SMS: The SMSCliToknAcct& Account May Be Locked Out

This article was previously published under Q299352
This article has been archived. It is offered "as is" and will no longer be updated.
SYMPTOMS
The SMSCliToknAcct& account may be locked out on any server that functions as a Client Access Point (CAP). If security auditing is turned on, the Security event log may show unsuccessful logon attempts, and may show account lock-outs with event IDs 529 and 539.
CAUSE
This problem may occur because SMS clients may sometimes try to connect to CAPs by using their local SMSCliToknAcct& account. If the domain or server has a lockout policy in use, the domain or server SMSCliToknAcct& account is locked out. This prevents Software Distribution from working on domain controllers or servers that are CAPs.
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
prodsms
Properties

Article ID: 299352 - Last Review: 10/23/2013 19:56:00 - Revision: 3.2

  • Microsoft Systems Management Server 2.0 Standard Edition
  • kbnosurvey kbarchive kbbug kbenv kbprb KB299352
Feedback