RE: Capinst help
- From: Ryan <Ryan@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 24 Jul 2007 12:28:03 -0700
Scot - Found the answer! Link:
http://www.microsoft.com/technet/sms/2003/library/techfaq/tfaq02.mspx
Article:
Yes. If you run your site systems on Windows Server 2003 SP1, you might
need to perform some workarounds to restore full SMS functionality. The
following sections of this FAQ provide information about issues that might
arise and suggested workarounds you can perform:
• Resetting the DCOM permissions to pre-Windows Server 2003 SP1 levels
• Additional Configuration Tasks if you Run the Security Configuration Wizard
• Identifying Ports and Services Required If Windows Firewall Is Enabled
Resetting the DCOM permissions to pre- Windows Server 2003 SP1 levels
Server locator points and reporting points require the same level of DCOM
permissions they had prior to Windows Server 2003 SP1. Windows Server 2003
SP1 splits the previous Launch permission into Local Launch and Remote Launch
and splits the Activation permission into Local Activation and Remote
Activation. In addition, the activation permissions are being moved from the
Access Permission ACL to the Launch Permission ACL. For more information
about the new COM permissions, see Granular COM Permissions on MSDN.
If you upgrade your server locator point to Windows Server 2003 SP1, you
must reset the COM permissions so that the Internet Guest Account
(IUSR_<servername>) has Local Launch permissions as it did prior to SP1, as
shown in the following procedure.
To grant Local Launch permission to the Internet Guest Account:
1. On the site system, from the Start menu, Click Run and type Dcomcnfg.exe.
2. In Component Services, Click Console root, Click Component Services,
Click Computers, Click My Computer, Click DCOM Config, and then Click
SMS_SERVER_LOCATOR POINT.
3. On the Action menu, Click Properties.
4. In the Launch and Activation Properties dialog box, on the Security tab,
in the Launch and Activation Permissions section, Click Edit.
5. In the Launch and Activation Permissions dialog box, select the check box
to allow both Launch Localand Local Activation for Internet Guest Account
(IUSR_servername).
If you upgrade your reporting point to Windows Server 2003 SP1, you must
reset the COM permissions so that the SMS Reporting Users Group has Local
Launch permissions as it did prior to SP1, as shown in the following
procedure.
To grant Local Launch permission to the SMS Reporting Users Group:
1. On the site system, from the Start menu, Click Run and type Dcomcnfg.exe.
2. In Component Services, Click Console root, Click Component Services,
Click Computers, Click My Computer, Click DCOM Config, and then Click
SMS_REPORTING_POINT.
3. On the Action menu, Click Properties.
4. In the SMS Reporting Point Properties dialog box, on the Security tab, in
the Launch and Activation Permissions section, Click Edit.
5. In the Launch and Activation Permissions dialog box, select the check box
to allow Local Activation for SMS Reporting Users Group.
.
- Prev by Date: Re: Moving collections to child site
- Next by Date: RE: Client install using capinst.exe
- Previous by thread: RE: Capinst help
- Next by thread: Re: Query Active Directory from SMS for Computer Account Descripti
- Index(es):
Relevant Pages
|
Loading
