Microsoft KB Archive/922800

= You cannot use the SMS Service Manager tool to access a site server if your user account is in a nested group in SMS 2003 =

Article ID: 922800

Article Last Modified on 12/13/2006

-

APPLIES TO


 * Microsoft Systems Management Server 2003

-



SYMPTOMS
You try to start the SMS Service Manager tool. Or, you try to use this tool to connect to a site server.

Note The SMS Service Manager tool is a component of Microsoft Systems Management Server (SMS) 2003.

However, in these situations, you receive one of the following error messages.  When you try to start the SMS Service Manager tool:

Access denied (0x80041003)

 When you try to connect to a SMS Site Server:

Error communicating with the specified SMS Site Server.



You experience this issue if the following conditions are true:
 * Your user account is a member of a security group that is nested in another security group.
 * That other security group is a member of the local Administrators group on the SMS site server. Or, that other security group is a member of the local SMS Admins group on the SMS site server.



CAUSE
This issue occurs because SMS 2003 does not recursively resolve the membership of nested groups that are contained in the local groups that have access to SMS 2003.

Currently, this is the expected behavior in SMS 2003.



WORKAROUND
To work around this issue, add the nested group that contains your user account directly to one of the following groups on the SMS site server:
 * The local Administrators group
 * The SMS Admins group



MORE INFORMATION
For more information about security groups in Windows, visit the following Microsoft Web site:

http://technet2.microsoft.com/WindowsServer/en/Library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx?mfr=true

Additional query words: console access denied 0x80041003 WMI domain local global

Keywords: kberrmsg kbenv kbtshoot kbprb KB922800

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.