System Center 2012 Configuration Manager incorrectly uses the Site System Installation Account for a remote site system to connect to the SQL Server database

Article translations Article translations
Article ID: 2689646 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You install Microsoft System Center 2012 Configuration Manager together with a remote Microsoft SQL Server in the same domain as the site server.
  • You have a remote site system that is in an untrusted domain (a perimeter network, also known as DMZ, demilitarized aone, and screened subnet).
  • You select the Use another account for installing this site system option for the remote site system, and you specify an account that has local administrative rights on that server.
  • You deploy roles to the remote site system such as the Distribution Point role.

In this scenario, Configuration Manager may incorrectly try to use the Site System Installation Account that is configured for the remote site server to update the SQL Server database. When this occurs, the update fails, and the following messages are logged.

In the remote SQL Server log:
MSSQLSERVER,18452,Logon,Login failed. The login is from an untrusted domain and cannot be used with Windows authentication. [CLIENT: primary_site_server_IP_address]

In the Distrmg.log:
*** [28000][18452][Microsoft][ODBC SQL Server Driver][SQL Server]Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.

*** Failed to connect to the SQL Server. Cannot save the package status to the data source... 

WORKAROUND

On the SQL Server, create a local account that has the same name as the Site System Installation Account that is configured for the remote site server, and grant the account access to the Configuration Managers database. Then, pass through authentication works around Configuration Manager's use of the Site System Installation Account.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Properties

Article ID: 2689646 - Last Review: July 9, 2012 - Revision: 2.0
APPLIES TO
  • Microsoft System Center 2012 Configuration Manager
Keywords: 
kbtshoot kbprb kbexpertiseinter kbsurveynew KB2689646

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com