+ Post New Thread
Results 1 to 3 of 3
O/S Deployment Thread, Administrator can access Config Manager. But not Domain Admins in Technical; Evening All, Starting out with SCCM 2012 SP1 today and I've already hit a stumbling block! Today I Set up ...
  1. #1
    Sam_Brown's Avatar
    Join Date
    Sep 2009
    Location
    Northampton
    Posts
    571
    Thank Post
    96
    Thanked 40 Times in 38 Posts
    Rep Power
    18

    Administrator can access Config Manager. But not Domain Admins

    Evening All,

    Starting out with SCCM 2012 SP1 today and I've already hit a stumbling block!

    Today I Set up SQL Server and installed SCCM 2012 SP1 on a separate server.

    All in all it looks to be working ok. When logged on as Administrator everything seems to be fine and Config Manager works fine. However when I try and access the Configuration Manager as a domain admin I get the, apparently common,

    "The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database. The account must belong to a security role in Configuration Manager. The account must also have the Windows Server Distributed Component Object Model (DCOM) Remote Activation permission for the computer running the Configuration Manager site server and the SMS Provider."

    Message.

    Can't figure out for the life of me where the issue is as it appears Domain Admins have access to all the same parts as the Administrator does. Long shot here as I've probably done something stupid but just putting this out there in the hope someone can say something that will cause an Eureka moment!

  2. #2
    Sam_Brown's Avatar
    Join Date
    Sep 2009
    Location
    Northampton
    Posts
    571
    Thank Post
    96
    Thanked 40 Times in 38 Posts
    Rep Power
    18
    Why is it the f***ing second you make a thread like this you find the answer yourself...

    Adding my username explicitly under the "Admin Users" for the Configuration Manager console seemed to do the trick. Unsure why having "Domain Admins" in there didn't work though.

    Is this usual behaviour?

  3. Thanks to Sam_Brown from:

    MrBrow (31st December 2013)

  4. #3

    Join Date
    Sep 2014
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I know this is an old thread but have still seen people have issues with this.

    This exact part with domain admins is a quirk.

    Like many many people do, the first group you might try to add is Domain Admins, however if you add that group you will notice that users in this group will still be unable to open the console. This is due to the behavior of user context logged in. If UAC is enabled on the machine, you won’t have access to the SCCM you login to the machine with a domain admin account, unless you right click on the console and run it is Administrator. If you want this to work as intended, you will need to create a new security group in Active Directory, add Domain Admins to it, and then specify that group in SCCM.

SHARE:
+ Post New Thread

Similar Threads

  1. Access schools internet but not the school network??
    By burgemaster in forum Internet Related/Filtering/Firewall
    Replies: 6
    Last Post: 6th February 2012, 11:09 AM
  2. Accessing C drive as a domain admin - no permissions.
    By garethedmondson in forum Windows 7
    Replies: 6
    Last Post: 29th June 2010, 01:48 PM
  3. Workstation can access local proxy but not WWW
    By speckytecky in forum Network and Classroom Management
    Replies: 3
    Last Post: 15th December 2008, 10:27 AM
  4. Can access from client machines but not servers or externally...
    By mrforgetful in forum Virtual Learning Platforms
    Replies: 1
    Last Post: 13th August 2008, 09:59 AM
  5. Can access most websites but not all
    By SimpleSi in forum General Chat
    Replies: 10
    Last Post: 19th February 2008, 11:19 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •