This article has been archived. It is offered "as is" and will no longer be updated.
When you install Microsoft Systems Management Server (SMS) 2003 client agents on a Microsoft Windows 2000, Windows XP, or Windows Server 2003-based client computer, the status for some of the agents may change to Install Pending after you restart the SMS Client service or after the Client Component Installation Manager (CCIM) cycle is complete. Additionally, the following information may appear in the Windows\MS\SMS\Logs\Clisvc.log file:
"C:\WINNT\MS\SMS\clicomp\SWDist32\bin\ODPUSR32.exe " - Error : 1314*** WNet User Groups Offer Data Provider - Error launching (#0x3EB)!!!WARNING: Problem starting App (1003). Doing App Verify.
You experience this behavior with the following client agents:
The Software Inventory Client Agent
The Advertised Programs Client Agent
This issue occurs if both the following conditions are true:
The client computer is running the Legacy Client.
A domain security policy restricts a required permission of the local SMSCliSvcAcct& account on the client computer.
For example, you experience this behavior if the local SMSCliSvcAcct& account does not have the Replace process level token user rights assignment. The SMSCliSvcAcct& account requires the following user rights assignments:
Act as part of the operating system
Log on as a service
Replace a process level token
Shut down the system
To resolve this issue, upgrade the SMS client computers to the SMS 2003 Advanced Client. The issue described in this article does not occur with the Advanced Client because the Advanced Client uses a different security model than the Legacy Client. The Advanced Client runs in the context of the Local System account. Therefore, it does not require additional user accounts or permissions.
To work around this issue, add the correct security rights to the domain security policy for the SMSCliSvcAcct& account. To do so, follow these steps:
Log on to a domain controller.
Click Start, point to Programs, point to Administrative Tools, and then click Domain Security Policy.
Expand Security Settings, expand Local Policies, and then click User Rights Assignment.
In the right pane, double-click a policy. For example, double-click Act as part of the operating system.
If the policy setting is defined, add the SMSCliSvcAcct& account.
When you are finished adding the SMSCliSvcAcct& account to the policy settings that are defined, exit the Domain Security Policy tool.
Let sufficient time pass for the policy changes to replicate throughout the domain.
Additionally, the SMSCliSvcAcct& account must be a member of the local Administrators group on the SMS client computer.
Error code 1314 that appears in the Clisvc.log corresponds to the following error message:
A required privilege is not held by the client.
For additional information about a related issue in SMS 2.0, click the following article number to view the article in the Microsoft Knowledge Base:
295771 SMS: A "Restricted Group" Policy May Prevent SMS Clients from Being Installed