Article ID: 830022 - View products that this article applies to.
After you install Microsoft Systems Management Server (SMS) 2003 or Microsoft System Center Configuration Manager 2007, the Site Component Manager component may log the following status messages:
Additionally, the following entries may appear in the Hman.log file:
MessageID=4909 Severity=Error Facility=Application SymbolicName=SRVMSG_SITECOMP_CANNOT_FIND_SMS_AD_CONTAINER Language=English SMS Systems Management Server could not locate the "System Management" container in Active Directory. Nor could it create a default container. This will prevent Site Component Manager from updating or adding any objects to Active Directory. Possible cause: This site’s SMS Service account or the site server’s machine account might not have the correct rights to update active directory. Solution: Either give the Service Account rights to update the domain's System Container, or manually create the "System Management" container in this domain's Active Directory system container, and give the Service Account full rights to that container (and all children objects).
MessageID=4912 Systems Management Server cannot update the already existing object "System Management" in Active Directory.
MessageID=4913 Systems Management Server cannot create the object "System Management" in Active Directory.
MessageID=4915 Systems Management Server cannot delete the object "System Management" in Active Directory.
If you use the ExtADsch.exe tool, the following entries may appear in the ExtADsch.log file:
System Management container exists. Searching for SMS-Site-123 Site Object. SMS-Site-123 doesn't exist, creating it. SMS-Site-123 could not be created, error code = 8202
Failed to create class cn=MS-SMS-Management-Point. Error code = 8202. Failed to create class cn=MS-SMS-Server-Locator-Point. Error code = 8202. Failed to create class cn=MS-SMS-Site. Error code = 8202. Failed to create class cn=MS-SMS-Roaming-Boundary-Range. Error code = 8202. Failed to extend the Active Directory schema.
This problem may occur when Site Component Manager cannot locate or does not have the correct permission to manage the System Management container in Active Directory.
SMS 2003 and Configuration Manager 2007 must have permissions to create or to change the System Management container in Active Directory. To resolve this problem, use one of the following methods:
You can use the ADSIEdit.exe utility to manually create the System Management container in the Active Directory System container. However, SMS or Configuration Manager must have permissions to manage the objects in the container.
If you manually create the container, you must make sure that the site server machine account (if you use Advanced Security) or the SMS or Configuration Manager service account (if you use Standard Security) has Full Control permissions to the System Management container and to all its child objects.
If you manually create the System Management container, follow these steps to grant the appropriate permissions:
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Before SMS or Configuration Manager can publish to Active Directory, the Active Directory schema must be extended. You can extend the Active Directory schema when you install SMS 2003 or Configuration Manager 2007, or you can manually extend the schema by using the ExtADsch.exe utility. The ExtADsch.exe utility is located in the SMSSETUP\BIN\i386 folder on the SMS 2003 CD. For more information about how to extend the Active Directory schema for SMS 2003, see part 3, chapter 10 and part 4, chapter 15 of the SMS 2003 online Concepts, Planning and Deployment Guide. The status message details for SMS Site Component Manager may offer additional solutions. For the most current version of the Concepts, Planning and Deployment Guide, visit the following Microsoft website:
For more information about the Active Directory schema, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/216060/ )Registry modification required to allow write operations to schema
(https://support.microsoft.com/kb/285172/ )Schema Updates Require Write Access to Schema in Active Directory
(https://support.microsoft.com/kb/310996/ )Active Directory services and Windows 2000 or Windows Server 2003 domains (part 1)
(https://support.microsoft.com/kb/310997/ )Active Directory services and Windows 2000 or Windows Server 2003 domains (part 2)
Article ID: 830022 - Last Review: March 22, 2011 - Revision: 5.0