SCCM console connection issue

Question

SCCM console cannot connect to the primary site on a remote server, from smsAdminUI.log, the error is Insufficient privilege to connect, but I have full administrator permission, what else could be the reason?

Answer 1

Hi, @SliperPoon

Thank you for posting in Microsoft Q&A forum.

Apart from the SCCM permission, a remote SCCM console also require the remote activation DCOM permissions on the site server computer and each computer that hosts an instance of the SMS provider.

The steps to verify the DCOM permission on the SCCM server:

1. From a Run command, type Dcomcnfg
2. Go to My Computer and Properties
3. Ensure that Enable Distributed COM on this computer is checked in the Default properties pane
4. In the COM Security tab, click Edit Limit under the Launch and Activation Permissions section
5. In the Launch and Activation Permissions window, ensure that the SMS Admins group is listed
6. In the Permissions for SMS Admins section, ensure that the Allow column for the Remote Activation row is checked

If the DCOM permission is fine, we may try to reinstall the MSDTC service on SCCM server:

1. Run MSDTC –uninstall
2. Run MSDTC –Install
3. Reboot

Another possible reason is related to the KB5004442, for more details, please refer to below article:

https://www.systemcenterdudes.com/sccm-console-access-denied-problem/

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.