Use the following information to identify the Windows groups and the accounts that are used in System Center 2012 Configuration Manager, how they are used, and any requirements.

Windows Groups That Configuration Manager Creates and Uses

Configuration Manager automatically creates and in many cases, automatically maintains the following Windows groups:

When Configuration Manager creates a group on a computer that is a domain member, the group is a local security group. If the computer is a domain controller, the group is a domain local group that is shared among all domain controllers in the domain.



ConfigMgr Remote Control Users

SMS Admins





Accounts That Configuration Manager Uses

You can configure the following accounts for Configuration Manager:

Active Directory Group Discovery Account

Active Directory System Discovery Account

Active Directory User Discovery Account

Active Directory Forest Account

AMT Provisioning and Discovery Account

AMT Provisioning Removal Account

AMT Remote Admin Account

AMT User Accounts

Asset Intelligence Synchronization Point Proxy Server Account

Capture Operating System Image Account

Client Push Installation Account

Enrollment Point Connection Account

Exchange Server Connection Account

Exchange Server Connector Proxy Server Account

Endpoint Protection SMTP Server Connection Account

Health State Reference Publishing Account

Health State Reference Querying Account

Management Point Database Connection Account

MEBx Account

Multicast Connection Account

Network Access Account

Package Access Account

Reporting Services Point Account

Remote Tools Permitted Viewer Accounts

Site System Installation Account

SMTP Server Connection Account

Software Update Point Connection Account

Software Update Point Proxy Server Account

Source Site Account

Source Site Database Account

Task Sequence Editor Domain Joining Account

Task Sequence Editor Network Folder Connection Account

Task Sequence Run As Account

See Also