About the SMS Service Account in Windows NT Domains

When specifying SMS Service accounts in Windows NT environments, keep in mind that an SMS Service account must exist in each local domain, or a single account must exist in a trusted domain.

SMS Service Account in a Local Domain

A local domain account is an account in the Windows NT domain where the SMS services are installed. When a site contains multiple Windows NT domains, site services access SMS logon points in other Windows NT domains by using the SMS Service accounts in those other domains.

For example, if you specify "SMSAccount" as the SMS Service account for a site, a Windows NT domain that is added to the site uses SMSAccount within its own domain.

Within a site, if you do not set up trust relationships between Windows NT domains, you must:

SMS Service Account in a Trusted Domain

A trusted domain account is an account in a trusted Windows NT domain. When a site contains multiple Windows NT domains, site services access SMS logon points in those domains by using the SMS Service account from the trusted domain.

Any Windows NT domain that is added must trust the Windows NT domain where the account is specified. Even if the equivalent SMS service account in the local domain exists, that local account is not used.

For example, if you specify "MASTERDOM/SMSAccount" as the SMS service account for a site, a Windows NT domain that is added to the site uses "SMSAccount" from the trusted "MASTERDOM" Windows NT domain.

Related Topics

Topic Link

Create a Local Domain SMS Service Account in a Windows NT Domain

Topic Link

Create a Trusted Domain SMS Service Account in a Windows NT Domain

Topic Link

Specify a New SMS Service Account

Topic Link

About the SMS Service Account

Topic Link

SMS Accounts Configuration Overview