Active Directory

SCCM 2007 R2 Automatic Site Code Discovery Was Unsuccessful

Before I get into the problem with client machines reporting, automatic site code discovery was unsuccessful . I originally had issues publishing the System Center Configuration Manager (SCCM) 2007 R2 site information into Active Directory.

Our environment at some point in the past was using SMS 2003, which means our AD schema had been extended to support it. With this in mind I attempted to update the schema to support SCCM 2007 following the Microsoft article here: http://technet.microsoft.com/en-us/library/bb632388.aspx

Initially this looked to work correctly, but after some further investigation and troubleshooting it appeared it didn't properly update the schema. In order to get over this first hurdle in the deployment I followed the Microsoft article here:http://technet.microsoft.com/en-us/library/bb680608.aspx which uses the ExtADSch.exe utility. After running this and reviewing the logs, we were in business. So I recommend using the ExtADSch.exe tool over the LDIF method.

Because the System Management OU was already created in AD I also had to manually update the permissions on the object. To do this:

  1. Open Active Directory Sites and Services.
  2. If not already enable the Advanced Features from the view menu.
  3. Locate the System OU. Inside of it locate the System Management OU.
  4. Right Click it and select Properties.
  5. Click the Security tab.
  6. Click Advanced and then click Add.
  7. Click Object Types, and select Computers.
  8. Enter the name of you SCCM server and click ok.
  9. On the next permissions screen click Full Control, Ensure the Apply to field is set to This object and all descendant objects.
  10. Click ok, to the remaining screens.

Once this change has been made if you haven't already set SCCM set to publish into AD, you can do this by:

  1. In the Configuration Manager console, navigate to System CenterConfiguration Manager / Site Database / Site Management / <site code> - <site name>.
  2. Right-click <site code> - <site name>, and click Properties.
  3. On the Advanced tab of site properties, select the Publish this site in Active Directory Domain Services check box.

 Now onto the main subject.

During some initial testing of a Windows 7 client machine I was not able to get the client to pick up the Site Information from Active Directory. The client was reporting, automatic site code discovery was unsuccessful. In order to correct this i followed the previous procedure to add the SCCM server permissions to the System Management OU however you need to do the following instead:

  1. Open Active Directory Sites and Services.
  2. If not already enable the Advanced Features from the view menu.
  3. Locate the System OU. Inside of it locate the System Management OU.
  4. Right Click it and select Properties.
  5. Click the Security tab.
  6. Click Advanced and then click Add.
  7. Enter everyone and click ok.
  8. On the next permissions screen click:
    1. List contents.
    2. Read all properties.
    3. Read permissions.
  9. Ensure the Apply to field is set to This object and all descendant objects.
  10. Click ok, to the remaining screens.

Once this was done, the client was successfully able to pull the site Information from Active Directory.



Syndicate content