[Topics referencing Configuration Manager 2007 R2 are pre-release documentation and are subject to change in future releases.]
After you have created the System Management container in Active Directory® Domain Services, you must grant the primary site server's computer account the permissions necessary to publish site information to the container.
.gif) Important |
|---|
|
The primary site server computer account must be granted full control permissions to the System Management container and all of its child objects. |
You can grant the necessary permissions by using the Active Directory Users and Computers administrative tool or the ADSIEdit MMC console.
.gif) Note |
|---|
|
To open an ADSIEdit MMC console, you must first install the Microsoft Windows Server support tools. These tools are included in the support tools folder on both Windows 2000 Server and Windows Server 2003 CDs. To install the Windows Server support tools, navigate to \SUPPORT\TOOLS\ on the server's installation CD and run suptools.msi. |
To apply permissions to the System Management container using the Active Directory Users and Computers administrative tool
-
Click Start, click Run, and then enter dsa.msc to open the Active Directory Users and Computers administrative tool.
-
Click View, and then click Advanced Features.
-
Expand the System container.
-
Right-click System Management. On the context menu, click Properties.
-
In the System Management Properties dialog box, click the Security tab.
-
Click Add to add the site server computer account and grant the account Full Control permissions.
-
Click Advanced, select the site server’s computer account, and click Edit.
-
In the Apply onto list, select This object and all child objects.
-
Click OK.
To apply permissions to the System Management container using the ADSIEdit MMC console
-
Click Start, click Run, and enter adsiedit.msc to launch the ADSIEdit MMC console.
-
If necessary, connect to the site server's domain.
-
In the console pane, expand the site server's domain, expand DC=<server distinguished name>, expand CN=System, and right-click CN=System Management. On the context menu, click Properties.
-
In the CN=System Management Properties dialog box, click the Security tab.
-
Click Add to add the site server computer account and grant the account Full Control permissions.
-
Click Advanced, select the site server’s computer account, and click Edit.
-
In the Apply onto list, select This object and all child objects.
-
Click OK.
See Also