Article ID: 919592 - View products that this article applies to.
Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.
After you deploy Microsoft Windows XP Service Pack 2 (SP2) to client computers that are running the Advanced Client in Microsoft Systems Management Server (SMS) 2003 or in System Center Configuration Manager 2007, you experience the following symptoms:
This problem occurs if a Group Policy object is configured to set the SMS Agent Host service (CcmExec.exe) startup mode to Automatic.
Note By default, the SMS Agent Host service is not configured by using Group Policy.
To resolve this issue, use one of the following methods:
Method 1: Do not define the SMS Agent Host service in Group PolicyModify the Group Policy object to no longer define the startup mode for the SMS Agent Host service. To do this, follow these steps:
Method 2: Assign the NETWORK SERVICE account Full Control permissions to the SMS Agent Host objectWarning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.
You can keep the SMS Agent Host service automatic startup Group Policy if you assign the NETWORK SERVICE account Full Control permissions to the SMS Agent Host object in Group Policy. To do this, follow these steps:
Article ID: 919592 - Last Review: March 17, 2009 - Revision: 2.0
Contact us for more help