Quote:

The reason for all this is SMSM 2003 will not install to selected machines, when I have changed the reg permissions to Full Control it works no problem.

Even when I try to connect remotely to a mchines regisrty as a Dom Admin it will not let me set permission on HKLM and gives me errors while trying to open the reg keys.



If you are performing a Client Push installation you should configure the account used for the client push to be a domain user account that has local admin rights on the workstation. Also, File and Print sharing needs to be enabled on the client computer for a Client Push installation.

If you are performing a "logon script-initiated" installation, if the user has administrative rights the install will install the client from the CAP or Management Point directly. If the user does not have administrative rights, a CCR will be created and SMS will attempt to install the client.

Some gotchas may be an improperly configured SLP or CAP/MP, if the PC is not joined to the domain (i.e. workgroup or stand-alone), or other issues. In general, I'd have to agree with the others; fix the issue, but don't open a huge security hole. That is like using a sledgehammer on a finish nail.