> "Cathy Moya [MS]" wrote:
>
>> Sounds like a security issue. Check the address account you are using
>> from
>> the primary parent to the other primary children, the ones that aren't
>> showing up.
>>
>> If you are using standard security, make sure the address account is
>> added
>> to the Site to Site Connection (SMS_SiteToSiteConnection_sitecode) group.
>>
>> If you are using advanced security, add the computer account of the
>> computer
>> initiating the connection to the Site to Site Connection group on the
>> computer receiving the connection. This means that all child site servers
>> should be added to the Site to Site Connection group on the parent site.
>> Parent site server computer accounts should be added to the Site to Site
>> Connection group on all children (and grandchildren if you want to use a
>> direct sender to them.) Also, remember when you add an account to a
>> group,
>> including a computer account to a group, the change does not take effect
>> until the next logon. For a computer account, that next logon is when the
>> computer next restarts, so a reboot might fix things if you did the
>> adding
>> already.
>>
>> If it still isn't working, take a look at the sender.log file. It's
>> pretty
>> informative.
>>
>> Be patient after making changes. This was always the most complicated lab
>> in
>> the old SMS courses because it was easy to misconfigure something and
>> sometimes it took a while for SMS to readjust after we found and fixed
>> the
>> security issue.
>>
>> BTW, if you are using Windows 2000 server, adding computer accounts to
>> groups can be tricky. Here's a link to a doc with the procedure:
>> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/security/spsecsms03/spsec_10.mspx#ECAA
>>
>> Hope that helps!
>>
>> --
>> Cathy Moya, CISSP, MCSE: Security
>> Technical Writer, Windows Enterprise Management Division User Assistance
>>
>> Check out the SMS Technical FAQ:
>> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
>> This posting is provided AS IS with no warranties and confers no rights.
>>
>>
>>
>> "Stan" <thestan01@xxxxxxxxx> wrote in message
>> news:05D625E5-53A5-43C0-B767-57E5593E2599@xxxxxxxxxxxxxxxx
>> > SMS 2003 1 central site, 3 primary sites reporting up and numerous
>> > secondary
>> > sites. From one primary site the collections, packages, etc. from the
>> > central
>> > site can be seen from it's sms console. The other 2 primary sites
>> > can't
>> > see
>> > this information. Anyone got any idea why they can't see the
>> > collections?
>> > We
>> > use the central site to push out software updates, common programs etc.
>> > --
>> > Stan
>>
>>
>>


.

Relevant Pages

  • RE: Scavanging retired machine accounts
    ... Here's a script I wrote a while back that does exactly what you want. ... 'pull back a list of every user's account name and distinguished name ... we're probably only interested in the disabled computer accounts ... 'There is no point disabling PCs based on how many weeks it's been since the ...
    (microsoft.public.windows.server.scripting)
  • Re: Adding a computer account to files security list
    ... > file or folder Security list, but also computer accounts. ... > from granting Change permission on a folder to a computer account? ... It's going to sound redundant but it would allow the computers account ...
    (microsoft.public.win2000.active_directory)
  • Re: Problems with Disabled Computer Accounts
    ... I had a similar situation and after rebooting I was unable to login.. ... Recently I discovered that after Disabling one of my computer accounts ... if I disable a Computer account I should not be ... Am I just under the wrong impression on how Disabling ...
    (microsoft.public.windows.server.active_directory)
  • RE: Trust relationship failed
    ... computer's machine account using the netdom utility or unjoining/rejoining ... If the old computer accounts are still sitting in AD Users and Computers, ... will need to supply a domain account that has permissions to join computers ... These servers are no longer mapable but pingable. ...
    (microsoft.public.win2000.active_directory)
  • Re: Deploying an msi application via group policy
    ... > application via GPO to the user account side then it will be automagically ... >> the user to install it. ... >> GPO to an OU that contains the computer accounts, ...
    (microsoft.public.win2000.active_directory)