In this post I thought I would provide some information around the requirements for some of the accounts System Center 2012 requires when installing and some of the immediate accounts for the base configuration.
Have already drawn up a design for your System Center 2012 Infrastructure with considerations to components, layout, performance sizing etc… You already have all your base VM’s and SQL installs done. All Pre-reqs are installed. You know how to install the System Center 2012 Components.
Account Examples Purpose Permissions TrustLab\SCCMNA SCCM Network Access Account Requires “Access this computer from the network” right on the Distribution Points. Minimum rights to access content on the Distribution Points. TrustLab\DomJoin Domain Joining Account used within task sequences to join the OS to the domain. Do not grant the account interactive logon rights. Use Delegate Control in AD: Computer Objects - Reset Password Validated write to DNS host name Validated write to service principal name Read/Write Account Restrictions This object and all descendant objects - Create/Delete Computer Objects TrustLab\SCCMCP SCCM Client Push Account Do not grant the account interactive logon rights. Must be local admin on the target devices you push clients to. TrustLab\SCCMRA SCCM Reporting Service Point Account Account is granted rights if chosen as a new account during Reporting Point creation from the console.
Service Manager Connector Accounts
