Re: Management Points not working after domain controler demontion on
- From: <Kim Oppalfens [MVP]>
- Date: Mon, 23 Apr 2007 11:14:45 +0200
Demoting will kill all the sms groups and their memberships.
You might want to run aclreset, which if I recall correctly would recreate the groups.
--
"Everyone is an expert at something"
Kim Oppalfens - Sms Expert for lack of any other expertise
Windows Server System MVP - SMS
"Bruce Taylor" <BruceTaylor@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:F6998882-CEC2-4E46-BC72-7885668FDC82@xxxxxxxxxxxxxxxx
Seems on gotcha is that the SMS server is not added to the local
administrators group after the demotion (makes sense). This allows me not to
send apps to the DP. The HTTP errors are still there though. I can see
client machines filling the IIS logs with "401 ccmhttp" errors. Poor lost
little services...
"Bruce Taylor" wrote:
Recently a client demoted a number of Windows 2000 DC's. These where
secondary SMS servers running IIS 5.0. Applications cannot be deployed to
these servers now. It seems that IIS lost its ability to allow guest access.
When looking at the MP through IE (from another computer) to for example
http://SERVER/sms_mp/.sms_aut?mplist we get
You are not authorized to view this page
Looking at the the MPCONTROL.LOG file on these servers we see a lot of
Http verification .sms_aut (port 80) failed with status code 401, Access
Denied $$<SMS_MP_CONTROL_MANAGER><Sun Apr 22 12:33:52.437 2007 New Zealand
Standard Time><thread=3660 (0xE4C)>
This was not happening before the demotion. The servers that where not
demoted are fine. As I understand it when a DC uses IIS it has no local
accounts so it created domain account for things like ISUR_SERVER type
accounts. Now the servers are member servers it does seem to have created
these accounts locally.
I cant find anything on demoting a secondary server running as a DC (not
recommended I know but common enough).
Any ideas out there? I am not a SMS or IIS expert but I have an
understanding of the basics. Do we need to re-install IIS and SMS on these
servers? I am hoping there is a way to avoid re-distributing all that data
over our thin links.
Thanks in advance.
Bruce
.
- Prev by Date: Re: How to pass custom properties to a SMS install
- Next by Date: Re: remote control asking user's credentials
- Previous by thread: User cannot use admin console - Hourglass
- Next by thread: Re: Management Points not working after domain controler demontion on
- Index(es):
Relevant Pages
|
