DB Rights Question
I know that my user ID only has READ access to the SCCM DB. I can log onto the DB server and run SQL statements but nothing more. When I log into the SCCM console I use the same user ID and from the SCCM console I can delete computers from the DB. Why? When in the console does the delete function use a different account than the one I'm logged on with? mqh7
October 29th, 2012 5:16pm

Permissions to do things in ConfigMgr aren't controlled by DB rights, they are controlled by WMI permissions. All data in the DB is taken care of by ConfigMgr and uses the site server's permissions to perform actions. Thus, to lock things down in ConfigMgr, you need to set the permissions appropriately using the ConfigMgr console.Jason | http://blog.configmgrftw.com
Free Windows Admin Tool Kit Click here and download it now
October 29th, 2012 6:39pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics