RE: SMS Admin consoloe hangs on client?
- From: "Andreas Hedström" <AndreasHedstrm@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 9 Jun 2005 12:59:31 -0700
Hi.
There was no firewall issue in my case, I had to change the DCOM-permissions
in order to get it to work;
Q. I permitted unsecapp.exe and TCP port 135 through my firewall, but my SMS
Administrator console running on Windows XP SP 2 still cannot connect to the
SMS site database. What should I do next? (Added January 31, 2005)
A. Some customers have reported this issue, but at this time, Microsoft has
not been able to reproduce this condition. If you run the SMS Administrator
console only from computers that belong to the same domain as the SMS
Provider, permitting unsecapp.exe and port TCP 135 to pass through the
Windows Firewall should be sufficient. However, some customers have reported
that even after permitting these two exceptions, the SMS Administrator
console still cannot connect to an SMS site database from the Windows XP SP 2
client, even when both computers are in the same domain. As a last resort,
adding anonymous remote access rights in DCOM resolves the issue but
increases your security risk.
If you grant anonymous remote access rights, you disable a layer of
protection for the system. An attacker no longer needs to circumvent user
authentication to discover and exploit potential vulnerabilities in the
system. To avoid potential attacks related to granting anonymous remote
access rights, you can use Remote Desktop to connect to the computer running
the SMS Provider and run the SMS Administrator console remotely.
To allow anonymous remote access in DCOM:
1.
From the Start menu, click Run and type Dcomcnfg.exe.
2.
In Component Services, click Console Root, click Component Services, click
Computers, and then click My Computer. On the Action menu, click Properties.
3.
In the My Computer Properties dialog box, on the COM Security tab, in the
Access Permissions section, click Edit Limits.
4.
In the Access Permission dialog box, select the check box to allow Remote
Access for Anonymous Logon.
5.
Restart the computer.
Strangely, the SMS Console still work after I revert the DCOM-permissions
after a successful login to the console?
--
Andreas
"Sai Wong [MSFT]" wrote:
> The reason why you are getting the hourglass is due to changes in Win XP SP2.
> Please take a look at the following FAQ:
>
> http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/tfaq03.mspx
>
> look at the section for Windows XP SP2
>
>
> Also, if you use the SMS 2003 RTM admin console to connect to SMS 2003 SP1
> site server, the connection will fail. This is by design. You cannot use a
> down-level version of the admin console to connect to a site server. Always
> install the same version of the admin console to connect to the site server.
>
> Sai
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Andreas Hedström" wrote:
>
> > I can't get the SMS Admin console to work on any of my clients. (Windows XP
> > SP2).
> > My SMS 2003 installation is upgraded to SP1. I have also installed the OS
> > Deployment featurepack (with the hotfix that comes along with it).
> >
> > If I install the SMS Admin console and related tools from the original
> > (non-SP1 media) the SMS admin console refuses to connect.
> >
> > If I install the tools from the Service Pack 1 media, I can connect to my
> > SMS-server,
> > but I cannot reach any functions. If I click, Site hierarchy, Collections,
> > Packages, Software metering etc. all I get is an hourglass that never goes
> > away...?
> >
> > (SMS admin console works locally on the SMS-server, but not on any clients..)
> >
> > What can be wrong?
> > --
> > Andreas
.
- References:
- SMS Admin consoloe hangs on client?
- From: Andreas Hedström
- RE: SMS Admin consoloe hangs on client?
- From: Sai Wong [MSFT]
- SMS Admin consoloe hangs on client?
- Prev by Date: Remote Control - Use without users authority
- Next by Date: Status filter rule
- Previous by thread: RE: SMS Admin consoloe hangs on client?
- Next by thread: Delta Inventory
- Index(es):
Relevant Pages
|
