Collections from Central Site

[Lykan]

Hi,

 

we wrote a small tool to generate collection (1 collection for each department and its subdepartments). This structure is gernerated on the Central Site and flows down to the Primary Site. Is there a way that a Admin can move/add Computers to one of these Collection from the Primary Site?

[Trevor Sullivan]

Hello,

 

You'll have to delegate permissions to the SCCM objects (and SCCM provider) to the users that you want to be able to modify these collections. Since it sounds like you're tightly managing these department-based collections, you'll probably want to give them instance-level permissions (allows the to modify specific collection(s)), rather than class-level permissions (allows them to modify all collections).

 

Adding / removing individual machines is typically done with Direct Membership rules, rather than query-based rules. You could have a subselect query that allows you to exclude machines not in the subselect query. Automating the management of WMI Query Language (WQL) collection queries seems like it would be a pain though. You're probably better off sticking with direct memberships.

 

Let me ask you this, though ... what are you trying to accomplish by creating these collections though? Is there some reason you can't manage all the systems based on other criteria, rather than who's "responsible" for a particular department? There may be some opportunity here to optimize the organization of your team's administrative responsibilities.

Hope this helps.

 

Cheers,

Trevor Sullivan

http://trevorsullivan.net

http://twitter.com/pcgeek86

[Lykan]

Hi everyone,

 

I created a Collection(tree) e.g. "Software" on my Central Site. A few minutes after that I will see these Software Collection on my Primary Site but it is locked. So actually it is not possible to add a Computer to these Collection from my Primary Site. To fix this I created a instance security right in the Security Option (in the left column). With a right-click on "Software" -> Property’s -> Security I am able to see my user with all permissions under the Instance options. But I am not able to add or remove a Computer to these Collection. So how could I fix this?

 

I hope you understand my problem...

[Trevor Sullivan]

Objects created on a given site must be managed at that site. In this case, the collections you created at the central site must be managed at the central site.

 

You can create collections on the child primary site as well, but you will need to manage them from the child primary site.

 

Hope this helps.

 

Cheers,

Trevor Sullivan

http://trevorsullivan.net

http://twitter.com/pcgeek86