Re: Adv Client with Workgroup Computers

Tech-Archive recommends: Fix windows errors by optimizing your registry




"Mikecl" <Mike_Clark_2@xxxxxxxxxxx> wrote in message
news:%23kkg2XEnFHA.2580@xxxxxxxxxxxxxxxxxxxxxxx
> Struggling to Get Workgroup machines managable.
>
> I have seen numerous posts for Workgroup machines
> http://myitforum.techtarget.com/articles/8/view.asp?id=7747
> and I followed this one in partucular.. The only thing I have not done is
to
> set the Sms Service account to Localsystem I looked at that but I have it
> configured as a domain account at moment. I am not sure of the
ramifications
> of changing this and cant see how to change it to Localsystem account as
it
> wants Domain\User syntax
> The Server is running in Standard Security Mode
>
> I have pushed out the Adv sms client to 2000 odd machines in different
> domains ok
>
> I have a number of Workgroup computers I would like to manage via SMS 2003
> (SP1). I understand I cant push the SMS Adv client to the machines so I
> configured the Adv Network Access Account made sure it had rights to the
> \\server\smsclient share. Then on a workgroup client machine logged on and
> mapped a drive using the Adv Network access Account and run a script
calling
> ccmsetup with the appropriate command line parameters. (not in AD so did
not
> use /service switch.
>
> Ccmsetup runs and downloads to the client, on the local machine it starts
> running then fails geting client.msi file saying \\server\smsclient\i386\
> inacessible even though I have a drive mapped to the same place to run the
> script.
>
> If I then copy the client.msi to the local machine ccmsetup dir and run it
> manually it installs the client ok and is displayed on the SMS server.
Wins
> is configured and is found ok in the locationlog on the client. I have to
> perform a repair as not all settings (cache Size) are not configured.
>
> If I try and connect from the SMS server i get access denied to the logs
dir
> or if I try changing or initiatiing any WMI actions on the client. e.g
> Hardware or Software Inv
>
> I have three questions:
>
> 1. Why do I get \\server\smsclient\i386 inaccessible even though I use the
> same Adv network access account as configured on the Server and already
> manually mapping a drive to \\server\smsclient?

The client needs permissions at the sms server... the Adv Network access
account comes into play after the client is installed.

> 2. Is it normal to get acess denied in a workgroup scenario if I try and
> connect from the server to the client logs dir or change any setting like
> run hardware Inv? I can open resource explorer for the machines in
question.

What credentials are you using from the server?

> 3. Will I still be able to Push software to the machines ok?

Once you get the client installed, yes.

I suspect that the clients may not have WINS properly configured, you'll
need a pointer back to your SMS site server. Also, you may want to consider
using the Advanced security model; it's more secure and it may solve some of
the issues you are experiencing. I did find one link that you may want to
check:
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/plan/sp1supportedconfigs.mspx

Steve


.



Relevant Pages

  • Re: Problem getting a new XP computer to join an NT 4.0/Win 98 domain
    ... > the computers and the file server with the goal of getting ... > If you scan Network Neighborhood for the Entire Network after ... > booting, there are 3 workgroups: ... > machines to see and map to shares on the NT file server. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Problem getting a new XP computer to join an NT 4.0/Win 98 domain
    ... > the computers and the file server with the goal of getting ... > If you scan Network Neighborhood for the Entire Network after ... > booting, there are 3 workgroups: ... > machines to see and map to shares on the NT file server. ...
    (microsoft.public.win2000.networking)
  • Re: Joining client to domain
    ... I was checking messages and came across this post, because I have ran MS virtual PC on many occasions to test for configurations or beta testing (just recently server 2008) and I was wondering if I could add my 2 cents. ... However when you try to join the workstation (assuming that is what you are calling your client pc), have you tried just entering the domain controller name only. ... To change a computer name and to join a domain or a workgroup, ... Click More to change the primary Domain Name System (DNS) suffix. ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Ms office should also be in a client/server environment
    ... Supposedly there will be a server based version of Excel (that I assume you ... > windows client and office as many machines comes preinstalled from the ... so thats why I want that if microsoft builds some office server ... > preinstalled with windows client and office too. ...
    (microsoft.public.office.developer.automation)
  • Re: nessus returning an empty report
    ... There is communication between the client and server, ... I have scanned localhost, 127.0.0.1 and other machines on the network, ... I've mailed the nessus mailing list and had some suggestions from them. ...
    (Pen-Test)