No. I believe this has to do with some security restrictions in the policy (maybe GPO or local security settings).
Next step perhaps is to enable logging of all security events and see where I run into a snag and what’s responsible for granting the necessary right. Thanks, nile From: [email protected] [mailto:[email protected]] On Behalf Of Aaron Czechowski Sent: Thursday, October 16, 2014 3:53 PM To: [email protected] Subject: [mssms] RE: Non-Admin Users cannot save changes in SCEP Does the behavior change if there is not currently a scan in progress? (If the agent is idle) Aaron From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Gilmanov, Nile Sent: Thursday, October 16, 2014 10:01 AM To: [email protected]<mailto:[email protected]> Subject: [mssms] Non-Admin Users cannot save changes in SCEP E.g. per policy I give them rights to change CPU% during scanning and choose a Scheduled Scan time. But my non-admin users cannot save changes. See attached screenshot. (if attachment didn’t load. Window Title: System Center Endpoint Protection, Body: Access is denied, click help for more information about the problem, Support information: Error Code 0x80070005) Looks like some kind of access that needs to be granted to my limited users in order to manage their SCCM given rights to SCEP. [cid:[email protected]] Thanks for any ideas guys, Nile
