Strange issue. Just finished propping up a new SCCM server. I used an DC account to do the installation and extend the schema, etc. Things went well under the DomAdmin account. In my post configuration steps I added our SCCM admins distribution group under the local administrators group. I then added the SCCM_Admin group in the users and copied the rights from the domain admin account that managed the install to the SCCM_Admin group. I log out of the Domain Admin account and log in to do the site settings to finish the post configuration. Unfortunately the Site manager settings aren't available. I double check the security settings and it's literally identical to the Domain Admin account that performed the installation. Is this a bug? I was going to yank out the group, reboot and add the ad group, SCCM_Admin, back in. Or am I just walking into the same issue? Thanks in advance

hi, Did you add it to SMS admins local group? Julien

Yup, SCCM_Admins is in both the SMS Admins and the Local administrator group. It's so weird. Yanked it out and put it back in as well and I'm still up a creek. I'm going to go digging around the database to find the security principles and check things out because I'm curious to see what makes it tick. Then yank it all out and reinstall from scratch.

log back in as the domain admin, and launch the configmgr console. go +security, users; and right-click/clone the domain admin named account to YourDomain\SCCM_Admins (it is best to browse, so you don't mistype the group name) and exit/logoff back on again as that normal sms admin user in that group, and check again.Standardize. Simplify. Automate.

Figured it out. It's appearently a known bug and requires the security instances to be manually added into the security site configuration. Copying from the security rights from the user that installed SCCM doesn't quite do it. http://technet.microsoft.com/en-us/library/bb932213.aspx Reference to the bug.

Which part of the article are you referring to? Do you mean that you did not set up ConfigMgr's security rights (http://technet.microsoft.com/en-us/library/bb680648.aspx) at all?