Canberra, Australia
To be provided
To be provided

SCCM 2016 – Create Service and User Accounts

Harmik Batth Tech Blog

SCCM 2016 – Create Service and User Accounts

Fro SCCM to be installed successfully, the following accounts should be created which are used for different purposes.

  • SCCM Service Accounts
    • svc_SCCM_SQLService 
      • SQL Server service account
      • The account used for SQL Server service account on SQL Server
    • svc_SCCM_NetworkAccess
      • SCCM Network Access Account
      • The account used for the Network Access Account.
  • SCCM Domain Users Accounts
    • svc_SCCM_ClientPush
      • Domain user account for use SCCM client push install
      • The account used for Installing SCCM client on Client workstations
    • svc_SCCM_SQLReporting
      • Domain user account for use with reporting services User
      • The account used for SQL Reporting Services
    • svc_SCCM_DomainJoin
      • Domain account used to join the machine to the domain during OSD
      • Minimal Rights to join a computer to Domain
  • SCCM Groups
    • svc_SCCM_Admins
      • Domain group containing all SCCM Admins Group
      • Require Local Admin rights for all SCCM Servers and Client Computers
    • svc_SCCM_SiteServers
      • Domain group containing all SCCM servers in the hierarchy Group
      • Requires Local Administrators right on all SCCM Servers

Now Add Site Server and Administrators account to Local Administrator accounts.

Add both SCCM Server computer account and the SCCM Administrator account to the local administrator group on the site server.

  • SCCM-Admins
  • SCCM-SiteServers

You can use Group Policy to do or add it manually on SCCM Site Servers and SQL Server.

Use the following links to go to required blog

  1. SCCM Install guide
  2. SCCM-2016 Installation Pre-Requisites
    1. SCCM 2016 – Extend the Active Directory Schema
    2. SCCM 2016 – Create Service and User Accounts
    3. SCCM 2016 – Firewall configuration
    4. SCCM 2016 – Windows Server Roles and Features
    5. SCCM 2016 – Report Viewer
    6. SCCM 2016 – ADK for Windows
    7. SCCM 2016 – Install WSUS
  3. SCCM 2016 – Install System Center Configuration Manager 2016
  4. SCCM 2016 – Post Installation Tools


Comments: 14

  1. harmikbatth says:

    Hi Sai

    To Install and work with SCCM Server effectively, you will need to give appropriate permission on SCCM Server. It depends on you how you add SCCM Administrators and SCCM site Server account to Local Administrators group on SCCM Server where you going to install SCCM.

    you will need to add these roles on all SSCCM site Servers, if you are planning to install more than one.

    SCCM-Admins – Domain group containing all SCCM Admins Group
    SCCM-SiteServers – Domain group containing all SCCM servers in the hierarchy Group

    SCCM Admins group members will have admin access, this is to simplify that you don’t have to add individual members.

    SCCM Site Server account needs to be Local Administrators group in order to install SCCM properly.

    For more information what each does for Cofniguration Manager, please visit –

    I hope it all makes sense.
    Please feel free to ask any question you may have.

  2. Sid. says:

    Hi harimkbatth,
    Is there any kind of documentation to support that(from technet). SCCM admins need to be local admins on the client machines.

  3. Sid says:

    Thanks for the page. You are referring this to the SCCM installation. But not for managing the client. What kind of permissions do you require for using Right click tools

  4. Werner says:

    can you please add some svreenshoys of how and where all these accounts are used and setup?

    • harmikbatth says:

      Service accounts are setup as per normal users. Every company have different standards for the service accounts.

      These service accounts are used during the setup and if you follow my other blog pages for installation, you will be able to find this information.

      Best of Luck!

  5. Marino Tarulli says:

    Hi, How about Powershell script to create service and user accounts?

  6. camera hải nam ở đâu says:

    Thanks for finally talking about >SCCM 2016 – Create Service
    and User Accounts | <Loved it!

  7. Satish Jha says:

    Hi nice post. I would also like to point this article for min perms for client push install account –

  8. jrng says:

    does svc_SCCM_SQLService need to logon locally? because our security department wants to deny logon locally for this account.

    • harmikbatth says:

      No, svc_SCCM_SQLService needs to be a domain member and used while installing or configuring SCCM DB. SCCM installation wizard will automatically configure it with correct permissions.

      SCCM SQL Service account does not need to have log on locally permissions

Add your comment