Jump to content


togeoff

No SMS_SiteToSiteConnection_WIN found, but

Recommended Posts

I was following Anyweb's instructions in preparation to deploy Vista with SCCM.

 

In the preparations, it identifies a requirement to put the SCCM machine account into some groups. One being "SMS_SiteToSiteConnection_xxx".

But I don't have these groups!

 

Should I create them?

Does it mean my installation is not right?

Can I deploy o/s without these groups?

 

 

Notes.

I have domain admin access only. I have install SCCM on our domain only in Mixed mode with SCCM SP1.

Note that I can push applications to PCs without problem.

 

My next desired step is to configure this Vista O/S deployment.

 

Geoff.

Share this post


Link to post
Share on other sites

did you verify you have advanced view turned on in AD users and computers...

 

Yes I do have that ticked. I've also tried:

-searching from the root of my part of the domain.

-Looking in the usual place such as users folder.

 

Is it needed in a mixed enviroment?

Could it exist somewhere in the enterprise root?

 

I actually thought I saw it some time ago. But I have done several test installations and its possible that it was with one of these.

 

Should I re-run install?

Share this post


Link to post
Share on other sites

is SCCM installed on the server that you are attempting to locate this information on ? the SMS_* groups are created when SCCM is installed...

 

you are looking in Active Directory users and Computers in the USERS section arnt you ????

 

 

 

give me more details please

 

cheers

anyweb

Share this post


Link to post
Share on other sites

is SCCM installed on the server that you are attempting to locate this information on ? the SMS_* groups are created when SCCM is installed...

 

you are looking in Active Directory users and Computers in the USERS section arnt you ????

 

 

 

give me more details please

 

cheers

anyweb

 

 

Ummmmm, maybe.....

 

So its local groups, not AD.... Man, is my face red.

Share this post


Link to post
Share on other sites

shouldn't matter at all, when you instaslled SCCM, did you install it on a computer which is joined to this AD (joined to this domain) ?

 

Yes, it is installed on a computer which is joined to the Domain that I manage. Note that this is not the Enterprise level domain.

Share this post


Link to post
Share on other sites

ok this is how to do it (had the problem myself today !) this issue will occur when you install SCCM on a different computer to the domain controlller, in my guides I had SCCM setup and running on the DC, hence the differences...

 

 

To resolve this:

 

on the Domain Controller, login to Active Directory Users and Computers, enable advanced view

 

click users

right click and choose NEW, Group

 

make a new 'domain local' security group called SMS_SiteSystemToSiteServerConnection_WIN and then make a new one for SMS_SiteToSiteConnection_WIN

 

change WIN to your site code,

 

the rest of the guide i wrote still applies (ie: add those accounts in AD to the local computer...)

 

cheers

anyweb

Share this post


Link to post
Share on other sites

ok this is how to do it (had the problem myself today !) this issue will occur when you install SCCM on a different computer to the domain controlller, in my guides I had SCCM setup and running on the DC, hence the differences...

 

 

To resolve this:

 

on the Domain Controller, login to Active Directory Users and Computers, enable advanced view

 

click users

right click and choose NEW, Group

 

make a new 'domain local' security group called SMS_SiteSystemToSiteServerConnection_WIN and then make a new one for SMS_SiteToSiteConnection_WIN

 

change WIN to your site code,

 

the rest of the guide i wrote still applies (ie: add those accounts in AD to the local computer...)

 

cheers

anyweb

 

Thanks anyweb for solving that. I know I always appreciate it when experts such as yourself invest your time into this type of thing.

I will continue with your documents.

 

Just incase your curious, I have SCCM running and it works OK. My objective now is to follow your docs and learn how to push out Vista, as I know we will be doing that next year. I'd rather learn it now than at the last minute.

Again Thanks.

Geoff.

Share this post


Link to post
Share on other sites

Are these AD groups necessary?

I am asking this because someone from our company installed SCCM 2007 without the AD groups.

Can I manually ad them later?

 

Btw this person that installed the SCCM doesn't work here anymore so its impossible to ask anyway :)

Share this post


Link to post
Share on other sites

have a look at this post (which got lost when i lost two days data recently.... but I found the post again using googles cache

 

 

Brian Kirkegaard

Rating: 0

View Member Profile

 

post Yesterday, 07:41 PM

Post #4

 

 

Newbie

*

 

Group: Members

Posts: 1

Joined: Yesterday, 07:28 PM

Member No.: 2,527

 

 

 

 

Hi all,

 

Just to clear up a few things:

 

SMS_SiteSystemToSiteServerConnection_sitecode and SMS_SiteToSiteConnection_sitecode are local groups created on the site server. The reason that anyweb had them in his AD was that the site server was created on a Domain Controller, which does not contain Local users and groups.

 

If you are deploying a simple setting with all roles on the same server these two groups will be empty and adding the "local" computer account means nothing. It's only when some of the roles are on other servers that these groups contains computer accounts. What's more - the other servers should be automatically added to the necessary groups during install/setup of the other ConfigMgr servers. The only necessary manual intervention will be if servers are later removed, in which case you should manually remove these computer accounts from the above SMS groups.

 

Best,

-Brian

Share this post


Link to post
Share on other sites

have a look at this post (which got lost when i lost two days data recently.... but I found the post again using googles cache

 

Very nice guides Anyweb. I Digg it! :>D These have been a great supplement to stumble upon.

 

Just to coroborate, I installed SCCM 2007 on a server that wasn't a DC and the DB is remote. It created those groups as local to the SCCM server and added the DB server account to the SMS_SiteSystemToSiteServerConnection_CVO local group. The other group is empty.

 

This seems to be working as intended and I'm assuming that we should skip that part of the configuration guide.

 

Thanks again! Great work.

 

-Gorilla

Share this post


Link to post
Share on other sites

so how did you find this place ? yes go ahead and skip that part and continue as normal, i will make a change to that part of the document,....

cheers

 

anyweb

Share this post


Link to post
Share on other sites

so how did you find this place ?

 

My trusty friend Google I'm sure. I've been doing all kinds of reading on SCCM, Server 2008, and SQL. These guides have been one of the most reliable resources I've found.

 

Right now I'm wending through client discovery errors (warnings) due to multiple active WINS 00 records. Not sure why MS Products can't just use DNS solely yet, and my DB is remote so apparently something causes the connection to drop in the night and I can only get to the local console again by rebooting. I'm close to asking in a new thread, but I'm hoping to figure it out and learn in the process.

 

Cheers,

 

Gorilla

Share this post


Link to post
Share on other sites

ok this is how to do it (had the problem myself today !) this issue will occur when you install SCCM on a different computer to the domain controlller, in my guides I had SCCM setup and running on the DC, hence the differences...

 

 

To resolve this:

 

on the Domain Controller, login to Active Directory Users and Computers, enable advanced view

 

click users

right click and choose NEW, Group

 

make a new 'domain local' security group called SMS_SiteSystemToSiteServerConnection_WIN and then make a new one for SMS_SiteToSiteConnection_WIN

 

change WIN to your site code,

 

the rest of the guide i wrote still applies (ie: add those accounts in AD to the local computer...)

 

cheers

anyweb

Hi Anyweb, Quesiton, but first, thanks for posting documentations for installing SCCM 07 sp1. My question is that when I installed SCCM on my virutal Win2K8 w/ SQL Question2K8virtual and joined the company domain, I don't see the two groups as well. Now, I'm on an OU - Do I create the two accounts on my OU\Users or on the main company.domain.net\Users?

 

Thanks very much again.

Share this post


Link to post
Share on other sites

hi Jovin

 

is AD on a separate server to your SCCM server ? if so you can ignore this bit and continue.

 

cheers

anyweb

Share this post


Link to post
Share on other sites

hi Jovin

 

is AD on a separate server to your SCCM server ? if so you can ignore this bit and continue.

 

cheers

anyweb

 

Yes, it's on the main company server. But when running ConfigManger Console, and checking on the Site Status, I get 3 critical and a Warning regarding SMS_MP_DEVICE_MANAGER, SMS_SITE_COMPONENT_MANAGER, SMS_MP_CONTROL_MANAGER, and a warning on SMS_HIERARCHY_MANAGER.

Share this post


Link to post
Share on other sites

those errors could be related to anything and you'll need to read the logs of each to see what it's complaining about,

 

when installing an SCCM server and then configuring it you should expect some errors in the system status particularly if you are doing a few reboots....

 

cheers

anyweb

Share this post


Link to post
Share on other sites

those errors could be related to anything and you'll need to read the logs of each to see what it's complaining about,

 

when installing an SCCM server and then configuring it you should expect some errors in the system status particularly if you are doing a few reboots....

 

cheers

anyweb

 

Thanks for the clarification anyweb. Back to the SMS_SiteToSiteConnction_xxx, should it be on the domain users or on the OU users group?

Share this post


Link to post
Share on other sites

Thanks for the clarification anyweb. Back to the SMS_SiteToSiteConnction_xxx, should it be on the domain users or on the OU users group?

 

It is not needed to create in the Active Directory the two aforementioned groups in member servers, the exception is when you install SCCM on a Domain Controller, if the setup procedure doesn't create them in AD (because the DC has no local users/groups) then you may create them manually and give the correct permissions at the SCCM computer account in order to modify memberships.

Share this post


Link to post
Share on other sites

My first post here. First THANKS a lot for the good SCCM guides here.

 

About this thread....

 

IMHO, There is no need to create these groups.

These are automatically created in the site server (when you install SCCM).

See here [notice that this is a Windows 2003 R2 server]

 

post-4113-12569116606658_thumb.gif

 

These are local groups created in the server where you installed SCCM. In his case he installed everything on the DC. In the real world this is never done.

 

In my case, the DC, SCCM and SQL server all reside on three seperate servers.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...


×
×
  • Create New...