Minimum Permissions Required.

Tech-Archive recommends: Fix windows errors by optimizing your registry



I have an SMS 2003 SP1 site. My helpdesk have a VB application that
they use to assign applications to workstations. As an SMS
administrator I can run this app with no issues. The helpdesk get an
access denied message. I need to know what are the minimum permissions
are to run the VB app. KB252674 talks about a similar situation, but
it takes the shotgun solution of making the helpdesk members of the SMS
Admins local group, which is a lot more permission than I want to give
out.

The line of code that the application barfs at is:
Services = Locator.ConnectServer(strSMSProviderServer, "root\sms\site_"
& strSMSProviderSitecode, User, Password). For the non-programmers
amongst us, this line of code authenticates and connects to the SMS CIM
repository.

Once connected the program runs: QueryResults =
Services.ExecQuery("SELECT * FROM SMS_Package") in order to get a list
of all packages. These packages are then presented as a list to the
helpdesk user.

When the helpdesk user assigns the package to the workstation, all that
happens is that the computer account is added to a global group in AD
that has been used in an SQL membership rule to an advertisement.

So, what are the minimum permissions I need?
Read on the Central site object and read on the package class? I tried
that and still got an access denied mesage.

.



Relevant Pages

  • Remote Tools - Help!
    ... and i want the helpdesk ... staff to be able to remote control all the PCs in our Domain. ... When i install the sms administrator console on the helpdesk PC, ...
    (microsoft.public.sms.tools)
  • Re: Access to Collection and Remote Tools
    ... Helpdesk members are in a group called helpdesk and I added the helpdesk ... "Kim Oppalfens" wrote: ... > Sms doesnot really like nested groups. ... >>> MVP SMS ...
    (microsoft.public.sms.admin)
  • Re: Minimum Permissions Required.
    ... Sms Administrators group permissions is the minimum you will get away with. ... My helpdesk have a VB application that ... These packages are then presented as a list to the ...
    (microsoft.public.sms.admin)
  • Re: SMS MMC
    ... I've created a Security Group in AD which contains our Helpdesk staff accounts. ... I then created an SMS MMC containing the Collections and Reporting snapins as those are the only 2 areas we want Helpdesk to have access to. ...
    (microsoft.public.sms.misc)
  • OSD on Admin console
    ... Packages node OS packages ... I have added the Helpdesk group to SMS Admins ... Distribute) to the individual packages under the Image Packages node ...
    (microsoft.public.sms.setup)