After you have created the System Management container in Active Directory Domain Services, you must grant the site server's computer account the permissions that are required to publish site information to the container.

Important
The primary site server computer account must be granted Full Control permissions to the System Management container and all its child objects. If you have secondary sites, the secondary site server computer account must also be granted Full Control permissions to the System Management container and all its child objects.

You can grant the necessary permissions by using the Active Directory Users and Computers administrative tool or the Active Directory Service Interfaces Editor (ADSI Edit). For more information about how to install and use ADSI Edit, see ADSI Edit (adsiedit.msc) (http://go.microsoft.com/fwlink/?LinkId=183662).

To apply permissions to the System Management container by using the Active Directory Users and Computers administrative tool

  1. Click Start, click Run, and then enter dsa.msc to open the Active Directory Users and Computers administrative tool.

  2. Click View, and then click Advanced Features.

  3. Expand the System container.

  4. Right-click System Management, and then click Properties.

  5. In the System Management Properties dialog box, click the Security tab.

  6. Click Add to add the site server computer account and grant the account Full Control permissions.

  7. Click Advanced, select the site server’s computer account, and then click Edit.

  8. In the Apply onto list, select This object and all child objects.

  9. Click OK.

To apply permissions to the System Management container by using the ADSI Edit console

  1. Click Start, click Run, and enter adsiedit.msc to open the ADSIEdit console.

  2. If necessary, connect to the site server's domain.

  3. In the console pane, expand the site server's domain, expand DC=<server distinguished name>, and then expand CN=System. Right-click CN=System Management, and then click Properties.

  4. In the CN=System Management Properties dialog box, click the Security tab.

  5. Click Add to add the site server computer account and grant the account Full Control permissions.

  6. Click Advanced, select the site server’s computer account, and then click Edit.

  7. In the Apply onto list, select This object and all child objects.

  8. Click OK.

See Also