Export (0) Print
Expand All

How to Set Security on the System Management Container in Active Directory Domain Services

Updated: September 1, 2009

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

After you have created the System Management container in Active Directory Domain Services, you must grant the site server's computer account the permissions that are required to publish site information to the container.

ImportantImportant
The primary site server computer account must be granted Full Control permissions to the System Management container and all its child objects. If you have secondary sites, the secondary site server computer account must also be granted Full Control permissions to the System Management container and all its child objects.

You can grant the necessary permissions by using the Active Directory Users and Computers administrative tool or the Active Directory Service Interfaces Editor (ADSI Edit). For more information about how to install and use ADSI Edit, see ADSI Edit (adsiedit.msc) (http://go.microsoft.com/fwlink/?LinkId=183662).

To apply permissions to the System Management container by using the Active Directory Users and Computers administrative tool

  1. Click Start, click Run, and then enter dsa.msc to open the Active Directory Users and Computers administrative tool.

  2. Click View, and then click Advanced Features.

  3. Expand the System container.

  4. Right-click System Management, and then click Properties.

  5. In the System Management Properties dialog box, click the Security tab.

  6. Click Add to add the site server computer account and grant the account Full Control permissions.

  7. Click Advanced, select the site server’s computer account, and then click Edit.

  8. In the Apply onto list, select This object and all child objects.

  9. Click OK.

To apply permissions to the System Management container by using the ADSI Edit console

  1. Click Start, click Run, and enter adsiedit.msc to open the ADSIEdit console.

  2. If necessary, connect to the site server's domain.

  3. In the console pane, expand the site server's domain, expand DC=<server distinguished name>, and then expand CN=System. Right-click CN=System Management, and then click Properties.

  4. In the CN=System Management Properties dialog box, click the Security tab.

  5. Click Add to add the site server computer account and grant the account Full Control permissions.

  6. Click Advanced, select the site server’s computer account, and then click Edit.

  7. In the Apply onto list, select This object and all child objects.

  8. Click OK.

See Also

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft