Article ID: 298375
Article Last Modified on 10/27/2006
APPLIES TO
- Microsoft Operations Manager 2000 Service Pack 1
This article was previously published under Q298375
SYMPTOMS
When you use the Microsoft Operations Manager (MOM) Reporting Tool batch job wizard (also known as the Reporting Command Line Wizard) to create batch jobs for reporting, and you use the AT command or the WINAT utility (from the Windows NT Server 4.0 Resource Kit) to schedule the batch jobs, the batch jobs may not run correctly.
Reports may not be generated to the printer or saved to HTML. Group Changes reports and Rights and Privileges reports may not run.
CAUSE
This problem occurs because AT/WINAT jobs do not run under the security context of the user who is logged in. Instead, scheduled jobs run under the security context that the Task Scheduler service is using. Typically, the Task Scheduler service uses the security context of the operating system or of the Local System account.
WORKAROUND
To work around this problem, use the Scheduled Task Wizard to specify a user account for these jobs to run under:
- Start Control Panel, and then click Scheduled Tasks.
- Click New Scheduled Task, and then follow the steps in the Scheduled Task Wizard.
- At the correct step, type the name and the password of a local administrator, and then complete the remaining steps in the wizard.
Jobs run only under the security context that is specified in the Scheduled Task Wizard. Make sure that the specified account has local Administrators group membership and the "Log on as a batch job" user right. Changing this account to a user account that is a Domain Administrator account (and therefore is also a member of the local Administrators group) causes the Msaccess.exe program to stop responding. When Msaccess.exe stops responding, the batch job is not run, and reports are not generated. Additionally, if MOM 2000 Service Pack 1 (SP1) has been applied to the server, Microsoft recommends that you follow the steps that are described in the following article in the Microsoft Knowledge Base:
812309 Error message when you try to save a report as an HTML file
MORE INFORMATION
If you configure the Task Scheduler service to start with an account other than an Administrator account, you may receive "access denied" error messages when you issue the AT command. By default, only Administrators can submit commands with the AT utility.
Additionally, the Group Changes reports and the Rights and Privileges reports use the Repdll.dll file for Security Identification (SID) translation. Access to the Repdll.dll file is under the context of the user who is logged in if you are manually running the batch job for reports from the command line, from Windows Explorer, or the context of the scheduler that starts the batch-job. The security context must be able to access the primary domain controller for the SID translation.
The Reporting Command Line Wizard is a GUI-based wizard that prompts you for information, and then converts your selections into a batch file. At the end of the wizard, the computer automatically creates the batch file. You do not have to pre-create the batch file.
For more information about scheduling reports or about the Reporting Command Line Wizard, see to the Help files and the documentation that is included on the MOM CD-ROM.
Keywords: kbprb KB298375
