- The SMS computer account or SMS service account does not have local administrative rights on the distribution point server
- Network issues
- Windows administrative shares have been removed from the distribution point
Additionally, the Distmgr.log file may show error messages that resemble the following messages:
The SMS computer account or service account does not have local administrative rights on the distribution point serverThe account that the SMS Distribution Manager service uses must have local administrator rights on SMS site systems that host distribution points. Distribution Manager uses the SMS computer account or the SMS service account. The SMS computer account operates by using advanced security and the service account operates by using standard security. The account that the SMS Distribution Manager service uses must have Full Control permissions to the package directory.
Standard securityThe SMS service account be a domain account. The SMS service account may belong to the Domain Administrator group. However, to help improve security, we recommend that you add the SMS service account to the local Administrator group on all SMS site systems. If the issue began after you changed the SMS service account to a different account, make sure that it belongs to the Domain Administrator group or the local Administrator group on all SMS site systems. Then, perform a site reset by using the new account information.
Troubleshooting permissions issues
Network Abstraction Layer (NAL) loggingEnable NAL logging to find addtional information as to the cause of the issue. For more information about how to enable NAL logging, click the following article number to view the article in the Microsoft Knowledge Base:
Advanced securityVerify that the computer account for the site server is added to the local Administrators group for the distribution point server.
For a Microsoft Windows Server 2003-based computer, you can add computer accounts to groups by using the Windows graphic user interface. For a Microsoft Windows 2000 Server-based computer, you can only add a computer account to a local group or local domain group by using the command prompt.
Add a computer account to a group by using the Windows graphic user interfaceTo add a computer account to a group by using the Windows interface, follow these steps:
- Open Computer Management on a member server or Active Directory Users and Computers on a domain controller.
- In the resulting pane, right-click the group that you want to work with, and then click Properties.
- On the General tab or the Members tab if you are using Active Directory, click Add.
- In the Select Users, Computers, or Groups dialog box, click Object Types.
- In the Object Types dialog box, select Computers, and then click OK.
- In the Enter the object names to select box of the Select Users, Computers, or Groups dialog box, type Computer_Name$, and then click OK.
Note Computer_Name represents the name of the computer that you want to add to the group.
- When the Select Users, Computers, or Groups dialog box closes, verify that the computer that you added appears in the list.
Add a computer account to a group by using the command promptYou can add computer accounts to a domain group or local group of another computer by typing the following command at a command prompt:
Network issuesYou may have to troubleshoot the network connectivity and name resolution between the site server and the distribution point server.
You can use the network monitoring tool that is included with SMS to help you troubleshoot network issues. You can Install Network Monitor 2.1 by running the NetmonSetup.exe setup program from the \NETMON\I386 folder on the SMS 2003 product CD. If you are upgrading from SMS 2.0, you must first uninstall Network Monitor 2.0 by using the Add or Remove Programs item in Control Panel.
Distribution point share does not existThe distribution point installation process creates the distribution point share. When the Windows administrative shares have been removed from the distribution point, the share may not be created during the installation process. Root partitions and volumes are shared as the drive letter name appended with the $ (dollar sign). For example, drives C and D are shared as C$ and D$.
The system root folder (%SYSTEMROOT%) is shared as ADMIN$. This is the Windows folder. The administrative share provides administrators with easy access to the system root folder hierarchy over the network.
Do not remove the administrative shares if your organization uses SMS or Microsoft Operations Manager (MOM). Microsoft Exchange Server, SMS, and MOM rely on access to all default administrative shares on client and server computers to function correctly.
For more information about system-wide consequences of removing administrative shares, click the following article number to view the article in the Microsoft Knowledge Base:
Other troubleshooting toolsCheck the System event log for errors in the W3SVC and DCOM subkeys.
ID do Artigo: 917484 - Última Revisão: 27 de fev de 2007 - Revisão: 1