SMS: Low-Rights User Is Unable to Browse Criteria 'Values' Without Class Rights

Hotfix Download Available
View and request hotfix downloads

View products that this article applies to.

This article was previously published under Q305096

SYMPTOMS

When a user that does not have class-level read or read-resource rights to the Collections class attempts to construct a query, and subsequently attempts to browse a list of attribute values by clicking the Values button on the General tab of the Criterion Properties dialog box, no results are returned for any hardware or software class attributes. Note that this may occur even though the user has read-resource rights to the instance of the collection to which the query is limited.

Back to the top

CAUSE

Collection limiting for a query is not implemented when you click the Values button on the General tab of the Criterion Properties dialog box. Without collection limiting, unless the user has class-level read and read resource rights to collections class, no results are returned when you click the Values button.

Back to the top

RESOLUTION

Service Pack Information

To resolve this problem, obtain the latest service pack for Microsoft Systems Management Server 2.0. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

288239 (http://support.microsoft.com/kb/288239/EN-US/ ) How to Obtain the Latest Systems Management Server 2.0 Service Pack

Back to the top

Hotfix Information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support (http://support.microsoft.com/contactus/?ws=support)

Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language. The English post-SMS 2.0 Service Pack 3 version of this fix should have the following file attributes or later:

   Date         Time   Version         Size       File name      Platform
   ----------------------------------------------------------------------
   01-Mar-2001  15:00  2.0.1493.3200     540,672  Mmcbasui.dll   Intel
   01-Mar-2001  17:05  2.0.1493.3213     207,056  Sms_pcol.dll   Intel
   01-Mar-2001  17:05  2.0.1493.3213     101,056  Sms_pqry.dll   Intel
   01-Mar-2001  15:00  2.0.1493.3200   1,008,400  Mmcbasui.dll   Alpha 
   01-Mar-2001  17:05  2.0.1493.3213     404,752  Sms_pcol.dll   Alpha 
   01-Mar-2001  17:05  2.0.1493.3213     197,904  Sms_pqry.dll   Alpha

NOTE: Due to file dependencies, the most recent hotfix or feature that contains the above files may also contain additional files.

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Microsoft Systems Management Server 2.0 Service Pack 5.

Back to the top

MORE INFORMATION

To install the hotfix, use the appropriate method on the SMS site server and each computer that is running an instance of the administrator console.

Back to the top

Using the Hotfix Installer

NOTE: You can use this method only on Intel-based computers.

Copy the hotfix folder structure to a share on your network. Q305096.exe is an SMS Installer file that updates specific files on your site server.
Log on to your site server by using an account with administrative privileges.
On the site server, quit the SMS administrator console.
Run Q305096.exe, and then follow the directions in the wizard. You can run the file in Quiet mode by using the /s switch.

Back to the top

Manual Installation

Copy the following SMS Administrator console files to a disk or network share:
- Sms_pcol.dll
- Sms_pqry.dll
- Mmcbasui.dll
At the SMS site server, use Regsvr32.exe to unregister the files you are about to overwrite:
- <SMS_root>\bin\<processor type>\Sms_pcol.dll
- <SMS_root>\bin\<processor type>\Sms_pqry.dll
Make a backup copy of the files:
- <SMS_root>\bin\<processor type>\Sms_pcol.dll
- <SMS_root>\bin\<processor type>\Sms_pqry.dll
- <SMS_root>\bin\<processor type>\Mmcbasui.dll
Copy the updated files from the disk or network share to the SMS site server folder:
- <SMS_root>\bin\<processor type>\Sms_pcol.dll
- <SMS_root>\bin\<processor type>\Sms_pqry.dll
- <SMS_root>\bin\<processor type>\Mmcbasui.dll
Use Regsvr32.exe to register the updated files:
- <SMS_root>\bin\<processor type>\Sms_pcol.dll
- <SMS_root>\bin\<processor type>\Sms_pqry.dll

Back to the top

To Update a Remote SMS Administrator Console

NOTE: Before you implement this update on your SMS administrator console, you must install it on the SMS site servers in your environment.

From the updated SMS site server, copy the following SMS administrator console files to a disk or network share:
- <SMS_root>\bin\<processor type>\Sms_pcol.dll
- <SMS_root>\bin\<processor type>\Sms_pqry.dll
- <SMS_root>\bin\<processor type>\Mmcbasui.dll
At the SMS administrator console, use Regsvr32.exe to unregister the files you are about to overwrite:
- <SMSAdmin_root>\bin\<processor type>\Sms_pcol.dll
- <SMSAdmin_root>\bin\<processor type>\Sms_pqry.dll
Make a backup copy of the files:
- <SMSAdmin_root>\bin\<processor type>\Sms_pcol.dll
- <SMSAdmin_root>\bin\<processor type>\Sms_pqry.dll
- <SMSAdmin_root>\bin\<processor type>\Mmcbasui.dll
Copy the updated files from the diskette or network share to the SMS Administrator console folder:
- <SMSAdmin_root>\bin\<processor type>\Sms_pcol.dll
- <SMSAdmin_root>\bin\<processor type>\Sms_pqry.dll
- <SMSAdmin_root>\bin\<processor type>\Mmcbasui.dll
Use Regsvr32.exe to register the updated files:
- <SMSAdmin_root>\bin\<processor type>\Sms_pcol.dll
- <SMSAdmin_root>\bin\<processor type>\Sms_pqry.dll

With this hotfix applied, browsing for values from the query builder criterion property page returns valid attributes for the collection to which the query is limited.

For example, if you construct a query in which the criteria includes Operating System\Caption, and the query has been limited to a collection that only includes computers that are running Microsoft Windows 2000 Professional, the browse list will only include an entry for Windows 2000 Professional as the Operating System Caption.

NOTE: For this new functionality to work, you must browse for the collection to which you are limiting the query. If the collection name is manually typed, the collection limiting will not be properly set for the purposes of browsing query-criterion-attribute values.

Back to the top