SMS 2003 1

[Hankejp]

I am having some problems with SMS 2003. Some of my component's are flagging me with errors. For example:

For SMS_SITE_COMPONENT_MANAGER

Systems Management Server cannot create the object "cn=SMS-MP-WAU-WAUNMS" in Active Directory.

Why can't SMS create objects in AD? For my service account, I have myself as the account to use. I am a Domain Admin.

Actually, most of the errors seem to be because SMS can't add objects into AD. Any help would be greatly appreciated.

Thanks

 

[mnt25]

Hey,

What security mode are you running? advanced security requires AD, security mode doesn't but requires WINS.

is the system management container created in AD? I recommend creating the container using the ADSIEdit tool and grant the SMSAdmin account (see below) the full control right to this object and all child objects.

it most likely seems to be a permission's issue. If your using advanced security, you don't need an SMS service account

If you are going to be running advanced security, I recommend creating an SMSAdmin account that has domain admin rights. Use this account when your installing and setting up the SMS environment. after things are installed and configured, then you can remove the user from domain admin.

-HTH
Matt

 

[Hankejp]

Actually, I'm running in standard security mode. That would make sense, since we don't use WINS anymore and are in AD. Would I need to change over to Advanced Security? I think for some reason I didn't because I couldn't do some things or because I have 98 users for a little bit yet, or something like that.

Where do I find the ADSIEdit tool?

Thanks a bunch for the help....

 

[mnt25]

Hey,

To run in advanced security mode:
- AD must be enabled
- All SMS site server and all SMS site systems must be running Windows 2000 SP1 or later or Windows Server 2003 in an AD Domain
- It is not possible to use an advanced security site in a Windows NT 4.0 domain.

To access the ADSIEdit.msc tool, you must install the Windows 2000 Administrator Tools. To install these tools, run AdminPak.msi in the \system\system32 folder.

-Hope this helps
Matt

 

[Mieszko]

You might also want to check to see if you were successful in allowing SMS 2003 to extend the AD schema. (q229691 - How to Enable Domain Controllers to Modify the Schema) or (q285172 - Schema Updates Require Write Access to Schema In Active Directory)

 

[Hankejp]

I extended AD and added the container manually. That worked fine, but unfortunately, my SQL database got hosed. I reinstalled everything from scratch and it seems to be working a lot better with AD extended now. I am getting a different message now that I can't find any information on. It's the following:

SMS_OFFER_STATUS_SUMMARIZER Message ID # 3813

SMS Offer Status Summarizer cannot process a status message because it does not contain an advertisement ID. As a result, the Advertisement statur summary data in the SMS Administrator may be inaccurate.

The messaage (ID 10090) was reported by component " Software Distribution" on Computer "####" at site WAU on 11/18/03. Please refer to Microsoft Knowledge Base for more information.

Any Ideas?

Thanks