Heya All, We have an existing SCCM deployment consisting of a Primary and one Secondary site. We have to deploy anotherSecondary site in India and 'the boss' wants the IT staff in the India group to deploy it. The India IT group has admin priveledges in thier OU, but not at the domain level nor at the local level on the SCCM server itself. So my question is: What are the minimum rights I can give to the India group to allow them to install thier new SCCM site as a Secondary/Child site to our Primary/Parent site? I cannot find info on this type of scenario in the documentation... Thanks in Advance, BPCXL

This is how I would do it (I think). fyi, just a word of warning; I haven't done this personally in a long while. Hopefully someone else will chime in and tell us if this is complete bogus. :) Get the computer name of the proposed Secondary site. You pre-add the Standard Sender at the primary site console. You pre-add that computer account to the appropriate local groups on the primary, so that the Secondary site computer can communicate up (add the computer account to local group SMS_SiteSystemToSiteServerConnection_xyz, where xyz is your site code). Although they wouldn't need to be in the console at all, if you wanted to, you could give the india group only site "Read"; and possibly Status Messages Read. They install the Secondary site from media, locally. Because you have precreated the sender, and added the computer to the local group already... everything will be golden. They don't need any kind of special rights on your primary.Standardize. Simplify. Automate.

They need to have local admin permissions on the secondary site server. Besides that, they don't need any other rights. You just need to make sure that the site servers are able to connect using the group membership mentioned by Sherry. Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund