SCCM Console Permission Issue

Normally setting up SCCM permissions is pretty straight-forward. However, a couple weeks ago we applied a couple server patches and rebooted our central site server. By Monday, our level 2 help desk users stopped having access to the SCCM console. First we tried checking to see what changed over the weekend. Did someone modify an AD group?


Here was the main Microsoft article that we were focused on. Unfortunately we didn't see the helpful tasks at the bottom until today.

http://technet.microsoft.com/en-us/library/bb932213.aspx

We got trapped looking at DCOM permissions shown under this article.

http://technet.microsoft.com/en-us/library/bb633148.aspx

When we finally looked at WMI permissions by using this test.

http://technet.microsoft.com/en-us/library/bb932190.aspx

After finding a problem connecting to the WMI namespace, we then used this article to recreate the correct permissions for the local "SMS Admins" group.

http://technet.microsoft.com/en-us/library/bb932151.aspx