SCCM Secondary site issue --
Error: Systems Management Server cannot update the already existing object "SMS-Site-xxx" in Active Directory. As a result SCCM client are not getting the policy , unable to find its MP please reply.
April 12th, 2011 2:20am

Hello - Check whether the site server computer account Full Control rights to the System container, and all child objects. Otherwise, you can manually create the System Management container and give Full Control rights to it and all child objects. http://technet.microsoft.com/en-us/library/bb633169.aspx How to Set Security on the System Management Container in Active Directory Domain ServicesAnoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 12th, 2011 2:32am

Hi, Thanks for response...hv done the same as suggested by you but still getting the error. Possible cause: This site's SMS Service account or the site server's machine account may not have full control rights for the "System Management" container in Active Directory Solution: Give the site's SMS Service account full control rights to the "System Management" container, and all child objects in Active Directory. Possible cause: The Active Directory object "SMS-Site-xxx" has been moved to a location outside of the "System Management" container, or has been lost. Solution: Delete the object from its current location, and let SMS create a new object. Possible cause: The Active Directory schema has not been extended with the correct SMS Active Directory classes and attributes. Solution: Turn off Active Directory publishing for each site in the forest, until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the SMS CD.
April 12th, 2011 12:47pm

Hello - Let us know what are the security permissions provided to the coputer account and check the sitecomp.log for more details..Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 13th, 2011 2:15am

Thanks for response...hv done the same as suggested by you but still getting the error. Have you added the computer account directly or did you add it to a group and granted permissions to that group? That latter would require a reboot.Torsten Meringer | http://www.mssccmfaq.de
April 13th, 2011 3:12am

Thanks for response...hv done the same as suggested by you but still getting the error. Have you added the computer account directly or did you add it to a group and granted permissions to that group? That latter would require a reboot. Torsten Meringer | http://www.mssccmfaq.de +1. Did you check your SMS Service account?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 19th, 2011 3:24am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics