System Management Server and Enterprise Security

Host guest_grace says: Hello, everyone. Welcome to the Microsoft China community online technology chat host guest_luke_ms says: Today's chat topic is System Management Server and Enterprise Security host guest_grace says: today we are invited to: Yan Jing-qing mvphost guest_grace says: the chat will soon begin. Please take the time to ask related technical questions and we are honored to discuss technical questions together. Q: User "SMS \ Administrator" requested that the CCR be generated for resource "14 ". but no CCR is generated. possible cause: this is not a system resource, this is not assigned to current site if you choose to install client on system resource A: first check your boundary and Discovery Methods, we recommend that you include your ad site in boundary. The default is default-first-site-name Q: it is said that SMS configuration and management have high requirements on technical personnel, how high is it? A: You need to have a deep understanding of the network and ad, but the configuration of SMS is not very difficult, mainly because troubleshooting is troublesome. Q: SMS client Configuration Manager cannot connect to the machine "fnc076 ". the operating system reported error 5: Access denied. Possible cause: the client is not accessible. solution: Verify that the client is connected to the network and that the SMS Service A: You can check the ccmsetup of the client. log errors. Make sure that: 1. time Synchronization 2.dns 3. enable remote registry service. in addition, the operating system of the client needs to be installed on the C disk, otherwise there will be a problem Q: What is the big difference between using SMS to distribute software and using GPO? A: SMS can control the distribution time, install the client, support more file types, and improve the report system. These GPO do not have Q: there are still some workstation workers who can collect most of the network. A: This depends on the client log to determine the root cause of the problem. Q: Can I recommend a software for creating an MSI installation package? A: A lot of software can be used, such as SMS installer, installer shield, and Windows 2 k installation disks. However, the function is weak. Q: What is the relationship between sms2003 and ad, is it true that sometimes errors are generated by ad? How to judge? A: mainly 1. global roaming 2. the client queries the SMS site information from the ad. If there is no AD, it needs to install wins 3. automatic secure key exchange between sites Q: I think there are always some problems with confirming clients within the SMS boundary? A: network discovery is not recommended in sms2003. Active AD discovery is recommended. Q: How should we determine whether it is caused by ad or SMS? A: Generally, it is rarely caused by ad. Check the sms q: Can sms2003 be used to control the screen and keyboard of a remote computer? A: Remote control can be implemented. Q: it is best not to deploy SMS without ad. Otherwise, many problems may occur. Is this statement reliable or unreliable? A: absolutely reliable Q: I have installed sms2003 on the backup domain control. It is invalid to update the user's password on the primary domain. It can only be performed on the standby domain. a: In theory, it should not. I need to analyze it in detail. Q: it is very annoying to release a security patch. For each patch, you need to enter the corresponding parameters. is there a better solution? A: It's not annoying. You only need to add/Q/Z, or you can decompress the patch and distribute it, for example, "q123456-X", and decompress it to a directory, create a package distribution. The program is hotfix.exe update.exe Q: Event Type: Information Event Source: Application popup event category: None event ID: 26 Date: 2004-4-21 time: 10:31:53 User: n/a computer: serverh Description: Application popup: Messenger Service: Message from serverh to serverh on 2004-4-21 10 A: This is only a message, not error/warning Q: Can sms2003 view shared folder by modifying the MOF file? A: I have seen similar examples. Q: What is the difference between the evaluation version and the official version? A: The evaluation version has a time limit. Q: How many historical records are there in the sms2003 hardware and software list? What is the difference in the database? Which table is the column?: SMS 2.0 or 2003? Q: Can I use SMS to prevent computers already in the domain from being detached from the domain without authorization? A: Do not give him the local Admin rights A: SMS 2003 hardware information has been placed in different tables, such as modem_data and netcard_data. The historical records are in modem_hist and netcard_hist Q: there is a problem, that is, if I installed SMS in the English version and installed it in the English version of the server, but my clients have English version users and Chinese version users, how can I update patches? A: SMS will automatically list all the patches for clients in different languages, you can refer to http://www.microsoft.com/technet/itsolutions/techguide/msm/swdist/pmsms/2003/pmsms031.mspx Q: Can you combine the automatic update service of SUS and the function of the automatic distribution software of SMS, an important reason for using SMS is to distribute patches, but does sus require administrator privilege? A: If you use SMS to distribute patches, the client does not need to be local Admin. SMS will automatically attempt the smsclittoknacct account (automatically add the account to the local Admin group when necessary, and use the patch to exit automatically), and the software install account. q: How many times does the sms2003 Hardware and Software List have their own historical records? A: How often will the database be updated based on your site maintenance rules? Q: one in the world? Do you want to discuss the issue of the SMS group? A: Yes, my MSN: peter_zhai@hotmail.com hope to communicate with you more, but my MSN is close to the MSN friends limit:-(Q: when Will MS release the sms2003 Chinese Version operation manual and FAQ and other Chinese documents? A: Microsoft has some internal data in Chinese, but it is unclear when it will be put on the public network. Q: but when SUS is used to notify the client to install the update package, the login user of the client must have administrator permissions. I mean, can sus reference the account of the client of the SMS? A: The Sus client does not require a local administrator. A common user can, but may not be able to see the icon Q: Software install account. In the lower-right corner. Is this account required to have administrator permissions? A: It is recommended to belong to the domain Admin group Q: I would like to ask how to use LCS as a server, and how can the client add everyone to talk once? A: You can go to exchange or office newsgroup to ask Q: Excuse me, if there is an sms2003 problem, where should I post it? Is there an expert to solve it? A: There are many places, such as winmag/Microsoft community Q: site maintenance. The default rule is updated every 90 days. A: Yes. The default rule is 90 days. Q: I heard that a company in Shanghai has developed software similar to SMS. It is said that the original MS engineer is used, and the installation file is only dozens of megabytes A: Yes, basically, I did two times of development on SUS. A: "Yes, basically I did two times of development on SUS." --- sorry, I got it wrong. A: everyone learns sms2k3, we recommend that you refer to operation guide and cpdg. Thank you! Conclusion host guest_grace says: Thank you for your participation. This chat is coming to an end. Host guest_grace says: If you have any questions, please go to the Microsoft Chinese news group. Host guest_grace says: Microsoft Chinese news group http://www.microsoft.com/china/community/Newsgroup/NGList.aspx