Description = "User \"Domain\\SCCMAdmin2\" does not have permissions to grant rights on this instance."; ErrorCode = 1112017920;
The domain user account which had full Security rights in SCCM console, if got disabled & your new domain account is not having equivalent full rights. Then how will you access SCCM objects or delgate access to other user accounts? Security rights provide the capability to define and refine the level of access that users have when working with configuration manager objects. This gives you the ability to delegate specific tasks to specific groups of users. In my environment SCCM 2007 was installed by domain admin account "domain\SCCMAdmin1" on Primary site server. Domain\SCCMAdmin1 account has full access on all instances. As employee left the organization, this user account got disabled. Then we created another domain admin account "domain\SCCMAdmin2", Now if anyone will try to copy permissions of "domain\SCCMAdmin1" to "domain\SCCMAdmin2", definately it will give following error Errors ConfigMgr Error Object: instance of SMS_Extende