In my last blog post, I showed you how to apply permissions to an already existing System Management container created by ConfigMgr. However, what if you wanted to create the System Management container yourself? Below are steps that you can follow in order to manually create a System Management container for use by any version of System Center Configuration Manager.
1. Logon to your Domain Controller (DC) using an account that is within the Schema Admins group.
2. Launch Active Directory Users and Computers.
3. Notice that there are only 6 containers under ad.www.enhansoft.com and that the System container is not listed.
4. Click the View menu item and select Advanced Features.
5. Notice that there are 11 containers under ad.www.enhansoft.com and that the System container is now listed.
6. From the desktop, launch ADSI Edit.
7. Right-click ADSI Edit and click Connect to…
8. Accept the defaults, and click OK.
9. Expand the tree until the System container is displayed.
10. Right-click and point to New, and then click Object…
11. Select container and click Next.
12. Enter System Management and then click Next.
13. Click Finish.
14. Back in Active Directory Users and Computers, refresh the System container. Notice that the System Management container is listed, and also notice that the containers are NOT listed in alphabetical order.
Once the System Management container exists you can then apply permissions to it as I defined in my previous blog post. If you have any questions about how to manually create a System Management container, please contact me @Garth MJ, or you can leave a note in the comment section below.