locked
Remote Configuration Manager Console RRS feed

  • Question

  • hi guys,

    can you tell me the diff. between the AdminConsole.exe and Console.exe

    1. also, i've connected to my work vpn on a workgroup pc and installed the console to see how it works. it would appear i can view everything and perform actions within - what security perms is it running against as im on a WG PC?

    2. basically i want some techies to only have access to view reports and manage software updates from their pc - to use monitoring alone what perm would that fall under as security for user role?

    thanks - travis

    Friday, October 23, 2015 6:20 PM

Answers

  • The only exe mentioned on that whole page is consolesetup.exe.

    Microsoft.ConfigurationManagement.exe is located in in the AdminConsole\bin subfolder of whatever directory you installed it in.

    "E:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe" for my lab but that could be elsewhere.

    The permissions/controls enforce are based on the user account used to run the console as it uses integrated authentication. Where it is run from is irrelevant although integrated auth may not work from an untrusted domain -- that depends on many outside factors.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by Travis_83 Saturday, October 24, 2015 8:48 AM
    Friday, October 23, 2015 11:40 PM

All replies

  • Where are yo getting those file names from? The exe for the ConfigMgr admin console is Microsoft.ConfigurationManagement.exe so those files have nothing to do with ConfigMgr.

    1. That's not possible. You must have authenticated somehow as the console uses integrated authentication.

    2. The built in roles may work for you. Have you tried them? There is a built-in software update manager role. You will have to create a report viewer role however: http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/


    Jason | http://blog.configmgrftw.com | @jasonsandys

    Friday, October 23, 2015 8:03 PM
  • this - https://technet.microsoft.com/en-us/library/gg712320.aspx#BKMK_InstallConsole ??

    Where is Microsoft.ConfigurationManagement.exe located?

    On the site server, browse to <ConfigMgrSiteServerInstallationPath>\Tools\ConsoleSetup.

    I got the report role installed and the perms i got.

    so will whatever i'm logged in on the network say joe.bloggs and he is added in sccm with certain perms -- will those same perms apply to him if running the remote admin console from his local domain pc?

    Friday, October 23, 2015 11:18 PM
  • The only exe mentioned on that whole page is consolesetup.exe.

    Microsoft.ConfigurationManagement.exe is located in in the AdminConsole\bin subfolder of whatever directory you installed it in.

    "E:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe" for my lab but that could be elsewhere.

    The permissions/controls enforce are based on the user account used to run the console as it uses integrated authentication. Where it is run from is irrelevant although integrated auth may not work from an untrusted domain -- that depends on many outside factors.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Marked as answer by Travis_83 Saturday, October 24, 2015 8:48 AM
    Friday, October 23, 2015 11:40 PM