Access is denied when using Configuration Manager Remote Control

The ConfigMgr Console Could not Connect to the ConfigMgr Site Database. Verigy that this computer has network connectivity to the SMS Provider computer and that your user account has Remote Activation permissions on both the ConfigMgr site server and SMS Provider computers. For More information see " How to Configure DCOM Permissions for Configuration Manager Console"

error while trying to access SCCM Server via remote Console.

Solution No 1:


The user account running the Configuration Manager console requires permissions to access the site database through the SMS Provider. Any administrators who will use a remote Configuration Manager console require Remote Activation DCOM permissions on both the site server computer and the SMS Provider computer.
The SMS Admins security group is used to grant access permissions to the SMS Provider. User accounts for administrators that will run the Configuration Manager console must be a member of the SMS Admins group and the following procedure must be performed to grant the necessary DCOM activation permissions to the SMS Admins group.

To grant Remote Activation permissions to the SMS Admins group

1. From the Start menu, click Run and type Dcomcnfg.exe.
2. In Component Services, click Console root, expand Component Services, expand Computers, and then click My Computer. On the Action menu, click Properties.
3. In the My Computer Properties dialog box, on the COM Security tab, in the Launch and Activation Permissions section, click Edit Limits.
4. In the Launch Permissions dialog box, click Add.
5. In the Select User, Computers, or Groups dialog box, in the Enter the object names to select (examples): box, type SMS Admins and click OK.
6. In the Permissions for SMS Admins section, select the check box to allow Remote Activation.
7. Click OK twice, and then close Computer Management.

For More Information see : http://technet.microsoft.com/en-us/library/bb633148.aspx

Solution No 2:

1)      Go to Start - > Run -> type “WMIMGMT.MSC”

2)      Right Click on “WMI Control ( Local )” and select Properties.

3)      Select Security Tab in WMI control properties Window.

4)      Find SMS Folder by expanding Root Folder.

5)      Select Site_<site Code> folder and Click on Security button.

6)      Add Local Group of SMS Admins and Give below Permission.

Execute Method

Provider Write

Enable Account

Remote Enable

===============================xxxxx=============================

Cheers!!!!!!!!

Gaurang Patel

free spam filter