Re: Use of Advanced Client Network Access Account
From: Michael Schmitz (anonymous_at_discussions.microsoft.com)
Date: 09/30/04
- Next message: Carl Sullivan [MSFT]: "Re: Clearing reports"
- Previous message: Ronnie van de Laak: "Re: exit code of "0" + reboot still does *not* install package."
- Next in thread: Carl Sullivan [MSFT]: "Re: Use of Advanced Client Network Access Account"
- Reply: Carl Sullivan [MSFT]: "Re: Use of Advanced Client Network Access Account"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 30 Sep 2004 04:55:18 -0700
>>From what I've seen SMS will only failover and try the
network access
>account if it first gets an access error to the package
source folder and
>the "use software installation account" is configured in
the program
>properties.
Yes you're right, I have tested it.
So, our problem, that we want to run advertised packages
on a advanced client in a context with special RW on
network ressources outsite the SMS-Site (a share on any
file server in the network), still remains. All of our
V2.0 packages use this feature (while running in the
context of a defined client installation account which is
a DomainAccount with local admin rights and additional
rights in the network) and now don't work under SMS 2003
with advanced clients.
I don't understand why Microsoft cut this feature
generally. Special security aspects on that, could be in
the responsibility of the administrators.
Michael
>-----Original Message-----
>> can you explain to me how SMS knows when or if a
package access the
>> network?
>SMS don't, it only cares about the installation phase and
it's you that must
>decide if the network access account can be used.
>
>>From what I've seen SMS will only failover and try the
network access
>account if it first gets an access error to the package
source folder and
>the "use software installation account" is configured in
the program
>properties.
>
>/Rune
>
>
>"Michael Schmitz" <anonymous@discussions.microsoft.com>
wrote in message
>news:396a01c4a630$4daef850$a501280a@phx.gbl...
>> Carl,
>>
>> can you explain to me how SMS knows when or if a package
>> access the network? Is is only for accessing files on
the
>> distribution point?
>>
>> SMS allows Packages which don't need a distribution
point
>> and maybe directly start a SETUP.EXE on an UNC-path.
This
>> seems not to be regarded as a network access.
>>
>> Thanks Michael
>>
>>>-----Original Message-----
>>>What you are seeing is correct. An advanced client will
>> always use the
>>>system account to install software when run with admin
>> rights. The
>>>Network access account is used to access the network but
>> is not used
>>>for the installation. This is a change from the software
>> installation
>>>account, SMS used in SMS 2.0.
>>>
>>>On Wed, 29 Sep 2004 05:50:39 -0700, "Michael Schmitz"
>>><anonymous@discussions.microsoft.com> wrote:
>>>
>>>>I defined Advanced Client Network Access Account on the
>>>>Software Disribution Properties of our SMS2003SP1 site.
>>>>
>>>>This account should be used installing a package on an
>>>>advanced client. Therefore I have configured the
>> packages
>>>>programm with the settings "Run with administrative
>>>>rights" and "Use software installation account".
>>>>
>>>>But the advertised package don`t use the defined
>> Advanced
>>>>Client Network Access Account and runs in the context
of
>>>>the local system account.
>>>>
>>>>What's going wrong?
>>>>I need a context of an local administrator with access
>>>>rights in the network (RW access to fileshares) running
>>>>advertised packages.
>>>>
>>>>Michael Schmitz
>>>
>>>Thanks,
>>>
>>>Carl Sullivan
>>>Microsoft SMS Support
>>>
>>>This posting is provided "AS IS" with no warranties,
>>>and confers no rights.
>>>.
>>>
>
>
>.
>
- Next message: Carl Sullivan [MSFT]: "Re: Clearing reports"
- Previous message: Ronnie van de Laak: "Re: exit code of "0" + reboot still does *not* install package."
- Next in thread: Carl Sullivan [MSFT]: "Re: Use of Advanced Client Network Access Account"
- Reply: Carl Sullivan [MSFT]: "Re: Use of Advanced Client Network Access Account"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
