Configuration Manager does not automatically create the System Management container in Active Directory Domain Services when the schema is extended. The container must be created one time for each domain that includes a Configuration Manager primary site server or secondary site server that publishes site information to Active Directory Domain Services
Use ADSI Edit to create the System Management container in Active Directory Domain Services.
To manually create the System Management container
- Log on as an account that has the Create All Child Objects permission on the System container in Active Directory Domain Services.
- Run ADSI Edit, and connect to the domain in which the site server resides.
- Expand Domain <computer fully qualified domain name>, expand <distinguished name>, right-click CN=System, click New, and then click Object.
- In the Create Object dialog box, select Container, and then click Next.
- In the Value box, type System Management, and then click Next.
- Click Finish to complete the procedure.
- Click Start, click Run, and then enter dsa.msc to open the Active Directory Users and Computers administrative tool.
- Click View, and then click Advanced Features.
- Expand the System container, right-click System Management, and then click Properties.
- In the System Management Properties dialog box, click the Security tab, and then click Add to add the site server computer account. Grant the account Full Control permissions.
- Click Advanced, select the site server’s computer account, and then click Edit.
- In the Apply to list, select This object and all descendant objects.
- Click OK and then close the Active Directory Users and Computers administrative tool to complete the procedure.