Description = "User \"Domain\\SCCMAdmin2\" does not have permissions to grant rights on this instance."; ErrorCode = 1112017920;

The domain user account which had full Security rights in SCCM console, if got disabled & your new domain account is not having equivalent full rights. Then how will you access SCCM objects or delgate access to other user accounts?

Security rights provide the capability to define and refine the level of access that users have when working with configuration manager objects. This gives you the ability to delegate specific tasks to specific groups of users.
In my environment
SCCM 2007 was installed by domain admin account "domain\SCCMAdmin1" on Primary site server. Domain\SCCMAdmin1 account has full access on all instances. As employee left the organization, this user account got disabled.
Then we created another domain admin account "domain\SCCMAdmin2",
Now if anyone will try to copy permissions of "domain\SCCMAdmin1" to "domain\SCCMAdmin2", definately it will give following error

Errors
ConfigMgr Error Object:
instance of SMS_ExtendedStatus
{
Description = "User \"Domain\\SCCMAdmin2\" does not have permissions to grant rights on this instance.";
ErrorCode = 1112017920;
File = "c:\\qfe\\nts_sms_fre\\sms\\siteserver\\sdk_provider\\smsprov\\sspsecurity.cpp";
Line = 936;
ObjectInfo = "256";
Operation = "PutInstance";
ParameterInfo = "";
ProviderName = "ExtnProv";
StatusCode = 2147749889;
};

The solution for this is

Go to the command prompt
Type "at 11:30 /interactive cmd.exe" (where 11:30 is 2 minutes from the current time)
Wait for a second command prompt to open
In the second command prompt type mmc.exe
add the configuration manager admin snap-in
Go to security rights and grant that user account the permissions required

Comments

Post a Comment

Popular posts from this blog

Hardware Inventory Action missing

Other than the obvious, if on your site server or client the Hardware Inventory action is missing, most of the time the issue is may be a misconfigured hardware inventory MOF file, configuration.mof, on your primary site. In this case, the Hardware Inventory Action was missing on some of the Primary site Server as shown in the following figure. Also looked in %systemroot%\system32\wbem\logs --> mofcomp.log file, it was showing  following error Error Number: 0x80041026, Facility: WMI In this case the MOF file it was compiling was correct, but somehow from the log file it was showing that there is some issue with WMI. As per the above error, while compiling the mof file, the a ttempt was made to delete or modify a class that has instances in WMI . But anyway it was not happening. Further we compared the sms_def.mof file objects with the WMI & found that one additional customized entry in WMI. On further investigation we found that earlier, some day’s back one
Read more

SMS Advanced Client Push Installation process

The article describes the SMS Advanced Client Push Installation process Pre-installation stage  1. During the pre-installation stage, When the Client Push Installation wizard starts, Client Configuration Request (CCR) is created for each targeted computer. Each CCR is placed into the Inboxes\CCR.box folder on the site server. Client Configuration Manager (CCM) selects a CCR from the Inboxes\CCR.box folder on the site server (CCM tasks are logged in ccm.log on the site server) The CCR file contains the client computer name and additional information.  2. The SMS Client Configuration Manager connects to the ADMIN$ share on the client. This is based on the information in the CCR file.  3. The Client Configuration Manager attempts to connect to the computer using the Client Push Installation Account (if the connection was not successful it attempts to connect to the computer by using the site server computer account). The Client Configuration Manager connects to the client registry an
Read more