SCCM 2012 Migration Account Permissions for 2007 Hierarchy

Benoit LecoursSCCMLeave a Comment

Each time I’ve done an SCCM 2012 migration from 2007, someone asks “How do I give access to the migration account?”.

Looking at some blogs and technet you can read that the account requires :

  • Read & Execute Access to the SCCM 2007 Database
  • Full Access to the SMS Provider
  • Read access to all objects

Fine but how do I do that ? I decided to do a step-by-step guide :

  • In the CM07 console, navigate to Site Database > Security Rights > Users > Right Click Manage ConfigMgr Users and follow the wizard.

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

  • In the user name tab, add a new user your Source site Account

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

  • Give the computer account read permissions to the CM07 site class and on all instance (***If you plan to perform DP Sharing / Upgrade you need to add modify & delete).

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

  • The account will need read permission for each object type you want to migrate. (Collection, Package, Operating System, ect)

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

  • Give the Site  Migration Account a login into the CM07 database using SQL Management Studio on your SQL server

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

  • Right click the login you just have created
  • Select Properties
  • Select User Mapping
  • Select your CM07 Database
  • Grant permission on db_datareader and smsschm_users roles

SCCM 2012 Migration Account Permissions for 2007 Hierarchy

From this step you are ready to link your 2007 and 2012 hierarchy and initiate the gather process.

 

sccm 2012 migration account permissions

Leave a Reply

Your email address will not be published. Required fields are marked *