zettelkasten/07_OU sccm und PKI unter rights.md at c4fb9fc5314738413b41adf735801a935eceb4e9 - zettelkasten - Ralf's Git

ralfk/zettelkasten

Ralf Koop c4fb9fc531 Initial commit

2023-08-17 19:32:37 +02:00

5.5 KiB

Raw Blame History

OU sccm und PKI unter rights

Dienstag, 23. Januar 2018

14:17

$Computergenerierter Alternativtext: ZSCCM POI- ALL Full Administrator ZSCCM POI- ALL Read Only Analyst ZSCCM POI- BLUE-CTX Application Administrator ZSCCM POI -BLUE-CTX Read only Analyst ZSCCM POI- BLUE-CTX Virtual Desktop Administrator ZSCCM POI- BLUE-SRV Application Administrator ZSCCM POI- BLUE-SRV Operations Administrator ZSCCM POI -BLUE-SRV Read only Analyst ZSCCM POI- BLUE-SRV Software Update Manager ZSCCM POI- Default Automation ZSCCM POI- Default Scripting Host ZSCCM POI- RED-SRV Application Administrator ZSCCM POI- RED-SRV Compliance Settings Manager ZSCCM POI- RED-SRV Full Administrator ZSCCM POI -RED-SRV Read only Analyst ZSCCM POI- RED-SRV Service Administration ZSCCM POI- RED-SRV Software Update Manager Type Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group - Domain Local Domain Lacal Domain Lacal Domain Local Domain Lacal Domain Local Domain Local Domain Lacal Domain Local Domain Lacal Domain Lacal Domain Local Domain Lacal Domain Local Domain Local Domain Lacal Domain Local Description Grants all permissions in Configuration Manager. The administrative user Who first creates a new Configuration Manager installation is associated With this securit,\' Grants permissions to View all Configuration Manager objects BLUE ZONE Grants permissions to perform bath the Application Deployment Manager role and the Application Author role. Administrative users Who are associata BLUE ZONE Grants permissions to View all Configuration Manager objects. BLUE ZONE Grants Permission to create an edit Task Sequences. Created for Virtual Desktop Services in order to manage Golden Master Devices BLUE ZONE Grants permissions to perform bath the Application Deployment Manager role and the Application Author role. Administrative users Who are associata BLUE ZONE Grants permissions for all actions in Configuration Manager except for the permissions that are required to manage security, which includes managing BLUE ZONE Grants permissions to View all Configuration Manager objects. BLUE ZONE Grants permissions to define and deploy software updates. Administrative users Who are associated With this role can manage software update groups, Grants permission to modify Computer Objects , used by System Automation Grants permissions to create and modify Collections RED ZONE Grants permissions to perform bath the Application Deployment Manager role and the Application Author role. Administrative users Who are associated RED ZONE Grants permissions to define and monitor Compliance Settings. Administrative users associated With this role can create, modify, and delete configuratic RED ZONE Grants all permissions in Configuration Manager. The administrative user Who first creates a new Configuration Manager installation is associated With th RED ZONE Grants permissions to View all Configuration Manager objects. RED ZONE Grants Permission to create 80undaries and Task Sequence Packages RED ZONE Grants permissions to define and deploy software updates. Administrative users Who are associated With this role can manage software update groups, d$ {width="15.5625in" height="3.8854166666666665in"}

Erfasster Bildschirmausschnitt: 23.01.2018 14:17

PKI unter rights

$Computergenerierter Alternativtext: SVC FULL SVC MANAGE SVC READ PKI TPL-SVC Code Signing_ENROLL PKI TPL-SVC Code Signing_WRITE TPL-SVC Key Recovery Agent ENROLL TPL-SVC Key Recovery Agent WRITE PKI TPL-SVC ocsp Response Signing_ENROLL PKI TPL-SVC ocsp Response Signing_WRITE PKI TPL-SVC SCCM Distribution Point Authentication ENRO\... PKI TPL-SVC SCCM Distribution Point Authentication WRITE PKI TPL-SVC SCCM Workstation Authentication Boot Image\... PKI TPL-SVC SCCM Workstation Authentication Boot Image\... TPL-SVC ENROLL TPL-SVC WRITE PKI TPL-SVC Workstation Authentication ENROLL PKI TPL-SVC Workstation Authentication WRITE Type Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group - Domain Local Domain Lacal Domain Lacal Domain Local Domain Lacal Domain Local Domain Lacal Domain Lacal Domain Local Domain Lacal Domain Lacal Domain Local Domain Lacal Domain Local Domain Lacal Domain Lacal Domain Local Description Manage CA and templates Issue and manage certificates Audit read access to the certificate authorit,\' Enrollment rights for CA Template SVC Code Signing Write rights for CA Template SVC Code Signing Enrollment rights for CA Template SVC Key Recovery Agent Write rights for CA Template SVC Key Recovery Agent Enrollment rights for CA Template SVC OCSP Response Signing Write rights for CA Template SVC OCSP Response Signing Enrollment rights for CA Template SCCM Distribution Point Authentication Write rights for CA Template SCCM Distribution Point Authentication Enrollment rights for CA Template SCCM Workstation Authentication Boot Image Write rights for CA Template SCCM Workstation Authentication Boot Image Enrollment rights for CA Template SVC Webserver Write rights for CA Template SVC Webserver Enrollment rights for CA Template Workstation Authentication Write rights for CA Template Workstation Authentication$ {width="11.5625in" height="3.78125in"}

Erfasster Bildschirmausschnitt: 23.01.2018 14:18