System Center Configuration Manager TechCenter >
System Center Configuration Manager Forums
>
Configuration Manager Admin Console
>
KB968389 Causes Remote Tools Access Denied to XP Client with Vista SCCM Admin Console
KB968389 Causes Remote Tools Access Denied to XP Client with Vista SCCM Admin Console
- After installing KB968389 on an otherwise fully patched (and service packed) XP machine we are prompted for credentials when using SCCM 2007 R2 Remote Tools from a Vista machine running the SCCM Admin Console. Once we enter the currently logged on (or any domain admin) user's credentials in the dialog box the Remote Tools connection succeeds.
In our environment it appears that the credentials dialog box only opens when we attempt to use remote tools from a Vista machine running the admin console. We were able to use remote tools from fully patched XP machine running the admin console to a fully patched XP client.
When we remove KB968389 from the XP client we are able to connect using remote tools without getting prompted for credentials. Hopefully someone from Microsoft notices this thread and we get a revision for that patch or a patch to SCCM.
Answers
- I said in the previous post that I'd update when the update was available, so no need to keep asking :-)
The update has been released as KB974571.
Wally Mead- Marked As Answer byWallyMSFT, OwnerThursday, October 15, 2009 2:04 AM
All Replies
- It is also strange that the KB Article does not list Vista under the applies to section, however Automatic Updates has installed it on our Vista machines...
http://support.microsoft.com/kb/968389
- Not sure we can do much about this. We unfortunately don't own security updates, unless they are ConfigMgr related, which this is not. You'd have to report this to the team that created it.
I just looked at the article, and it is to add new security validation, so not surprising that it might change remote tool access. I'll forward onto our remote control team to see if they are aware of this, but again, doubt we can do much about it. I'll update if I get any response to share.
Wally Mead - Thanks, we appreciate that. If your team can't do anything with it could you provide me with a link or some info on how to report a bug to the correct team?
- We are investigating this. As of yet, nothing to report other than we can reproduce it also. I'll update when we have something concrete to share with you all. Until then, you either live with the extra credentials dialog or not install the update.
Wally Mead- Marked As Answer byJie-Feng Ren - MSFTMSFT, ModeratorWednesday, September 02, 2009 11:24 AM
- Unmarked As Answer byMTU SAS Tuesday, September 08, 2009 12:28 PM
- I'm seeing this behavior on my Windows 7 x64 system. Is this to be expected with Windows 7?
Orange County District Attorney - Anything new to report on this problem? Can we expct a patch for SCCM? This is a serious administration problem for those shops that are using Vista SCCM Admin client for XP.
- FYI
I can run the Remote Tools, from a SCCM console installed on Windows XP, and connect to a Windows XP system that has the patch (968389) installed. I don't get prompted for credentials. I do still get prompted for credentials when running Remote Tools from my Windows 7 system.
Orange County District Attorney - Nothing to report yet. Still no resolution. We're still investigating the issue, and no ETA provided when I asked earlier this morning. Sorry about that. We'll let you know when a resolution is available.
Wally Mead - Thanks for the update.
Orange County District Attorney - We are also experiencing the same issue. I have certain users that I have saved credentials to access the SCCM server that I do not wish to give the Admin password to. This creates a problem for them using SCCM remotely without having to give them this access. I have removed KB968389 from a test XP machine, reboot, and SCCM works fine. We use WSUS to deploy updates and it does not support removal of this update. I was hoping I could at least remove it from my domain through WSUS. No luck. Keep us posted on updates.
- I have created software package in SCCM and removed this patch in entire domain. Programm comand line "C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe /quiet /norestart" but restart is required afterall.
I have created software package in SCCM and removed this patch in entire domain. Programm comand line "C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe /quiet /norestart" but restart is required afterall.
That sounds pretty simple, but I am a SCCM newbie. Would you be willing to talk me through how you did that? We don't use SCCM to deploy packages (although I'd like to be able to learn) just WSUS to deploy Win updates.- I checked with CSS today, and they still do not have a resolution for this. Sorry, we're working with the security team to figure out why it is causing issues for us.
Wally Mead - Thanks for the update, Wally!
- It is huge to us. We could finally ditch our XP boxes if we could get this working.
- I am having the same issue. It works fine from my W7ENT to other W7 and Vista but not to XP.
- OK guys, there is no sense in adding "me too" posts to this thread. It is not helping anything. As soon as I hear there is a fix, I'll update thread, and you can all update your sites with whatever the resolution is :-)
So, no more "me too" posts please :-)
Wally Mead - Wally, Been a couple of weeks - Any update on a potential resolution?
- I asked again yesterday, and no update from them. I'm waiting for a response still.
Wally Mead - I got an update that it *is* going to be fixed in an upcoming Windows update. I don't have details yet as to whether or not it will be included in this month's patch Tuesday updates, nor do I know the KB article yet.
But relief is coming :-)
Wally Mead - When might that relief be coming? What is the name of the update that we should look for?
- I said in the previous post that I'd update when the update was available, so no need to keep asking :-)
The update has been released as KB974571.
Wally Mead- Marked As Answer byWallyMSFT, OwnerThursday, October 15, 2009 2:04 AM
- Wally - Sure was optomistic that KB974571 was going to fix this problem, but no such luck. I still get prompted
for credentials from my Vista pc, but will not open remote tools session. Interestingly, with a VM running XP from
the same PC - remote tools work just fine. - Try KB975467
This mentions a fix for kb968389 and it helped when I installed this on the XP I tried to remote controle.
I first tried KB974571 on XP and Vista without success. - Then open a case with CSS. What I was told by the CSS escalation engineer for ConfigMgr is that this s the fix the Windows team made to resolve the issue with the previous fix. If it is not working, you'd need to have CSS troubleshoot it.
I can only be 'confident' in what I know, or have heard from others who have the knowledge (in this case, CSS).
Wally Mead
