Microsoft KB Archive/843362

= Users of the SMS Administrator console with only Read permission to a collection can install SMS clients =

Article ID: 843362

Article Last Modified on 6/27/2007

-

APPLIES TO


 * Microsoft Systems Management Server 2003

-





SYMPTOMS
The following Microsoft Systems Management Server (SMS) 2003 Administrator console users can install the SMS client on client computers:
 * Users with only Read permissions to the collections class.
 * Users with only Read permissions to an instance of the collections class.
 * Users with only Read permissions to an instance of the collections class

However, SMS 2003 Service Pack 1 (SP1) Administrator console users are required to have Read, Modify, and Administer permissions to the Collections class.



CAUSE
This problem occurs because the SMS Administrator console only requires that users have Read permissions to the resources in a collection to install the SMS client, or Read, Modify, and Administer to the Collections class if using SMS 2003 SP1..



Service pack information
To resolve this problem, obtain the latest service pack for Systems Management Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

885643 How To obtain the latest Systems Management Server 2003 service pack

Hotfix information
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that this article describes. Apply this hotfix only to systems that are experiencing this specific problem.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Prerequisites
No prerequisites are required.

Restart requirement
You do not have to restart your computer after you apply this hotfix.

Hotfix replacement information
This hotfix does not replace any other hotfixes.

File information
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

SMS 2003, pre Service Pack 1 (SP1)
  Date         Time   Version        Size     File name 25-Dec-2003 12:45  2.50.2726.145  159,744  Sms_mctw.dll

SMS 2003, post SP1
ENU   Date         Time   Version        Size     File name 20-Oct-2004 10:55  2.50.3174.1126  172,032  Sms_mctw.dll InternationalClient Pack 1   Date         Time   Version        Size     File name 20-Oct-2004 10:55  2.50.3174.1126  172,032  Sms_mctw.dll International Client Pack 2   Date         Time   Version        Size     File name 20-Oct-2004 10:55  2.50.3174.1126  172,032  Sms_mctw.dll



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section. This problem was first corrected in Systems Management Server 2003 Service Pack 2.



MORE INFORMATION
For more information about the standard terminology that is used to describe Microsoft software updates, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Hotfix installation instructions
To install this hotfix, follow these steps:
 * 1) Create a folder in a location that your SMS site servers can use.
 * 2) Copy the Sms2003-rtm-kb843362-x86-enu.exe update file to the new folder.
 * 3) From each computer that has the SMS Administrator console installed, use an account that has administrative credentials to log on to the site server. Each computer that has the SMS Administrator console installed includes all the primary SMS site servers in your environment.
 * 4) Quit the SMS Administrator console if it is running.
 * 5) Run the Sms2003-rtm-kb843362-x86-enu.exe file, and then follow the instructions in the wizard.

After you install this hotfix, the SMS Administrator console checks the following list to determine if the user has permission to install the SMS client:
 * If the object is a collection, the user must have Modify Resource permissions for the collection.
 * If the object is a resource within a collection, the user must have Modify Resource permissions for the collection that the resource is a member of.
 * If the object is a query, the user must have Modify Resource permissions to the collection that the query is limited to. If the query is not limited to a collection, then the user must have Modify Resource permissions to the collection class.
 * If the object is a resource in a query, the user must have Modify Resource permissions to the collection that the query is limited to. If the query is not limited to a collection, then the user must have Modify Resource permissions to the collection class.

Note Permissions set for a user on instances of a collection class are overridden if the user has permissions to the collection class.

Additional query words: hotfix push install client read permission

Keywords: kbqfe kbhotfixserver kbbug kbsms2003bug kbfix kbwinservperf kbmgmtservices kbprb KB843362

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.