Windows Local Security Groups ComparisonBetween SCCM ConfigMgr 2012 Vs 2007

Quick Post on security groups comparison !

List of Windows Local Security Group created during CM 2012 installation (some Groups are Optional).

ConfigMgr Remote Control Users
SMS Admins – Members have access to the SMS Provider.

SMS_SiteToSiteConnection_<SiteCode>  – ConfigMgr accounts or machine accounts used by other site servers in the hierarchy to connect to this site server.
SMS_SiteSystemToSiteServerConnection_Stat_<SiteCode> – ConfigMgr accounts or machine accounts used for connecting remote site systems to the site server to report status.
SMS_SiteSystemToSiteServerConnection_SMSProv_<SiteCode> – ConfigMgr accounts or machine accounts used for connecting remote SMS Providers to the site server.
SMS_SiteSystemToSiteServerConnection_MP_<SiteCode> – ConfigMgr accounts or machine accounts used for connecting remote Management Point to the site server

Windows local security groups being created as part of ConfigMgr 2007 site and client installations.

Primary Site

SMS Admins, SMS Reporting Users, SMS_SiteSystemToSiteServerConnection_, SMS_SiteToSiteConnection_and ConfigMgr Remote Control Users


Secondary site




More details – Technet Link


About Author 

Anoop is Microsoft MVP and Veeam Vanguard ! He is a Solution Architect on enterprise client management with more than 13 years of experience (calculation done on the year 2014) in IT. He is Blogger, Speaker and Local User Group Community leader. His main focus is on Device Management technologies like SCCM 2012,Current Branch, Intune. He writes about the technologies like SCCM, SCOM, Windows 10, Azure AD, Microsoft Intune, RMS, Hyper-V etc...

    Find more about me on:
  • googleplus
  • twitter
  • facebook
  • linkedin
  • youtube
Posted in: ConfigMgr (SCCM), SCCM

Leave a Comment and Contact Anoop