jasonbsstt

Well still playing around with this and still no workable solution...... Anyone.....

HI All Id first of all like to thank all you guys for such a great resource............ I have a quick question relating sccm2012 and RBA, We have a single site set up with a couple of remote DP's nothing too complex running sccm2012 sp1. I have one collection called "imaging" that has our current task sequence deployed to which we drop machines into for either re-imaging and or new hardware to deploy our SOE. Therefore I would like to be able to set up or modify some existing security roles to allow our desktop technicians to either: A: Create a new computer association for new hardware and import into this collection B: Move a machine from an existing collection into the imaging collection for re-building. My problem is (as far as I can tell) that in order to allow the technicians to create a new computer association I need to allow them access to the "all systems collection" thus exposing all the other collections for them to view.If they do not have acces to the "all systems collection" they connot see the "Imaging" collection when they go through the process of importing a new computer and get the the screen you can choose specifically which collection you would like to add the machine to. So I would like to "lock this down" as much as possible so that these guys can only see the bare minumum of what they need to do thier job (thats the idea of RBA right?) If anyone out there can offer me a sugestion it would be greatly appreciated. Im sure it has to do with my understanding of how this is supposed to work so please correct me if Im wrong. Cheers