SCCM 2012 Distribution Points on Domain Controllers

I want to install Distribution points on all of my remote servers. They are all domain controllers though. I know one of the prerequisites to host the DP role is to have the SCCM computer object apart of that servers local administrators group. Since they are domain controllers they dont have a local security policy and it is controlled by AD. I'm sure you can add the SCCM computer object to the domain admins group to solve this but my question is if this is considered a supported configuration?

April 24th, 2013 6:59pm

Is it supported? To my knowledge, yes.

Is it a good idea? No.

How many clients are at each of these remote locations and what is the available bandwidth like?

Free Windows Admin Tool Kit Click here and download it now
April 24th, 2013 8:53pm

don't add the sccm site server computer account to the domain admin groups.  Add it to the builtin\administrators group in Active directory users and computers snap-in.
April 29th, 2013 9:50pm

If you are using the DC as a Distribution point to install clients via Client Push, the "NT Authority\Authenticated Users" group must be added to the local group "Users" to the DC/DP.

Clients are still able to get installed manually, but Client Push fails.

Failed to correctly receive a WEBDAV HTTP request.. (StatusCode at WinHttpQueryHeaders: 401)

Run elevated command prompt (net localgroup users "Authenticated Users" /add)

Test Client Push - Should be successful.

Reason: By default the local groups NT Authority\Interactive Users and NT Authority\Authenticated Users are removed from the Domain Controller. Clients that are using the DP for content cannot authenticate using the computer account.

Free Windows Admin Tool Kit Click here and download it now
October 18th, 2013 6:30pm

I think the command should be

Net localgroup "Administrators" "<domain>/<siteserver>$" /add

since the users are already a member of authenticated users....the $ denotes a computer account...

thanks for your sugestion it helped me find hopefully the correct answers on EE by GCISDEngineer

March 31st, 2015 11:14am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics