Custom Instance Security Rights for Status Message Queries Are Deleted When You Upgrade to Systems Management Server 2003 (830622)


The information in this article applies to:

  • Microsoft Systems Management Server 2003

SYMPTOMS

When you upgrade from Microsoft Systems Management Server (SMS) 2.0 to SMS 2003, some custom instance security rights that are assigned to user accounts are deleted. The deleted instance security rights include rights for the following instances:
  • All audit status messages for a specific user
  • All audit status messages from a specific site
  • All status messages
User accounts still have class security rights to the Query class.

CAUSE

This behavior occurs because SMS 2003 setup overwrites predefined queries.

MORE INFORMATION

When you upgrade to SMS 2003, predefined status message queries are deleted, and new queries are created. As a result, instance security rights for status message queries are not preserved. To run, status message queries require only class-level Read permissions.

STATUS

This behavior is by design.
Modification Type:MinorLast Reviewed:6/13/2005
Keywords:kbsmsAdmin kbUser kbSecurity kbnofix kbBug KB830622 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.