Ask a questionAsk a question
 

AnswerSCCM Using a DC as a Distribution Point

  • Tuesday, November 03, 2009 5:55 PMscchram Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I want to use a DC as a Distribution point share using computer$ account credentials... I've created the share and given the access, but still cannot via SCCM DP creation or package push.

    Since a DC has no "local admin" accounts, how do I give the site server computer$ account admin access to the DC and/or what should the permission on the DC\smsShare look like??  I do not want to give the computer$ account Domain Admin rights.

    Is there a way to use a DC as a distribution point without giving any account Domain Admin Rights?

    Thanks.
    Steve

Answers

  • Tuesday, November 03, 2009 6:49 PMKent Agerlund Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi Steve,

    In my opinion, it's a really bad idea to use a DC for that purpose. The site server computer does require locad administrative permissions on the box. I am pretty sure you need to add the computer account to the domain admins group unless you manually create the proper dp web site.


    Kent Agerlund | http://scug.dk/members/Agerlund/default.aspx | The Danish community for System Center products

All Replies

  • Tuesday, November 03, 2009 6:49 PMKent Agerlund Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Hi Steve,

    In my opinion, it's a really bad idea to use a DC for that purpose. The site server computer does require locad administrative permissions on the box. I am pretty sure you need to add the computer account to the domain admins group unless you manually create the proper dp web site.


    Kent Agerlund | http://scug.dk/members/Agerlund/default.aspx | The Danish community for System Center products
  • Wednesday, November 04, 2009 12:33 AMJohn MarcumMVP, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I agree with Kent, I would not use a DC as a DP, as a matter fact I won't share my DP's with anyone because you will run into space issues and it will become a problem. If you insist on doing this you would need to add the computer account of the sccm server into the domain admins group.


    John Marcum | http://www.TrueSec.com/en/Training.htm | http://myitforum.com/cs2/blogs/jmarcum
  • Wednesday, November 04, 2009 9:54 AMJie-Feng Ren - MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Besides, Using Dc as DP will also load the server performance. It is highly recommend to use seperate server to serve as DP.

    HTH.


    Jie-Feng Ren - MSFT