RE: [mssms] Permissions on systems management container

2014-06-09 Thread Kim Oppalfens
@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container That’s what I meant with simple: Don’t bother, just add them all. Through adding them to local admin, grants them access to install (remote) roles. That there are a few to many having access

RE: [mssms] Permissions on systems management container

2014-06-09 Thread Roland Janus
Subject: RE: [mssms] Permissions on systems management container But, the only account needing administrators access to other servers is the site server 's computer account. Granting dp's access to the sysmgmgt container isn't best practice in my book, but I wouldn't make a big deal out

RE: [mssms] Permissions on systems management container

2014-06-09 Thread Roland Janus
To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container This discussion is spot on. I was leaning towards adding the DP computer accounts to a group which already contains the primary's computer account and has been applied with full permission to the systems

RE: [mssms] Permissions on systems management container

2014-06-09 Thread Kim Oppalfens
@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container Convenience vs. security ? In this case I’m not worried about the minor reduction in security, but prefer the simplicity in managing it. -R From: listsad...@lists.myitforum.com [mailto:listsad

RE: [mssms] Permissions on systems management container

2014-06-09 Thread Roland Janus
@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container I don't think I'll ever see it that way. I don't feel it is more convenient to add a system to a group where it isn't needed, seems more inconvenient than anything else. I also don't agree with the minor reduction quote

RE: [mssms] Permissions on systems management container

2014-06-09 Thread Kim Oppalfens
Subject: RE: [mssms] Permissions on systems management container I don't think I'll ever see it that way. I don't feel it is more convenient to add a system to a group where it isn't needed, seems more inconvenient than anything else. I also don't agree with the minor reduction quote. You've

RE: [mssms] Permissions on systems management container

2014-06-09 Thread Roland Janus
Lol :) The 2nd happens rather often, doesn’t it? -R From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Kim Oppalfens Sent: Montag, 9. Juni 2014 15:31 To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container

RE: [mssms] Permissions on systems management container

2014-06-08 Thread Roland Janus
: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Kim Oppalfens Sent: Samstag, 7. Juni 2014 16:03 To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container Indeed, but only add the site servers (primary and secondary

RE: [mssms] Permissions on systems management container

2014-06-08 Thread Kim Oppalfens
@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container That’s what I meant with simple: Don’t bother, just add them all. Through adding them to local admin, grants them access to install (remote) roles. That there are a few to many having access

RE: [mssms] Permissions on systems management container

2014-06-08 Thread Roland Janus
...@lists.myitforum.com] On Behalf Of Kim Oppalfens Sent: Sonntag, 8. Juni 2014 09:12 To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container Not sure I get what you are saying. You feel it's less of a hassle to add dp's to a group to grant them rights

RE: [mssms] Permissions on systems management container

2014-06-08 Thread Johns, Damon (DoJ)
access solved for all. Simple? To risky? -R From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Kim Oppalfens Sent: Sonntag, 8. Juni 2014 09:12 To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container Not sure I get what you

RE: [mssms] Permissions on systems management container

2014-06-07 Thread Roland Janus
. -R From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Johns, Damon (DoJ) Sent: Samstag, 7. Juni 2014 05:07 To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container Thanks, That’s what I thought however I’m

RE: [mssms] Permissions on systems management container

2014-06-07 Thread Mike Dzikowski
and all its child objects. Mike D- From: damon.jo...@justice.tas.gov.au To: mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container Date: Sat, 7 Jun 2014 03:06:52 + Thanks, That’s what I thought however I’m stuffed if I could find confirmation easily

RE: [mssms] Permissions on systems management container

2014-06-07 Thread Kim Oppalfens
: Roland Janusmailto:roland.ja...@hispeed.ch Sent: ‎7/‎06/‎2014 13:30 To: mssms@lists.myitforum.commailto:mssms@lists.myitforum.com Subject: RE: [mssms] Permissions on systems management container I’d prefer to stick with simple: Add all servers into an AD group, add that group to local admin group

[mssms] Permissions on systems management container

2014-06-06 Thread Johns, Damon (DoJ)
Can I just get clarification on this, SCCM 2012 R2 with 1 Primary, SQL on box. When setting up stock standard DP the installation is failing due to the primary’s computer account not being a member of the local administrators group on that system. I can fix this issue but my question is: Q:

Re: [mssms] Permissions on systems management container

2014-06-06 Thread CESAR.ABREG0
No DPs are required, only site servers and MPs I believe which are the only ones publishing info to AD. Cesar A. Meaning is NOT in words, but inside people! Dr. Myles Munroe My iPad takes half the blame for misspells. On Jun 6, 2014, at 2:51 PM, Johns, Damon (DoJ)

RE: [mssms] Permissions on systems management container

2014-06-06 Thread Johns, Damon (DoJ)
@lists.myitforum.com Subject: Re: [mssms] Permissions on systems management container No DPs are required, only site servers and MPs I believe which are the only ones publishing info to AD. Cesar A. Meaning is NOT in words, but inside people! Dr. Myles Munroe My iPad takes half the blame