I have setup and configured SCCM 2007 SP2 on a Windows 2008 R2 server. I have given permissions to the System container. SCCM creates the System Management Container fine but it does not create the SLP containers. I have full control set for both the service account and the computer account. They are set for Full Control, This object and all descendant objects, but the server will still not create the containers in AD. Then when my clients go to discover the site they fail all the time and the log files says they cannot access or find the SLP in AD. Thanks Scott

Hello - Check whether the system account has access to system management container in AD. Sitecomp.log for more details, also double confirm the SLP role is enabled on the sites ystems .Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Do you see anyother attributes published under system management container ? if so,check if SLP is role is enbled and installed corretly or not ? Do you see any error messages under site status--->component status.//Eswar Koneti @ www.eskonr.com

I checked the permissions for the system management container in AD and it has full control and the computer account. I cannot find the sitecomp.log file, should this be on the server? I have the SLP setup and configured correctly as far as I know. Is there something else I need to check? Thanks

I do not see any other attributes under the System management container. When I removed the system management container, SCCM recreated it correctly and the accounts have full control and child objects checked but is still does not create the SLP. I have some other errors is component status. Systems Management Server cannot create the object "cn=SMS-SLP-HBG-CC-HBG-SCCM" in Active Directory. Possible cause: This site's SMS Service account or the site server's machine account may not have full control rights for the "System Management" container in Active Directory Solution: Give the site's SMS Service account full control rights to the "System Management" container, and all child objects in Active Directory. Possible cause: Another Active Directory object named "cn=SMS-SLP-HBG-CC-HBG-SCCM" already exists somewhere outside of the "System Management" container Solution: Locate the other object with the same name, and delete the object from its current location. Then allow SMS create a new object. Possible cause: The Active Directory schema has not been extended with the correct SMS Active Directory classes and attributes. Solution: Turn off Active Directory publishing for each site in the forest, until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the SMS CD.

Did you succesfull extend the AD?My Blog: http://www.petervanderwoude.nl/

Please check if you have the correct credentials to extend the shema, it should be ok - http://technet.microsoft.com/en-us/library/bb680608.aspx Hope it helps.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I did not extend the schema, I was told that you don't need to do this to get it working. Can you please help me get the clients talking without the schema being extended. I do not have Forest level schema admin rights. I only have domain admin rights. Thanks

Wll.. that's the reason you don't get the information in the AD.. To make your client talk without the extended schema, you need to, at least, specify the SLP during the client installation. Take a look here for the possibilties: http://technet.microsoft.com/en-us/library/bb694195.aspxMy Blog: http://www.petervanderwoude.nl/