SCCM Newly Installed DP is Not Visible in Console RBAC Gotcha. Recently, I’ve seen another gotcha of RBA. CM 12 administrator has been assigned to the “Infrastructure Administrator” security role along with the correct security scope for his location.
So he has all the necessary rights to install Remote Site Systems and Site Servers under his primary server. He is successfully able to create a Remote Distribution Point that is attached to the primary site.
SCCM Newly Installed DP is Not Visible in Console RBAC Gotcha
However, after successful DP installation, he is NOT able to view/see that remote distribution point (DP) in SCCM 2012 Console. Now what?
Why is he not able to view the remote distribution point which he installed? OK, it’s because of the Security Scope. After the installation, CM 2012 will automatically assign Site Systems security scope as “Default”
Do you know where to set the “Security Scopes” for Distribution Points? It’s NOT under Administration –> Site Configuration –> Server and Site System Roles! However, it’s there under Administration –> Distribution Points.
So how to change the security scope? Request the team who handles the CAS server or the Full Administrator of the site to change the Security Scope. To remove the default security scope for the DP and add the required security Scope for that country.
Once this is done, the DP will be visible to CM 12 admin who has “Infrastructure Administrator” access.
Resources
Author
Anoop is Microsoft MVP! He is a Solution Architect in enterprise client management with more than 20 years of experience (calculation done in 2021) in IT. He is a blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. E writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc…