Microsoft KB Archive/826142

= The Advertised Programs Monitor does not start after you install Systems Management Server 2.0 SP 5 =

Article ID: 826142

Article Last Modified on 1/30/2007

-

APPLIES TO


 * Microsoft Systems Management Server 2.0 Service Pack 5

-





SYMPTOMS
In domain environments where users log on to a master domain, and the client computers reside in a resource domain, the Advertised Programs Monitor (Smsmon32.exe) may not start on a client computer that is running Microsoft Systems Management Server (SMS) 2.0 Service Pack 5 (SP5).

Additionally, these client computers may not receive software distribution packages.



CAUSE
This issue may occur if you log on to an SMS 2.0 SP5 client computer, but you are not a member of the \Users group, where   is the name of the SMS client computer. You are a member of a local Users group on a client computer if one of the following is true:
 * Your master domain user account is in the local Users group.
 * You belong to a global group in the master domain, and this global group is a member of the local Users group.

SMS 2.0 SP5 grants specific Access Control Lists (ACLs) to the following local groups on the client computer:
 * Administrators
 * Users

If you log on to a computer, and you are not a member of either of these groups, your user account cannot read the following subkey values in the registry of the client computer:



RESOLUTION
To resolve this issue before you install or upgrade to SP5, follow one of these steps:
 * Add your master domain user account to the local Users group on your SMS 2.0 client computer.
 * If you belong to a global group from the master domain, add this global group to the local Users group on your SMS 2.0 client computer. For example, if you are a member of the \Domain Users group, add this group.

To resolve this issue on a computer that is already running SP5, add the following statement to your user logon script, where  is the name of the local Users group on the client computer, and   is the name of the domain that contains your user account:

net  Users &quot; \Domain Users&quot; /ADD

Note This method may require you to log on to the client computer two or more times for the Advertised Programs Monitor to start correctly.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

297307 How to add a master domain administrator account to the local Administrators group of a resource workstation



MORE INFORMATION
SMS 2.0 SP5 introduces enhancements to increase the security of site-to-site communication and of general administration. To see an overview of fixes and design changes in SP5, visit the following Microsoft Web site:

http://support.microsoft.com/kb/q816549/

In the &quot;Changes in Applying Access Control Lists to Objects&quot; section, the Web site states that &quot;the local users' group has been added to the object's current ACLs.&quot; However, in domain environments where users log on to a master domain and the client computers are in a resource domain, Advertised Programs Monitor may not start on the client computer.

Additional query words: Cusrmgr utlity

Keywords: kbuser kbsysadmin kbsecurity kbprb KB826142

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.