Jump to content


  • 0
SiegmundB

site management permissions

Question

I'm busy implementing SCCM 2007 R3.

security wise we have several departments that have local IT support and are responsible for their machines/users only (but everyone is in the same AD with separate OUs).

 

the security model in SCCM is based on this: one Admins group with a select few that have all permissions, one helpdesk group per department with read permissions on site & Report level and some special rights on collection level, one admin group per department with mostly create rights.

 

the thing is that I noticed now, that everyone who has read permission to the Site Management tree, can enable client push ...

If I withdraw read permission, this has a side-effect that I do not have the 'manage collection membership' rightclick option available in the collection level.

 

how can I disable read permission to the Site Management level without having to stop the console showing 'manage collection membership' ?

Share this post


Link to post
Share on other sites

0 answers to this question

Recommended Posts

There have been no answers to this question yet

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...


×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.