Converting an AD Group Used for SCCM Admins from Global to Universal to Add Users from Other Trusted Domains

My organization is in the middle of migrating over to SCCM 2012, but we still have our SCCM 2007 environment operational until we can complete this project and transition everything over to SCCM 2012. The Primary SCCM 2007 Administrator in one region has resigned and I have been tasked with taking over some of his responsibilities. In order to do this, I will need to be added to the local "SMS Admins" group on the Site Server. There already exists an AD group that the former Primary SCCM 2007 Administrator created named "SMSAdministrators" that I am under the impression I should be added to since that is already a member of the local "SMS Admins" group on the Primary Site Server for that region. However, it is a Global group and I am located in another region. Therefore, my AD user account in my region will not be able to be added to the "SMSAdministrators" AD group in the other region for me to be able to take on these additional SCCM 2007 duties. 

So my question is, if the "SMSAdministrators" Global AD group that he created is converted to a Universal Security group so I can be added to it, will that break anything regarding any SCCM 2007 console permissions within the SCCM 2007 Security Rights, or anything else for that matter?

Thanks everyone


January 21st, 2014 7:30pm

Instead of converting and adding to the Groups, you can add your account to ConfigMgr Console with Full Control for All Classes and Instances. This will automatically add you as a Full admin and you will get full control.

After Migration to 2012, you can have Role Based Administration Configured with proper permissions required.

Free Windows Admin Tool Kit Click here and download it now
January 22nd, 2014 3:08am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics