locked
Computer Association - Import Computer rights RRS feed

  • Question

  • I am attempting to setup a console for our staging partner for system deployment using OSD.  One of the roles the staging partner needs is the ability to import computers into SCCM using the "Computer Association" section of OSD.  When I import into the "All Systems" collection only, everything works great.  When It ry to import into a specific collection, i receive the error below.  The user account has the same security on the "All Systems" collection and the "deployment" collections.  I have the following currently setup:

    Site - Read, Import
    Computer Association - Read, Delete, Create
    All Systems Collection - Read, Modify, Read Resource
    "deployment" collections - Read, Modify, Read Resource

    I am receiving the following error when I go through the process and try to add it to one of my "deployment" collections:
    ---------------------------------------------------------------------------------------------
    Error: Following computers have not been imported:

        Name: test11212
        MAC Address: 11:11:11:11:11:11
        SMBIOS GUID:
        Source Computer:
        Choose Target Collection: Register-NCR
    Errors
    You do not have security rights to perform this operation.
    ConfigMgr Error Object:
    instance of SMS_ExtendedStatus
    {
        Description = "User \"domain\\ncraccess\" has no read resource rights in any collection for this ResourceID";
        ErrorCode = 1112017920;
        File = "e:\\nts_sms_fre\\sms\\siteserver\\sdk_provider\\smsprov\\sspcollection.cpp";
        Line = 735;
        ObjectInfo = "1";
        Operation = "ExecMethod";
        ParameterInfo = "SMS_Collection.CollectionID=\"XXX00082\"";
        ProviderName = "WinMgmt";
        StatusCode = 2147749889;
    };
    ---------------------------------------------------------------------------------------------


    What am I missing?

    Thanks,
    Brian
    Thursday, February 21, 2008 5:36 PM

Answers

  • Brian,

     

    In SCCM Console, right click your Site Name under Site Management and Click Properties.

     

    Click Security Tab

     

    Add the "Import Computer Entry" right to the "Class Security Rights" for that particular user.  I created a group for the users that will be doing imaging, and granted the Security Group the Import Computer Entry Right.

     

    Good luck!

    Sean

    • Proposed as answer by Paul Brock1 Wednesday, May 18, 2011 5:45 PM
    • Marked as answer by Garth JonesMVP Monday, December 28, 2015 5:39 PM
    Thursday, April 3, 2008 8:19 PM

All replies

  • Brian,

     

    In SCCM Console, right click your Site Name under Site Management and Click Properties.

     

    Click Security Tab

     

    Add the "Import Computer Entry" right to the "Class Security Rights" for that particular user.  I created a group for the users that will be doing imaging, and granted the Security Group the Import Computer Entry Right.

     

    Good luck!

    Sean

    • Proposed as answer by Paul Brock1 Wednesday, May 18, 2011 5:45 PM
    • Marked as answer by Garth JonesMVP Monday, December 28, 2015 5:39 PM
    Thursday, April 3, 2008 8:19 PM
  • Hi Brian!

    I know that your post ist "very" old. But i think other people like me will run into the same problem and therefore i post the thing you miss. Wink

    The user or group must have the collection class "read resource" right. Why this is needed i don't know. Because the Import without the class read resource right an without using a destitionation collection will work fine.


    Markus
    Wednesday, May 21, 2008 9:31 AM
  • Hi Seanka,

    Thanks , its worked for me.... :)

    Muthu

    • Proposed as answer by Palavesamuthu Tuesday, November 30, 2010 4:56 AM
    Tuesday, November 30, 2010 4:56 AM
  • Thursday, April 7, 2011 12:47 PM