Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to install Forefront Endpoint Protection on my SCCM server using a new service account that I just created specifically for this purpose. I'll be using a separate reporting database so I'll need to grant the account rights there too I assume but I can handle the SQl end of it.

I've created the AD account and copied my existing admin permissions in the SCCM console. I also added the account to the local "SMS Admins" group. But I can access "Site Management" with my admin ID. The new service account can not. So I assume there's other differences that may impact my FEP install.

So how do you grant full admin rights in SCCM?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.