My SCCM 2007 Secondary Site Servers have multiple "SMS_SiteSystemToSiteServerConnect ion_<SiteCode>" and "SMS_SiteToSiteConnection_<SiteCod e>" local groups

My organization is going through a SCCM 2012 migration and I was asked about our current SCCM 2007 Secondary Sites and when I remoted into my secondary site servers I saw that two of the three servers have multiple "SMS_SiteSystemToSiteServerConnection_<SiteCode>" and "SMS_SiteToSiteConnection_<SiteCode>" local groups. 

This just seemed quite odd and I wanted to know if anyone has dealt with this before.

Thank you

February 10th, 2014 5:29pm

SMS_SiteSystemToSiteServerConnection_<SiteCode>--this group grants the necessary permissions for CM07 services running on remote site systems (such as management points) to connect to the site server to access the CM07 registry keys and directories on the site server.

SMS_SiteToSiteConnection_<SiteCode>--This group has the necessary permissions for a sender to connect from CM07 site to another.

same groups ? it will not allow to have same groups.can you check if there are any members part of these groups ?

Free Windows Admin Tool Kit Click here and download it now
February 11th, 2014 3:02am

Thanks for your reply Eswar.

One of the SMS_SiteToSiteConnection_<SiteCode> groups on two of my Secondary Site servers I believe are configured correctly and they both have my Primary Site Server as a member, but the SMS_SiteSystemToSiteServerConnection_<SiteCode> group is empty. Is the SMS_SiteSystemToSiteServerConnection_<SiteCode> group supposed to contain my Primary Site server as well? Both the SMS_SiteSystemToSiteServerConnection_<SiteCode> and the SMS_SiteToSiteConnection_<SiteCode> groups on my Primary Site Server have my Secondary Site Servers as members. 

Is this correct?

I'm wondering now if the strange groups with the odd site codes that don't even exist were created when the secondary sites were initially being created a while back. From the documentation, it looks like the former admin initially configured the secondary sites using a PowerShell script created by Kaido Jarvemets. According to some of the notes I have read, the admin kept uninstalling and re-installing the sites when they were not showing up in the SCCM 2007 Admin console, but apparently they simply forgot to configure a Sender and an Address, if that makes any sense to you.

So, perhaps these groups ending with an odd Secondary Site code may have been a typo during one of the installation attempts? If this is the case, can these groups be deleted?

One thing I forgot to mention was that the Secondary Site servers belong to a Global Security AD group and that group is used to add them to both the SMS_SiteSystemToSiteServerConnection_<SiteCode and the SMS_SiteToSiteConnection_<SiteCode> groups on the Primary Site server.

Is this allowed?

Thanks



February 12th, 2014 11:59am

Thanks for your reply Eswar.

One of the SMS_SiteToSiteConnection_<SiteCode> groups on two of my Secondary Site servers I believe are configured correctly and they both have my Primary Site Server as a member, but the SMS_SiteSystemToSiteServerConnection_<SiteCode> group is empty. Is the SMS_SiteSystemToSiteServerConnection_<SiteCode> group supposed to contain my Primary Site server as well? Both the SMS_SiteSystemToSiteServerConnection_<SiteCode> and the SMS_SiteToSiteConnection_<SiteCode> groups on my Primary Site Server have my Secondary Site Servers as members. 

Is this correct?

I'm wondering now if the strange groups with the odd site codes that don't even exist were created when the secondary sites were initially being created a while back. From the documentation, it looks like the former admin initially configured the secondary sites using a PowerShell script created by Kaido Jarvemets. According to some of the notes I have read, the admin kept uninstalling and re-installing the sites when they were not showing up in the SCCM 2007 Admin console, but apparently they simply forgot to configure a Sender and an Address, if that makes any sense to you.

So, perhaps these groups ending with an odd Secondary Site code may have been a typo during one of the installation attempts? If this is the case, can these groups be deleted?

One thing I forgot to mention was that the Secondary Site servers belong to a Global Security AD group and that group is used to add them to both the SMS_SiteSystemToSiteServerConnection_<SiteCode and the SMS_SiteToSiteConnection_<SiteCode> groups on the Primary Site server.

Is this allowed?

Thanks



Free Windows Admin Tool Kit Click here and download it now
February 12th, 2014 11:59am

Okay, it looks like I was right about the typos the former SCCM admin had done during a couple of tries at creating the secondary sites. An email that was sent to me by a server engineer that explained that he edited the sitectrl file and renamed the secondary site to what it is currently, but he never removed those extra, needless groups. So I deleted them and everything appears to be working okay.

Thanks



February 28th, 2014 4:16pm

Okay, it looks like I was right about the typos the former SCCM admin had done during a couple of tries at creating the secondary sites. An email that was sent to me by a server engineer that explained that he edited the sitectrl file and renamed the secondary site to what it is currently, but he never removed those extra, needless groups. So I deleted them and everything appears to be working okay.

Thanks



Free Windows Admin Tool Kit Click here and download it now
March 1st, 2014 12:15am

Okay, it looks like I was right about the typos the former SCCM admin had done during a couple of tries at creating the secondary sites. An email that was sent to me by a server engineer that explained that he edited the sitectrl file and renamed the secondary site to what it is currently, but he never removed those extra, needless groups. So I deleted them and everything appears to be working okay.

Thanks



March 1st, 2014 12:15am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics