locked
AD can not create objects in system management container RRS feed

  • Question

  • Hi

    first I extended the schema and given full controll on container. But after installation of sccm 2012 I did not find any objects in system management container. what is the solution for this problem

    G.V.Ramana

    • Moved by Garth JonesMVP Saturday, June 20, 2015 1:50 PM CM12 Question
    Saturday, June 20, 2015 1:21 PM

Answers

  • Also, "Full Control" is not enough. You must grant "Full Control" on the System Management container and all of it's descendant objects for the computer object of the site server which can only be done using the advanced ACL editor. If you granted permissions to a security group that contains the computer object, you must reboot the system for the permission to be effective (as Gerry mentioned).

    Also, are you sure the Schema update was completely successful? Assuming you used extadsch.exe you can verify by checking the log file placed in the root of the C drive on the system you ran this on. Also, are you sure that both the schema update and the creation of the System Management container has replicated around your forest (for the schema) and domain (for the container).

    Ultimately, the step by step instructions at https://technet.microsoft.com/en-us/library/gg712264.aspx are very good and are what you should follow exactly.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Proposed as answer by Joyce L Tuesday, June 23, 2015 6:51 AM
    • Marked as answer by Joyce L Wednesday, July 1, 2015 9:40 AM
    Saturday, June 20, 2015 2:34 PM
  • Can you describe your environment in a little more detail? How many domains have you got? Did you assign FC of the container to the Primary Site Server computer account? Try restarting the server so that the permissions are applied correctly.

    Is there anything useful in hman.log file?



    Gerry Hampson | Blog: www.gerryhampsoncm.blogspot.ie | LinkedIn: Gerry Hampson | Twitter: @gerryhampson

    • Proposed as answer by Joyce L Tuesday, June 23, 2015 6:51 AM
    • Marked as answer by Joyce L Wednesday, July 1, 2015 9:40 AM
    Saturday, June 20, 2015 2:09 PM

All replies

  • Can you describe your environment in a little more detail? How many domains have you got? Did you assign FC of the container to the Primary Site Server computer account? Try restarting the server so that the permissions are applied correctly.

    Is there anything useful in hman.log file?



    Gerry Hampson | Blog: www.gerryhampsoncm.blogspot.ie | LinkedIn: Gerry Hampson | Twitter: @gerryhampson

    • Proposed as answer by Joyce L Tuesday, June 23, 2015 6:51 AM
    • Marked as answer by Joyce L Wednesday, July 1, 2015 9:40 AM
    Saturday, June 20, 2015 2:09 PM
  • Also, "Full Control" is not enough. You must grant "Full Control" on the System Management container and all of it's descendant objects for the computer object of the site server which can only be done using the advanced ACL editor. If you granted permissions to a security group that contains the computer object, you must reboot the system for the permission to be effective (as Gerry mentioned).

    Also, are you sure the Schema update was completely successful? Assuming you used extadsch.exe you can verify by checking the log file placed in the root of the C drive on the system you ran this on. Also, are you sure that both the schema update and the creation of the System Management container has replicated around your forest (for the schema) and domain (for the container).

    Ultimately, the step by step instructions at https://technet.microsoft.com/en-us/library/gg712264.aspx are very good and are what you should follow exactly.


    Jason | http://blog.configmgrftw.com | @jasonsandys

    • Proposed as answer by Joyce L Tuesday, June 23, 2015 6:51 AM
    • Marked as answer by Joyce L Wednesday, July 1, 2015 9:40 AM
    Saturday, June 20, 2015 2:34 PM