mazen Posted February 25, 2009 Report post Posted February 25, 2009 Hi, I’m facing problem that all the clients and servers discovered and assigned to the ConfigMgr but only the ConfigMgr server approved the others not approved I’ve checked error log file I got below error: Systems Management Server cannot update the already existing object "SMS-Site-001" in Active Directory. Possible cause: This site's SMS Service account or the site server's machine account may not have full control rights for the "System Management" container in Active Directory Solution: Give the site's SMS Service account full control rights to the "System Management" container, and all child objects in Active Directory. Possible cause: The Active Directory object "SMS-Site-001" has been moved to a location outside of the "System Management" container, or has been lost. Solution: Delete the object from its current location, and let SMS create a new object. Possible cause: The Active Directory schema has not been extended with the correct SMS Active Directory classes and attributes. Solution: Turn off Active Directory publishing for each site in the forest, until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the SMS CD. I checked the SMS Service account and the site server's machine account have full control rights for the "System Management" container in Active Directory and SMS Service account full control rights to the "System Management" container, and all child objects in Active Directory. The Active Directory schema has been extended. any advice to solve this problem... regards' mazen Quote Share this post Link to post Share on other sites More sharing options...
anyweb Posted February 25, 2009 Report post Posted February 25, 2009 check two things, 1. that your SCCM boundary is correctly set and 2. that you have properly setup the System Management container in AD verify both please cheers anyweb Quote Share this post Link to post Share on other sites More sharing options...
mazen Posted February 25, 2009 Report post Posted February 25, 2009 Thanks anyweb, I’ve check boundaries it's the default first site name and in the system management See snapshoot below: Quote Share this post Link to post Share on other sites More sharing options...
anyweb Posted February 25, 2009 Report post Posted February 25, 2009 anything inside that System Management container ? Quote Share this post Link to post Share on other sites More sharing options...
wmmayms Posted February 25, 2009 Report post Posted February 25, 2009 Has it worked fine before? Clean install or upgrade? Are you able to ping the dc from the sccm server? Is there any information in the \\<SCCMSERVER>\<SMS_INSTALL_DIR>\logs\sitecomp.log? Quote Share this post Link to post Share on other sites More sharing options...
mazen Posted February 26, 2009 Report post Posted February 26, 2009 anything inside that System Management container ? yes, there's: 1- SMS-MP-001MECCM Type mSSMSManagement Point 2- SMS-SLP-001MECCM Type mSSMSServerLocatorPoint 3- SMS-Site-001 regards' mazen Quote Share this post Link to post Share on other sites More sharing options...
mazen Posted February 26, 2009 Report post Posted February 26, 2009 Has it worked fine before?Clean install or upgrade? Are you able to ping the dc from the sccm server? Is there any information in the \\<SCCMSERVER>\<SMS_INSTALL_DIR>\logs\sitecomp.log? it's clean installation yesy i can ping the DC and any clients On this setup no it's not working but the (ConfigMgrServer showing Approved) thx. mazen Quote Share this post Link to post Share on other sites More sharing options...
mazen Posted March 1, 2009 Report post Posted March 1, 2009 Hi, Problem solved the firewall in the clients PC's was on; I turned off the firewall it works fine... Regards’ Mazen Quote Share this post Link to post Share on other sites More sharing options...
