Re: SMS_LAN_SENDER 3530 when installing Secondary site

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


Did you reboot the sms server after adding it to the domain admins
group?

The group needs to get onto the computer accounts access token.
User access tokens are built during logon, hence the logon/logoff
procedure for users if you add them to a group.
Same thing applies to computer acounts with the exception that their
token is built during boot, hence the reboot question.

Kim Oppalfens
MVP SMS
In article <1118209405.290646.72630@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
john.exists@xxxxxxxxx says...
> Hi everybody,
>
> I'm getting this error when I try to install a Secondary site and use
> the computer account (i.e. don't enter a value) when I create the
> Standard Sender Address.
>
> In AD, I've tried adding the computer account of the Primary site
> server to the Domain Admins group - which should, therefore, grant the
> account rights over the D$ share on the target machine. This doesn't
> seem to work.
>
> When I specify an account with domain admin rights in the Standard
> Sender Address box, the site is created without any problem.
>
> Does anyone have any ideas why this should be? Surely if the computer
> account of the Primary site server is in the Domain Admins group, it
> has full rights over the target Secondary site server? (This is in a
> very small lab and, yes, I allowed the domain time to replicate.)
>
> Thanks in advance for any pointers. Although I can work around the
> problem, I want to be sure that it isn't going to cause any issues in
> the future.
>
> j.
>
>

--
Kim Oppalfens
SMS MVP
.

Relevant Pages

  • Re: "Access Is Denied" when XPPro Client tries to Join Domain
    ... computer account with a different name. ... Chane the name of the PC and reboot, ... >>> I added SBS2003 server and ran it through it config, ... >>> When I look at the security log on the server, ...
    (microsoft.public.windows.server.sbs)
  • Re: Deleted exchange computer account-unable to rejoin domain
    ... exchange server from an image. ... original computer account, we've rejoined the new server (with the damaged ... HD) to the domain with the same name, therefore after the restore we're tried ... You need to restore the Exchange server from ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Admins Group -- Trying to trim membership
    ... very trusted and competent people being domain admins. ... a qualified regular domain user by managing AD object permissions. ... server, installing a Certificate Authority, etc. usually are not done every ... controllers are only domain controllers running DNS and not also a print, ...
    (microsoft.public.win2000.security)
  • RE: Xp machine does not see the network
    ... Can you ping the computer account name and IP-address from the servers? ... flush dns cache on both server and computer ...
    (microsoft.public.windows.server.general)
  • Re: Deleted exchange computer account-unable to rejoin domain
    ... You need to restore the Exchange server from ... AD we've resetted the computer account. ... We then decided to restore the Exchange server from an image we've ...
    (microsoft.public.windows.server.active_directory)