Forums on Intune, SCCM, and Windows 11

Welcome to the forums. Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your topics and posts, as well as connect with other members through your own private inbox!

SOLVED The site server's machine account may not have full control rights

Status
Not open for further replies.
Messages
3
Solutions
1
Reaction score
0
Points
1
Hi,

I'm getting this issue help me with this.

Configuration Manager cannot update the already existing object "cn=SMS-MP-MYS-SHF-SCOM-01.TECH.LOCAL" in Active Directory (Tech.local).

Possible cause: The site server's machine account may not have full control rights for the "System Management" container in Active Directory
Solution: Give the site server's machine account full control rights to the "System Management" container, and all child objects in Active Directory.

Possible cause: The Active Directory object "cn=SMS-MP-MYS-SHF-SCOM-01.TECH.LOCAL" has been moved to a location outside of the "System Management" container, or has been lost.
Solution: Delete the object from its current location, and let the site create a new object.

Possible cause: The Active Directory schema has not been extended with the correct ConfigMgr Active Directory classes and attributes.
Solution: Turn off Active Directory publishing for each site in the forest, until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the installation media.
 
I suppose this is a ConfigMgr instance setup on your lab. Have you made any changes which resulted in this issue ?.
 
Status
Not open for further replies.

Forum statistics

Threads
7,178
Messages
28,005
Members
18,311
Latest member
GregorianG

Trending content

Back
Top