Shulou(Shulou.com)06/03 Report--

ConfigMgr Prerequisites Tool user Guide Series-4: how to create System Management containers and set permissions on AD

©Lander Zhang focuses on on-demand IT infrastructure operation and maintenance services for foreign enterprises, and IT Helpdesk hands-on training practitioners

Blog: https://blog.51cto.com/lander

IT Helpdesk practical training video course: https://edu.51cto.com/lecturer/733218.html

2019-05-16

Operation instruction

We will use ConfigMgr Prerequisites Tool to create a System Management container on the primary domain control (PDC) and set up the SCCM01 server to have full control over this container. The reason for this is that the SCCM01 server needs to publish the information of the SCCM server to the System Management container in AD.

Operation steps

1. Locate PDC and create Container

Run ConfigMgr Prerequisites Tool-> Directory-> Container-> Detect-> create:

two。 Set full access for the created System Management

2.1 create a security group named SCCM_System Management under User on DC01:

2.2 add the SCCM01 server account to the security group of SCCM_System Management

Right-click Security Group Properties-> Members-> Add-> in Object Types... Uncheck Computers-> Click OK:

Enter SCCM01 and click Check Names to complete the account verification-> click OK to complete the add:

2.3 the security group granted to SCCM_System Management has full control over the System Management container

Directory-> Permissions-> enter SCCM in the search box and click search to search the security group of SCCM_System Management-> check in the search results below-> Click Configure to complete the authorization:

Verify that the container was created successfully

On DC01, under Active Directory User and Computers, click View-> check Advance Features:

Expand-> System-> under Pushits.com to see System Management, indicating that the container has been created successfully:

4 verify that the container is granted control rights

Right-click System Management attribute-> Security-> We can see that the SCCM_System Management security group already has the permission to Full control:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.