DCOM Permissions

Administrative users running the console from their workstations, where the SMS Provider does not exist, require the Remote Activation DCOM privilege on any computer where the SMS Provider is installed and providing access to the ConfigMgr database. (In most cases, the SMS Provider is installed on the same server as the site server.)

By default, the local SMS Admins group has the following permissions applied:

• Local Launch

• Remote Launch

• Local Activation

• Remote Activation

For remote console access, only the Remote Activation privilege is required. Figure 8.29 shows a custom local group is provided only this privilege.

Image

Get System Center 2012 Configuration Manager Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.