Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
SCCM Primary Installation Error Attempted to Perform Unauthorized ConfigMgr

SCCM Primary Installation Error Attempted to Perform Unauthorized ConfigMgr

Written By Anoop C Nair
Last Updated August 5, 2024
Posted In SCCM
SHARE

SCCM Primary Installation Error Attempted to perform unauthorized ConfigMgr. This happens only in complex environments 🙂 I know it’s a bit tricky and a long one.

I have a working CAS (in the Parent domain) and one working primary site (in another child domain). I tried to set up another primary server (in a second child domain).

The installation wizard failed with the following errors. I was on the page “Specify Join the primary site to an existing hierarchy” and provided the FQDN of the Central Administration Site (CAS) server.

SCCM Primary Installation Error Attempted to Perform Unauthorized ConfigMgr

SCCM Primary Installation Error Attempted to Perform Unauthorized ConfigMgr - Fig.1
SCCM Primary Installation Error Attempted to Perform Unauthorized ConfigMgr – Fig.1

Error “ConfigMgrSetupWizard.log”

ConfigMgrSetupWizard Information: 1: Cannot detect SMS Type because either SiteServer, SqlServer or SiteServerName is empty. SCCM Primary Installation Error.

Patch My PC

ConfigMgrSetupWizard Error: 1: Exception message: [Attempted to perform an unauthorized operation.], Exception details: [System.UnauthorizedAccessException: Attempted to perform an unauthorized operation.

The following steps have been completed in preparation for a new Primary Site to join the hierarchy. Once the new Primary Site has been connected to the CAS and the CM 12 hierarchy, we can remove the Regional Site Administrator Account from the Full Administrators group and local admin rights.

Prerequisites Checked: – SCCM Primary Installation Error

  • Temporarily added the Regional Site Administrator Account (used to install the primary site) to the local admin group of CM 2012 CAS and remote SQL Server.
  • Added to the Full Administrators Group via the CAS Administration Console.
  • Added to the CAS SQL Server CM 12 instance with sysadmin rights via SQL Management Studio.
  • Two-way Trust between Parent Domain and Child domain (as per domain admins).
  • The required Firewall ports are open (as per CM 12 documentation)
  • Child domain credential (which is used for the installation of the primary server) has all the required rights/access on CAS and CAS – SQL and child domain SQL servers.
  • Child domain computer also has the required permissions on CAS, CAS-SQL, and child domain SQL servers.
  • CAS, CAS-SQL, and SQL are ping-able from the child domain primary server.
  •  Also, I tried adding child domain credentials into the local administrator’s group of CAS in the parent domain, etc.

Troubleshooting Performed:- SCCM Primary Installation Error

I tried connecting to the remote WMI (WBEMTEST and wmimgmt.msc) of the CAS server in the parent domain with child domain credentials. It gave the following error: “Win32: The RPC server is unavailable.” I checked the DCOM and WMI permissions on the CAS server, and everything looks fine.

When I tried to use the parent domain account (used to install CAs) to install the primary server (in the child domain), the wizard didn’t stop. I tried connecting the remote WMI of the CAS server with my primary server computer/system account, but unfortunately, that is also NOT working.

Root Cause and Resolution: SCCM Primary Installation Error

I took a net mount and checked network traffic between the servers to find out where communication was getting blocked. While checking the network connectivity between the child domain computers and the Root domain DCs, we found that we could not communicate with the root DCs on any of the well-known ports required for domain communication.

We raised a Firewall request to allow communication between the child domain client subnet and the Root DCs on the following ports, which resolved the issue.

  • tcp 135,
  • tcp/udp – 389
  • tcp 3268
  • tcp/udp – 88
  • tcp/udp – 53
  • tcp 3268
  • tcp 445
  • dynamic rpc ports for NTDS. Netlogon

Restricting Active Directory replication traffic and client RPC traffic to a specific port – http://support.microsoft.com/kb/224196

How to configure a firewall for domains and trusts –http://support.microsoft.com/kb/179442

Resources

Free SCCM Training Part 1 | 17 Hours Of Latest Technical Content | ConfigMgr Lab HTMD Blog (anoopcnair.com)

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here – HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His primary focus is Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc. 

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion · 1 comment

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws

Key Takeaways 2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws! The June 2026 Windows 11 Patch Tuesday update brings several improvements to File Explorer. It adds support for additional archive formats, including UU, CPIO, XAR, and NuGet Packages (NUPKG). The update also preserves View and Sort preferences in […]

AC Anoop C Nair 10 min read
Intune

2026 May KB5089549 KB5087420 Windows 11 Patch | 0 Zero Day Vulnerabilities and 120 Flaws

Key Takeaways The Windows 11 May 2026 Patch KB5089549 KB5087420 Update brings important security fixes, performance improvements, and reliability enhancements across the operating system. The update introduces new features such as Xbox Mode for gaming, File Explorer improvements, enhanced input and sharing experiences, better taskbar and Windows Hello reliability, and additional enterprise management capabilities for […]

AC Anoop C Nair 8 min read
SCCM

ConfigMgr 2603 Introduces New Early Update Enrollment Process

Key Takeaways In this post we are discussing the ConfigMgr 2603 Introduces New Early Update Enrollment Process. Microsoft has officially released Configuration Manager version 2603 to the Early Update Ring, giving organizations an opportunity to test upcoming improvements before the global production rollout. The release is targeted at enterprises running ConfigMgr version 2409 or later […]

AC Anoop C Nair 3 min read