Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 922800 - Last Review: December 13, 2006 - Revision: 1.0
You cannot use the SMS Service Manager tool to access a site server if your user account is in a nested group in SMS 2003
You try to start the SMS Service Manager tool. Or, you try to use this tool to connect to a site server.
Note The SMS Service Manager tool is a component of Microsoft Systems Management Server (SMS) 2003.
However, in these situations, you receive one of the following error messages.
- When you try to start the SMS Service Manager tool:
Access denied (0x80041003)
- When you try to connect to a SMS Site Server:
Error communicating with the specified SMS Site Server.
You experience this issue if the following conditions are true:
- Your user account is a member of a security group that is nested in another security group.
- That other security group is a member of the local Administrators group on the SMS site server. Or, that other security group is a member of the local SMS Admins group on the SMS site server.
This issue occurs because SMS 2003 does not recursively resolve the membership of nested groups that are contained in the local groups that have access to SMS 2003.
Currently, this is the expected behavior in SMS 2003.
To work around this issue, add the nested group that contains your user account directly to one of the following groups on the SMS site server:
- The local Administrators group
- The SMS Admins group
For more information about security groups in Windows, visit the following Microsoft Web site:
APPLIES TO
- Microsoft Systems Management Server 2003
| kberrmsg kbenv kbtshoot kbprb KB922800 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate