Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Create System Management Container for SCCM and Assign Permissions

Create System Management Container for SCCM and Assign Permissions

Written By Anoop C Nair
Last Updated July 24, 2024
Posted In SCCM
SHARE

Let’s learn how to Create System Management Container & provide full control permissions. System Management is the container in the Active Directory to manage devices using ConfigMgr | SCCM.

It is important to Extend Active Directory Schema before creating the system management container in Active Directory Domain Services. This container should be established once in each domain with a Configuration site that publishes data to Active Directory. Be sure to grant permissions to the computer account of each site server that will be publishing data to that domain.

ConfigMgr uses a System Management Container to publish Management Point and boundary details. ConfigMgr clients connect and query the system management container to select the best MP available.

NOTE! – More details about Publishing site data for SCCM.

Patch My PC
Index of the post
Prerequisite
Create a System Management Container
Assign Permission for System Management Container
Results – Create a System Management Container for SCCM | ConfigMgr
Create System Management Container for SCCM and Assign Permissions – Table 1

Prerequisite

Let’s see what the prerequisites are for a System Management Container.

Create a System Management Container

Let’s see how to create a system management container.

  • Run ADSI Edit (adsiedit.msc)
  • Right-click on the ADSI Edit node from the MMC console and click on Connect to…
Create System Management Container for SCCM and Assign Permissions - Fig.1
Create System Management Container for SCCM and Assign Permissions – Fig.1

Enter the site server’s Domain or Domain server details – Select or type a domain or server: (Server | Domain [: port]). Click OK

Create System Management Container for SCCM and Assign Permissions - Fig.2
Create System Management Container for SCCM and Assign Permissions – Fig.2

Expand the Domain to see the CN system and right-click on it.

  • Select New, and then choose Object.
Create System Management Container for SCCM and Assign Permissions - Fig.3
Create System Management Container for SCCM and Assign Permissions – Fig.3

In the Create Object dialog box, choose Container, and then select Next

Create System Management Container for SCCM and Assign Permissions - Fig.4
Create System Management Container for SCCM and Assign Permissions – Fig.4

In the Value box, enter System Management, and then select Next to continue

Create System Management Container for SCCM and Assign Permissions - Fig.5
Create System Management Container for SCCM and Assign Permissions – Fig.5

Click on the Finish button

Create System Management Container for SCCM and Assign Permissions - Fig.6
Create System Management Container for SCCM and Assign Permissions – Fig.6

Assign Permission for System Management Container

You have created the System Management container. Now let’s assign permissions to primary and secondary server computer accounts. Create System Management Container for SCCM and Assign Permissions.

Right-click CN=System Management, and then choose Properties.

Create System Management Container for SCCM and Assign Permissions - Fig.7
Create System Management Container for SCCM and Assign Permissions – Fig.7

Select the Security tab from System Management Properties.

Create System Management Container for SCCM and Assign Permissions - Fig.8
Create System Management Container for SCCM and Assign Permissions – Fig.8

Click on the “Add” button and enter the site server computer account in the designated box. Then click on “Object Types” and select “Users, Groups, or Built-in security principals.” Choose the location “memom.com” and enter the object names to select (example: CMMEMCM.memomcom). Finally, click “OK.”

  • Click on Add button.
  • Enter the site server computer account in the box below: “Enter the object names to select.”
  • Click on Object Types.
Create System Management Container for SCCM and Assign Permissions - Fig.9
Create System Management Container for SCCM and Assign Permissions – Fig.9

Select Computers and Click OK

Create System Management Container for SCCM and Assign Permissions - Fig.10
Create System Management Container for SCCM and Assign Permissions – Fig.10

Click on OK to continue with the selection.

Create System Management Container for SCCM and Assign Permissions - Fig.11
Create System Management Container for SCCM and Assign Permissions – Fig.11

Select the computer account for the site system. Choose the Full Control permission. Repeat for all site servers in the domain.

  • Click on the Advanced button
Create System Management Container for SCCM and Assign Permissions - Fig.12
Create System Management Container for SCCM and Assign Permissions – Fig.12

Select the site server’s computer account and select the Edit button.

Create System Management Container for SCCM and Assign Permissions - Fig.13
Create System Management Container for SCCM and Assign Permissions – Fig.13

Select the drop-down option called “This object and all descendant objects” from Applies to option. Click OK to continue.

Create System Management Container for SCCM and Assign Permissions - Fig.14
Create System Management Container for SCCM and Assign Permissions – Fig.14

Click OK & OK to finish.

Results – Create System Management Container for SCCM | ConfigMgr

You have created a System Management container and provided full control permission to site system servers.

Create System Management Container for SCCM and Assign Permissions - Fig.15
Create System Management Container for SCCM and Assign Permissions – Fig.15

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion · 5 comments

  1. Hi, Anoop,
    One question: we have in our company a primary SCCM site, and we are going to create another one in parallel, to migrate from the old to the new, different name of site, we have problems with the S.O etc, would there be any problem in adding the new server in the container, along with the other one? with the same permissions.

    Thank you very much for your help!

    Reply

  2. We have Already Standalone SCCM Servers on VM , Now we planning place new SCCM in our environment with different hostname in this case how should i need to go for the schema Extension , Kindly guide

    Guru

    Reply

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws

Key Takeaways 2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws! The June 2026 Windows 11 Patch Tuesday update brings several improvements to File Explorer. It adds support for additional archive formats, including UU, CPIO, XAR, and NuGet Packages (NUPKG). The update also preserves View and Sort preferences in […]

AC Anoop C Nair 10 min read
Intune

2026 May KB5089549 KB5087420 Windows 11 Patch | 0 Zero Day Vulnerabilities and 120 Flaws

Key Takeaways The Windows 11 May 2026 Patch KB5089549 KB5087420 Update brings important security fixes, performance improvements, and reliability enhancements across the operating system. The update introduces new features such as Xbox Mode for gaming, File Explorer improvements, enhanced input and sharing experiences, better taskbar and Windows Hello reliability, and additional enterprise management capabilities for […]

AC Anoop C Nair 8 min read
SCCM

ConfigMgr 2603 Introduces New Early Update Enrollment Process

Key Takeaways In this post we are discussing the ConfigMgr 2603 Introduces New Early Update Enrollment Process. Microsoft has officially released Configuration Manager version 2603 to the Early Update Ring, giving organizations an opportunity to test upcoming improvements before the global production rollout. The release is targeted at enterprises running ConfigMgr version 2409 or later […]

AC Anoop C Nair 3 min read