SCCM and SQL Permissions
Hi All, The DBA team in our prod environment has installed the SQl server for the SCCM. The account used for installing SQL and the one that will be used for SCCM are fifferent. But they are skeptical about enabling the permissions and roles for SCCM admin. Kindly tell me the roles and permissions needed to install and run SCCM 2007 R3 without any issues. If you could please direct me to any technet article that lists it in detailed manner. Thanks in advance.
April 28th, 2011 10:00am

This should answer your question: http://technet.microsoft.com/en-us/library/bb632943.aspxTorsten Meringer | http://www.mssccmfaq.de
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 10:15am

On top of the reply from Torsten, also read this post - http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/70539409-7c7d-48ee-9d13-2e8f0f37f955Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
April 28th, 2011 10:22am

Thankyou Torsten and Kent. That was really useful. I have a quick question here. My DB team has consented to give full control Sysadmin rights to the SCCM admin for installing SCCM. But they are going to revoke the full access and replace it with read/write access once the installation is done. What impact is it gonna make if at all it does any? Thankyou.
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 11:24am

You won't be able to apply service packs to ConfigMgr.Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
April 28th, 2011 11:27am

Oh great.. So apart from that I wont face any issue in the routine production activities. Only when I need to apply service packs I can then give full access and again revoke. Is that correct?
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 11:53am

Tell them to treat the account like a service account. After initial installation, you should immediately delegate permissions in the ConfigMgr console to an admin group and then disable the installation account. You should keep it around because it is an all powerful account as far as ConfigMgr is concerned and is very useful during SP installations as well as a fallback account in case permissions are somehow messed up.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
April 28th, 2011 11:58am

As long as the site system computer account has both local admin and SQL sysadm, you should be fine removing or granting those permissions from the install account on demand.Jason | http://myitforum.com/cs2/blogs/jsandys | Twitter @JasonSandys
Free Windows Admin Tool Kit Click here and download it now
April 28th, 2011 3:07pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics