Configuration Manager does not automatically create the System Management container in Active Directory Domain Services when the schema is extended. The container must be created one time for each domain that includes a Configuration Manager primary site server or secondary site server that publishes site information to Active Directory Domain Services.
 Note |
|---|
| You can grant the site servers computer account Full Control permission to the System container in Active Directory Domain Services, which results in the site server automatically creating the System Management container when site information is first published to Active Directory Domain Services. However, it is more secure to manually create the System Management container. |
Use ADSI Edit to create the System Management container in Active Directory Domain Services. For more information about how to install and use ADSI Edit, see ADSI Edit (adsiedit.msc) (http://go.microsoft.com/fwlink/?LinkId=183662).
To manually create the System Management container
-
Log on as an account that has the Create All Child Objects permission on the System container in Active Directory Domain Services.
-
Run ADSI Edit, and connect to the domain in which the site server resides.
-
Expand Domain <computer fully qualified domain name>, expand <distinguished name>, right-click CN=System, click New, and then click Object.
-
In the Create Object dialog box, select Container, and then click Next.
-
In the Value box, type System Management, and then click Next.
-
Click Finish.