SMS: Account Lockouts and Security Issues if Site Code Conflicts with Domain Name (256963)



The information in this article applies to:

  • Microsoft Systems Management Server 2.0
  • Microsoft Systems Management Server 2.0 SP1

This article was previously published under Q256963

SYMPTOMS

When the site code is identical to the domain name, the Systems Management Server (SMS) Service account and Server Connection accounts experience frequent lockouts.

CAUSE

This problem can occur because the Microsoft Windows NT Logon Server Manager and Windows NT Logon Discovery Manager both write account information in the Mastercfg.cfg file. One uses the domain name, and one uses the site code. If the domain has the same name as one of the sites, they overwrite each other, causing one or the other to use the wrong credentials.

RESOLUTION

To resolve this problem, obtain the latest service pack for Systems Management Server version 2.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

236325 How to Obtain the Latest Systems Management Server 2.0 Service Pack

STATUS

Microsoft has confirmed this to be a problem in Systems Management Server version 2.0 and 2.0 SP1.

Modification Type:MinorLast Reviewed:6/14/2005
Keywords:kbBug kbConfig kbDiscovery kbfix kbnetwork kbSecurity kbsms200sp2fix KB256963