SMS: Unable to Create Collection Based on Direct Rule Membership

ID: Q238633

The information in this article applies to:
  • Microsoft Systems Management Server versions 2.0, 2.0 SP1

SYMPTOMS

If you leave the Search in this collection box in the Create Direct Membership Wizard blank while you are creating a collection based on a direct membership rule, you may receive the following error message:

You do not have Class Read Resource security rights, therefore you must specify a collection.
If you select a specific collection to be limited to in the Collection Limiting dialog box, you may receive the following error message:
You do not have Read Resource security rights to the collection specified. You must specify a different collection."
When this problem occurs, you cannot finish the Create Direct Membership Rule Wizard. However, you can successfully create a collection based on a query.


CAUSE

This problem may occur if you are logged on as a user who belongs to a global group that has been granted the appropriate rights to the Collections class to create new collections. However, the Direct Membership Rule Wizard does not correctly determine the global group membership of the current user.


RESOLUTION

A supported fix that corrects this problem is now available from Microsoft, but it has not been fully regression tested and should be applied only to systems experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next Systems Management Server service pack that contains this fix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://www.microsoft.com/support/supportnet/overview/overview.asp
The English version of this fix should have the following file attributes or later: 

   Date      Time    Version          Size    File name    Platform
   ----------------------------------------------------------------
   11/19/99  9:27pm  2.00.1380.1080   526,336 Mmcbasui.dll i386
   11/19/99  9:27pm  2.00.1380.1080   130,384 Mmcbsuir.dll i386
   11/19/99  9:28pm  2.00.1380.1080   979,728 Mmcbasui.dll Alpha
   11/19/99  9:28pm  2.00.1380.1080   140,048 Mmcbsuir.dll Alpha
NOTE: Due to file dependencies, the most recent hotfix or feature that contains the above files may also contain additional files.



WORKAROUND

To work around this problem, assign Read and Read Resource collection class rights in addition to the Create right to individual users who need to create collections based on direct membership rules.


STATUS

Microsoft has confirmed this to be a problem in Systems Management Server version 2.0.


MORE INFORMATION

To install the hotfix, use the appropriate method.

Method 1: Using the Hotfix Installer

NOTE: This method is only for I386-based computers.
  1. Copy the hotfix folder structure to a share on your network. Q238633.exe is a Microsoft Windows Installer file that updates specific files on your site server.


  2. Log on to your site server using an account with administrative privileges.


  3. On the site server, close the Systems Management Server Administrator console.


  4. Run Q238633.exe and follow the directions in the wizard. You can run the file in Quiet mode using the /s switch.


Method 2: Manual Installation

  1. Close the Systems Management Server Administrator console.


  2. Run RegSvr32.exe to unregister the files that you are about to update. To do so, type the following at a command prompt:


    3. regsvr32 /u mmcbasui.dll
    regsvr32 /u mmcbsuir.dll

  3. Replace the Mmcbasui.dll file in the Sms_root_directory\Bin\Platform folder with the version obtained from the hotfix. Run RegSvr32.exe to register the updated file. To do so, type the following at a command prompt:


    4. regsvr32 mmcbasui.dll
  4. Replace the Mmcbsuir.dll file in the Sms_root_directory\Bin\Platform folder with the version obtained from the hotfix.
    Run RegSvr32.exe to register the updated file. To do so, type the following at a command prompt:


    5. regsvr32 mmcbsuir.dll

Additional query words: prodsms groups mmc admin

Keywords : kbMMC kbSecurity kbSMS200 kbSMS200bug kbCollections
Version : winnt:2.0,2.0 SP1
Platform : winnt
Issue type : kbbug


Last Reviewed: December 9, 1999
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.