Previous Topic: Windows 2003 SP1 MSI Library Access - Restrict Anonymous Access to Named Pipes and SharesNext Topic: Considerations for Windows Server 2008 Core Operating Environments


SD Agents Connecting SD Scalability Servers

The following applies only when software delivery (SD) agents connect to SD scalability servers running on Windows Server 2003 and where the Local Security Policy "Network Access: Restrict anonymous access to Named Pipes and Shares" is set to Enabled on the manager or scalability server.

SD agents running on computers with Windows XP, or Windows Server 2003, not belonging to any domain, or belonging to a different non-trusted domain than the SD manager on which the Software Package Library share exists, will be refused access as well.

To resolve the access issues for SD agents on Windows XP, or Windows Server 2003, a dedicated user account can be created manually on the scalability server machine and added to the Everyone group. This will grant read-only access to the SDLIBRARY$ shares. The user name and password have to be entered into the common configuration store of each of the domain manager and scalability server running on the new Windows manager platform.

In order to prevent failures, SD agents automatically fall back to internal NOS-less download, if access to the library is denied. This behavior can optionally be switched off by setting NOSLessSwitchAllowed to False in the configuration policy section itrm/usd/agent.