Re: Creating SMS Containers in Active Directory HELP

Do you have schema admin privileges? If so, it should have been created.
However, you can manually create it and set permissions for the SMS computer
account or group by using ADSIEdit.


"Richard Overton" <richard.overton@xxxxxxxxxxxxx> wrote in message
news:%23TBCcOaQFHA.1932@xxxxxxxxxxxxxxxxxxxxxxx
> Dear All
>
> Can you help with this? I am trying to configure SMS but when trying to do
> the following I get to 4 and the is no System Management container in the
> System tree??
>
> Creating SMS Containers in Active Directory
> To create containers in Active Directory, after extending the schema, the
> SMS Service Account must be a member of the Administrator group to be able
> to create the System Management container and its child objects. Another
> option is to manually create the System Management container in Active
> Directory by using the ADSIEdit.msc tool.
>
> Note:
>
> .
> To access the ADSIEdit.msc tool, you must install the Windows 2000
> Administrator Tools. To install these tools, run AdminPak.msi in the
> \system\system32 folder. For more information, see the Windows 2000 Help.
>
>
> If you are using advanced security mode, grant the SMS Service Account or
> the computer account rights to the System Management container. It is
> required that Read, Write, Create All Child Objects, and Delete All Child
> Objects rights are granted to this object and child objects.
>
> For more information about SMS 2003 security accounts, see Chapter 5,
> "Understanding SMS Security," and Chapter 12, "Planning Your SMS Security
> Strategy." For more information about Active Directory, see the Active
> Directory Help.
>
> To set security on the System Management object
>
> 1.
> Start the Active Directory Users and Computers administrative tool.
>
> 2.
> On the View menu, click Advanced Features.
>
> 3.
> In the tree view, select the System container for the domain.
>
> 4.
> Expand the System container, right-click the System Management
> container, and then select Properties.
>
> 5.
> On the Security tab, click Add.
>
> 6.
> If the site is using advanced security, click Object Types in the
> Select Users, Computers, or Groups dialog box.
>
> 7.
> Select the Computers check box, and then click OK.
>
> 8.
> Enter the SMS Service account for standard security or the computer
> name for the site server for advanced security, and then click OK.
>
> 9.
> In the System Management Properties dialog box, select the Read,
> Write, Create All Child Objects check box, and then select Delete All
> Child Objects permissions.
>
> 10.
> Click Advanced, select the SMS Service account or computer account,
> and then click Edit.
>
> 11.
> In the Apply onto list, select This object and all child objects.
>
> 12.
> Click OK to close the dialog boxes.
>
>
>
>
> I'm also getting the following error message in the SMS status view
> because of the above problem
>
>
>
> "MS Systems Management Server could not locate the "System Management"
> container in Active Directory. Nor could it create a default container.
> This will prevent Site Component Manager from updating or adding any
> objects to Active Directory.
>
> Possible cause: This site's SMS Service account or the site server's
> machine account might not have the correct rights to update active
> directory.
>
> Solution: Either give the Service Account rights to update the domain's
> System Container, or manually create the "System Management" container in
> this domain's Active Directory system container, and give the Service
> Account full rights to that container (and all children objects.)"
>
> Regards,
> Rich Overton
>
> Network Administrator
> Omnibus Systems Ltd
> Loughborough
> Leicestershire
> LE12 5PY
> UK
> E: richard.overton@xxxxxxxxxxxxx
>
>
>


.

Relevant Pages

  • Re: System Management folder
    ... Do you mean the Systems container in AD? ... The deal is, SMS requires full ... starts trying to publish to AD. *IF* SMS has full control to the Systems ... SMS will create the System Management container and give it all ...
    (microsoft.public.sms.admin)
  • Creating SMS Containers in Active Directory HELP
    ... Creating SMS Containers in Active Directory ... SMS Service Account must be a member of the Administrator group to be able ... to create the System Management container and its child objects. ...
    (microsoft.public.sms.setup)
  • Re: SMS-Site-001 could not be created, error code = 5 in hman.log
    ... container and delegated control to the computer account of my SMS ... Verified in the extadsch.log that the schema extension was ... I ran SMS Trace to view the hman.log and saw that it has not yet ...
    (microsoft.public.sms.admin)
  • Re: Systems container in AD and SMS
    ... computer$ account had been granted permissions to the system management ... to the SMS Service Account and if you aren in advanced security you grant ... Make sure you grant the permissions for that container AND all child ...
    (microsoft.public.sms.admin)
  • Re: SMS Site Component Manager
    ... Giving full control to the System container allows the site server's ... computer account for the primary site server has Full Control to the System ... Management container and all of it its child objects (note that there is no ... I am new to SMS and have setup a windows 2003 server, ...
    (microsoft.public.sms.setup)