SCCM 2016 – Create Service and User Accounts

Fro SCCM to be installed successfully, following accounts should be created whic are used for different purposes.

  • SCCM Service Accounts
    • svc_SCCM_SQLService 
      • SQL Server service account
      • Accoutn used for SQL Server service account on SQL Server
    • svc_SCCM_NetworkAccess
      • SCCM Network Access Account
      • Accoutn used for Network Access Account.
  • SCCM Domain Users Accounts
    • svc_SCCM_ClientPush
      • Domain user account for use SCCM client push install
      • Account use for Installing SCCM client on Client workstations
    • svc_SCCM_SQLReporting
      • Domain user account for use with reporting services User
      • Account used for SQL Reporting Services
    • svc_SCCM_DomainJoin
      • Domain account used to join machine to the domain during OSD
      • Minimal Rights to join a computer to Domain
  • SCCM Groups
    • svc_SCCM_Admins
      • Domain group containing all SCCM Admins Group
      • Require Local Admin rights for all SCCM Servers and Client Computers
    • svc_SCCM_SiteServers
      • Domain group containing all SCCM servers in the hierarchy Group
      • Requires Local Administrators right on all SCCM Servers


Now Add Site Server and Administrators account to Local Administrator accounts.

Add both SCCM Server computer account and the SCCM Administrator account to the local administrator group on the site server.

  • SCCM-Admins
  • SCCM-SiteServers

You can use Group Policy to do or add it manually on SCCM Site Servers and SQL Server.

Use following links to go to required blog

  1. SCCM Install guide
  2. SCCM-2016 Installation Pre-Requistes
    1. SCCM 2016 – Extend the Active Directory Schema
    2. SCCM 2016 – Create Service and User Accounts
    3. SCCM 2016 – Firewall configuration
    4. SCCM 2016 – Windows Server Roles and Features
    5. SCCM 2016 – Report Viewer
    6. SCCM 2016 – ADK for Windows
    7. SCCM 2016 – Install WSUS
  3. SCCM 2016 – Install System Center Configuration Manager 2016
  4. SCCM 2016 – Post Installation Tools

10 Replies to “SCCM 2016 – Create Service and User Accounts”

  1. Hi Sai

    To Install and work with SCCM Server effectively, you will need to give appropriate permission on SCCM Server. It depends on you how you add SCCM Administrators and SCCM site Server account to Local Administrators group on SCCM Server where you going to install SCCM.

    you will need to add these roles on all SSCCM site Servers, if you are planning to install more than one.

    SCCM-Admins – Domain group containing all SCCM Admins Group
    SCCM-SiteServers – Domain group containing all SCCM servers in the hierarchy Group

    SCCM Admins group members will have admin access, this is to simplify that you don’t have to add individual members.

    SCCM Site Server account needs to be Local Administrators group in order to install SCCM properly.

    For more information what each does for Cofniguration Manager, please visit –

    I hope it all makes sense.
    Please feel free to ask any question you may have.


  2. Hi harimkbatth,
    Is there any kind of documentation to support that(from technet). SCCM admins need to be local admins on the client machines.


  3. Thanks for the page. You are referring this to the SCCM installation. But not for managing the client. What kind of permissions do you require for using Right click tools


    1. Service accounts are setup as per normal users. Every company have different standards for the service accounts.

      These service accounts are used during the setup and if you follow my other blog pages for installation, you will be able to find this information.

      Best of Luck!


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s