Microsoft KB Archive/256963

= SMS: Account Lockouts and Security Issues if Site Code Conflicts with Domain Name =

Article ID: 256963

Article Last Modified on 10/27/2006

-

APPLIES TO


 * Microsoft Systems Management Server 2.0 Standard Edition
 * Microsoft Systems Management Server 2.0 Service Pack 1

-



This article was previously published under Q256963



SYMPTOMS
When the site code is identical to the domain name, the Systems Management Server (SMS) Service account and Server Connection accounts experience frequent lockouts.



CAUSE
This problem can occur because the Microsoft Windows NT Logon Server Manager and Windows NT Logon Discovery Manager both write account information in the Mastercfg.cfg file. One uses the domain name, and one uses the site code. If the domain has the same name as one of the sites, they overwrite each other, causing one or the other to use the wrong credentials.



RESOLUTION
To resolve this problem, obtain the latest service pack for Systems Management Server version 2.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

236325 How to Obtain the Latest Systems Management Server 2.0 Service Pack



STATUS
Microsoft has confirmed this to be a problem in Systems Management Server version 2.0 and 2.0 SP1.

Additional query words: prodsms

Keywords: kbbug kbconfig kbdiscovery kbfix kbnetwork kbsecurity kbsms200sp2fix KB256963

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.