SCCM Installation SQL server sysadmin permission
Good afternoon,
I am installation SCCM 2007 and I run prerequistie but I get an error "SQL Server sysadmin rights"
I did following steps:
- Create the SCCM admin account in the domain as a domain admin
- Add the account to the local admin group account on any server that will run SCCM roles (SQL, SCCM)
- Add all SMS computer account to the "System Management" Object in Active Directory and give them full control on the container and subfolders.
- Extend the AD Schema for SCCM
SCCM and SQL server are not on the same box.
I don't know what I miss. Could you please give me some ideas?
Thank you
July 30th, 2010 7:57pm
For starters, domain admin privs are far to much for an SCCM admin account. Make a regular account with no additional privs and just give that account privs to whatever is needed (or you could just let it run as SYSTEM and give the privs to the computer
account).
As for your actual issue... SQL needs to be running in Windows Authentication mode (or in mixed mode). Then you need to setup an SPN in AD before installing SCCM. See the doc
How to Configure an SPN for SQL Server Site Database Servers .Scott Gill
SCCM Consultant
Free Windows Admin Tool Kit Click here and download it now
July 30th, 2010 8:09pm
Hi,
Also remember to add the site servers computer account to the local administrator group on the SQL server.Kent Agerlund | http://scug.dk/members/Agerlund/default.aspx | The Danish community for System Center products
July 30th, 2010 8:15pm
I will ask my coworker to setup SPN on Monday. I will let you know
Kent: I will setup SCCM coputer as a local admin group on SQL
Thanks
Free Windows Admin Tool Kit Click here and download it now
July 30th, 2010 9:03pm
I run the command below
setspn –A MSSQLSvc/<netsql>:1433 <vdfy\sccmadmin>
and I got this error msg "The syntax of the coand is incorrect.
netsql: sql server
vdfy: domain
sccmadmin: domain user account
Could you please check that I did something wrong?
August 2nd, 2010 7:57pm
I think the port# is this issue. However, i don't know how to check the port# on SQL server. Please give me a hint.
Thank you
Enter a valid command to create the SPN. The command should be in the form of:
setspn –A MSSQLSvc/<SQL Server computer name>:1433 <Domain\Account>.
Note
The command to register an SPN for a SQL Server named instance is the same as that used when registering an SPN for a default instance except that the port number should match the port used by the named instance.
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 8:08pm
Hi,
run the command line without <>
setspn –A MSSQLSvc/netsql:1433 vdfy\sccmadmin
August 2nd, 2010 8:17pm
Hi Bechir,
I use your command and get thir msg below. Also, the sccmadmin was created as domain user already
C:\Program Files\Support Tools>setspn -A MSSQLSvc/netsql:1433 vdfy\sccmadmin
Usage: setspn [switches data] computername
Where "computername" can be the name or domain\name
Switches:
-R = reset HOST ServicePrincipalName
Usage: setspn -R computername
-A = add arbitrary SPN
Usage: setspn -A SPN computername
-D = delete arbitrary SPN
Usage: setspn -D SPN computername
-L = list registered SPNs
Usage: setspn [-L] computername
Examples:
setspn -R daserver1
It will register SPN "HOST/daserver1" and "HOST/{DNS of daserv
setspn -A http/daserver daserver1
It will register SPN "http/daserver" for computer "daserver1"
setspn -D http/daserver daserver1
It will delete SPN "http/daserver" for computer "daserver1"
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 8:37pm
Hi,
something is wrong in the command line syntax, verify that there is no space after
setspn –A MSSQLSvc/
It should be like this : setspn –A MSSQLSvc/netsql:1433 vdfy\sccmadmin
August 2nd, 2010 8:50pm
I have checked and verified the command line. It is correct. I also copy your command and past in there but it shows the same msg.
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 8:58pm
Are you running this command on AD server ??
August 2nd, 2010 9:20pm
I run this command on SQL server
The SQL server is a member server.
I follow this note below:
The SetSPN utility must be run on a computer that resides in the SQL Server's domain and it must be run using Domain Administrator credentials.
thank you
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 10:06pm
Good morning,
I have had this issue for couple weeks but I cannot pass it. Please give me a hint.
Thank you
August 3rd, 2010 5:17pm
Which version of SQL are you running? 2005 or 2008? It is not guaranteed that the local admins are also SQL sysadmins when using SQL 2008 (depending which options you used during the setup).
Free Windows Admin Tool Kit Click here and download it now
August 3rd, 2010 5:48pm
I am running SQL server 2005 and I set sccmadmin as local admin and sysadmin in SQL server.
August 3rd, 2010 6:10pm


