The SCCM Component 'SMS_MP_CONTROL_MANAGER' gives the following error message:
MP Control Manager detected DMP is not responding to HTTP requests. The http status code and text is 401, Unauthorized. Possible cause: DMP encountered an error when connecting to SQL Server. Solution: Verify that the SQL server is properly configured to allow Device Management Point access. If using a standard SQL security account, verify that the SQL Server is configured to allow standard SQL Security; or configure the Device Management Point to use an NT integrated security account, with appropriate access. If using integrated security, verify the account used by the DMP to connect to the SQL server is a member of the SMS_SiteSystemToSQLConnection_<sitecode> group on the SQL server, that the account is not locked out, and that the account password is not expired. (In standard security, the default account is SMS_SQL_RX_<sitecode>.) Possible cause: The SQL server Service Principal Names (SPNs) are not registered correctly in Active Directory Solution: Ensure SQL server SPNs are correctly registered. Review Q829868. Possible cause: Internet Information Services (IIS) isn't configured to listen on the ports over which SMS is configured to communicate. Solution: Verify that the designated Web Site is configured to use the same ports which SMS is configured to use. Possible cause: The designated Web Site is disabled in IIS. Solution: Verify that the designated Web Site is enabled, and functioning properly. Possible cause: The SMS ISAPI Application Identity does not have the requisite logon privileges. Solution: Verify that the account that the SMS ISAPI is configured to run under has not been denied batch logon rights through group policy. For more information, refer to Microsoft Knowledge Base article 838891.
1. It all worked in the past
2. The SCCM / SQL Server 2005 is on the same virtual machine Windows 2003 SP2 (lets call it SCCMSERVER)
3. This server SCCMSERVER has been promoted to a DC with dcpromo.
4. Within SQL Server some access is given to the local group 'SCCMSERVER\SMS Admins'. As this server has been promoted to be a DC this local group does not exists anymore.
I think the direction for solving this issue is on SQL Server. How do I set up the permissions correctly?
Any help is appreciated.
With kind regards,