FAQShop.com : Can you Build Groups in SMS?

Can you Build Groups in SMS?

Can you build groups in SMS? We are on a very large domain that runs SMS on that domain. We are wanting to know if it is possible to build small groups and give admin control to only a few personnel to control only the computers in their group i.e. one workgroup manager has 30 computers and another has 20 but neither workgroup manager can controls the other's computers.

Contributed By: Hans Schefske [MVP SMS]
What you are trying to accomplish would be based on "Collections" in SMS not really groups, although they have similar functionally in that they can logically group workstations together to be managed.

Through appropriate high-level collections and appropriate assignment of collection rights, administrators can be restricted so that they cannot create new collections that include client computers that they have not been authorized to manage. The administrators are also not able to extend their own rights in order to try to manage those computers.

For the specifics on the security to se this up take a look at this paper from Microsoft on setting up Object Level Security Collections:

http://www.microsoft.com/smserver/techinfo/administration/20/using/collectsecurity.asp