KB937050 - Microsoft Operations Manager 2005 Administrative console does not display the correct scope for some user accounts

KB937050 will be available via the following link shortly https://support.microsoft.com/?kbid=937050

 

 

Symptoms

Users are assigned a specific console scope in Microsoft Operations Manager (MOM) 2005. These users open the MOM 2005 Administrator console. However, the default MOM console scope appears instead of the assigned console scope in the MOM 2005 Administrator console.

Cause

This issue occurs when one or more of the following conditions are true:

  • The computer account name is the same as the domain user account name. In this case, when the API queries the UserDomainName property in the SystemInformation class, the computer account name is returned instead of the user account name that is assigned to the MOM console scope.
  • The domain user account name matches a local user account that exists on the computer that has the MOM 2005 Administrator console installed.
  • The computer resides in a resource domain, and the user has logged on to an accounts domain. For example, the computer that has the MOM 2005 Administrator console installed is a member of the Contoso domain and the user account is a part of the Coho domain. The user logs into the computer as Coho\<username>. However, when MOM uses the SystemInformation.UserDomainName method to obtain the user account name, the computer account domain is appended to the user account name. Therefore, the Contoso\<username> account is returned. Because the Contoso\<username> does not have the correct permissions to access the MOM console scope, the default MOM Users group console scope is used.

Resolution

To resolve this issue, use one of the following methods, depending on your configuration.

Method 1

If the computer name is the same as the domain user account name, change the computer name or the user name so that they do not match.

Method 2

If the domain account name is the same as the local account name on the computer that has the MOM Administrator console installed, rename the local account, or delete the local account.

Method 3

If the user and the computer reside in separate domains, create a MOM 2005 console scope, and then add the computer account domain and the user account name. For example, create a console scope. Then, add Contoso\<username> in the Add Users dialog box by using the Create Console Scope Wizard. (This example is based on the example in the third bullet point of the "Cause" section.)

Method 4

Move the user account to the domain where the computer account resides. Or move the computer account to the domain where the user account resides.