[sccm 2012] Administrator can access Config Manager. But not Domain Admins

[Sam_Brown]

Evening All,

 

Starting out with SCCM 2012 SP1 today and I've already hit a stumbling block!

 

Today I Set up SQL Server and installed SCCM 2012 SP1 on a separate server.

 

All in all it looks to be working ok. When logged on as Administrator everything seems to be fine and Config Manager works fine. However when I try and access the Configuration Manager as a domain admin I get the, apparently common,

 

"The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database. The account must belong to a security role in Configuration Manager. The account must also have the Windows Server Distributed Component Object Model (DCOM) Remote Activation permission for the computer running the Configuration Manager site server and the SMS Provider."

 

Message.

 

Can't figure out for the life of me where the issue is as it appears Domain Admins have access to all the same parts as the Administrator does. Long shot here as I've probably done something stupid but just putting this out there in the hope someone can say something that will cause an Eureka moment!

[Sam_Brown]

Why is it the f***ing second you make a thread like this you find the answer yourself...

 

Adding my username explicitly under the "Admin Users" for the Configuration Manager console seemed to do the trick. Unsure why having "Domain Admins" in there didn't work though.

 

Is this usual behaviour?

[Goofoff]

I know this is an old thread but have still seen people have issues with this.

 

This exact part with domain admins is a quirk.

 

Like many many people do, the first group you might try to add is Domain Admins, however if you add that group you will notice that users in this group will still be unable to open the console. This is due to the behavior of user context logged in. If UAC is enabled on the machine, you won’t have access to the SCCM you login to the machine with a domain admin account, unless you right click on the console and run it is Administrator. If you want this to work as intended, you will need to create a new security group in Active Directory, add Domain Admins to it, and then specify that group in SCCM.

[tomazzotta]

configuration manager cannot connect to the site

 

having this issue but can seem to get it to work... what ever user i log as??

[TheScarfedOne]

configuration manager cannot connect to the site

 

having this issue but can seem to get it to work... what ever user i log as??

 

Sounds like one of your site services may not be running