Microsoft KB Archive/256963

From BetaArchive Wiki
Knowledge Base


SMS: Account Lockouts and Security Issues if Site Code Conflicts with Domain Name

Article ID: 256963

Article Last Modified on 10/27/2006



APPLIES TO

  • Microsoft Systems Management Server 2.0 Standard Edition
  • Microsoft Systems Management Server 2.0 Service Pack 1



This article was previously published under Q256963

SYMPTOMS

When the site code is identical to the domain name, the Systems Management Server (SMS) Service account and Server Connection accounts experience frequent lockouts.

CAUSE

This problem can occur because the Microsoft Windows NT Logon Server Manager and Windows NT Logon Discovery Manager both write account information in the Mastercfg.cfg file. One uses the domain name, and one uses the site code. If the domain has the same name as one of the sites, they overwrite each other, causing one or the other to use the wrong credentials.

RESOLUTION

To resolve this problem, obtain the latest service pack for Systems Management Server version 2.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

236325 How to Obtain the Latest Systems Management Server 2.0 Service Pack


STATUS

Microsoft has confirmed this to be a problem in Systems Management Server version 2.0 and 2.0 SP1.


Additional query words: prodsms

Keywords: kbbug kbconfig kbdiscovery kbfix kbnetwork kbsecurity kbsms200sp2fix KB256963