Users of the SMS Administrator console with only Read permission to a collection can install SMS clients

The following Microsoft Systems Management Server (SMS) 2003 Administrator console users can install the SMS client on client computers:

• Users with only Read permissions to the collections class.
• Users with only Read permissions to an instance of the collections class.
• Users with only Read permissions to an instance of the collections class

However, SMS 2003 Service Pack 1 (SP1) Administrator console users are required to have Read, Modify, and Administer permissions to the Collections class.

This problem occurs because the SMS Administrator console only requires that users have Read permissions to the resources in a collection to install the SMS client, or Read, Modify, and Administer to the Collections class if using SMS 2003 SP1..

Service pack information

To resolve this problem, obtain the latest service pack for Systems Management Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

No prerequisites are required.

Restart requirement

You do not have to restart your computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

SMS 2003, pre Service Pack 1 (SP1)

SMS 2003, post SP1

ENUInternationalClient Pack 1International Client Pack 2

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Systems Management Server 2003 Service Pack 2.

For more information about the standard terminology that is used to describe Microsoft software updates, click the following article number to view the article in the Microsoft Knowledge Base:

Hotfix installation instructions

To install this hotfix, follow these steps:

1. Create a folder in a location that your SMS site servers can use.
2. Copy the Sms2003-rtm-kb843362-x86-enu.exe update file to the new folder.
3. From each computer that has the SMS Administrator console installed, use an account that has administrative credentials to log on to the site server. Each computer that has the SMS Administrator console installed includes all the primary SMS site servers in your environment.
4. Quit the SMS Administrator console if it is running.
5. Run the Sms2003-rtm-kb843362-x86-enu.exe file, and then follow the instructions in the wizard.

After you install this hotfix, the SMS Administrator console checks the following list to determine if the user has permission to install the SMS client:

• If the object is a collection, the user must have Modify Resource permissions for the collection.
• If the object is a resource within a collection, the user must have Modify Resource permissions for the collection that the resource is a member of.
• If the object is a query, the user must have Modify Resource permissions to the collection that the query is limited to. If the query is not limited to a collection, then the user must have Modify Resource permissions to the collection class.
• If the object is a resource in a query, the user must have Modify Resource permissions to the collection that the query is limited to. If the query is not limited to a collection, then the user must have Modify Resource permissions to the collection class.

Note Permissions set for a user on instances of a collection class are overridden if the user has permissions to the collection class.