Geçtiğimiz günlerde SCCM sunucusunda ki hata dikkatimizi çekti. Detayları aşağıda yer alan hata mesajında, SCCM computer nesnesinin Active Directory’de yazma yetkisinin yer almadığı belirtiliyor.

On 4/5/2017 07:29:39, component SMS_SITE_COMPONENT_MANAGER on computer sccm.mydomain.local reported: Configuration Manager cannot update the already existing object “cn=sccm.mydomain.local” in Active Directory (mydomain.local).

Possible cause: The site server’s machine account may not have full control rights for the “System Management” container in Active Directory
Solution: Give the site server’s machine account full control rights to the “System Management” container, and all child objects in Active Directory.

Possible cause: The Active Directory object “cn=sccm.mydomain.local” has been moved to a location outside of the “System Management” container, or has been lost.
Solution: Delete the object from its current location, and let the site create a new object.

Possible cause: The Active Directory schema has not been extended with the correct ConfigMgr Active Directory classes and attributes.
Solution: Turn off Active Directory publishing for each site in the forest, until the schema can be extended. The schema can be extended with the tool “extadsch.exe” from the installation media.

Hatanın giderilmesi için adsiedit.msc konsolundan System Management konteynırına SCCM Computer nesnesi için Full Control yetki vermelisiniz. SMS_Site_Component servisini restart ederek durumu gözlemleyebilirsiniz.

Close