The following describes the required permissions the Shopping Service Account needs when installing Shopping Central in a distributed server/component environment:

 

Servers

========

SHOPPING (W2K3)- Shopping Central Server

NMCM01 (W2K8) - ConfigMgr Central Site Server

NMSQL01 (W2K8) - SQL Server (2K8) hosting ConfigMgr site database AND ConfigMgr SMS Provider

 

1. On server hosting ConfigMgr SMS Provider: add Shopping Service account to local Distributed COM Users group. - NOT documented in Shopping Installation Guide
   • Note: In my environment, this was the SQL server (NMSQL01)

 

2. On the ConfigMgr site server: grant full WMI permissions for both the Root/SMS (Note: Root\SMS\Site_<sitecode> is not listed because in my lab, the SMS Provider is hosted on the remote SQL server.  See bullet below for instructions for when SMS Provider is hosted remotely on a different server).

 

3. On server hosting ConfigMgr "SMS Provider": grant full WMI permissions for both the Root/SMS and the Root/SMS/SMS_<SiteCode> namespaces. - IS documented in Shopping Installation Guide.  However, "Root\SMS\Site_<sitecode>" namespace ONLY exists on servers hosting the SMS Provider.  If the SMS Provider is installed on the site server, then the namespace will exist on the site server.  As you see on the left is the SQL server hosting the SMS Provider, which has the namespace.  At the bottom is a site server that is also hosting the SMS Provider.  However, on the right is the site server (which is NOT hosting the SMS Provider) does NOT have the namespace.

Read the complete post at http://www.1e.com/1EBlogs/post/2009/06/04/Installing-Shopping-Central-when-SMS-Provider-is-NOT-hosted-on-ConfigMgr-site-server.aspx