By default, an SMS Administrator console is installed on the local primary site server when you install Systems Management Server (SMS) version 2.0. However, you can install an SMS Administrator console on other computers within your SMS system. Installing an SMS console on a remote computer (that is, a computer other than the primary site server) is a convenient way to limit access to the site server and to distribute the administrative tasks of your SMS site among several network administrators as part of an overall network security strategy.
Another way to distribute administrative tasks, and at the same time limit access to SMS functionality, is to create customized SMS consoles. A customized SMS console is a saved view (.msc file) of the SMS snap-in that typically displays a subset of the items in the full SMS console tree. In this way, the console displays only those console tree items necessary for an administrator to perform a given task.
An example of a customized SMS console is a console for help desk administrators that displays only the SMS Collection and System Status console tree items. An administrator can use the customized console to perform typical help desk tasks, such as remotely controlling clients and checking the status of advertisements.
The inclusion of any console tree item in a customized console does not mean all administrators using the console can use or even view that item. Whether an administrator can view a particular console tree item and what the administrator is permitted to do with the item depends on the security permissions granted to that administrator. So one customized console can be used by administrators with varying SMS security permissions, and each of them will see and be able to use only those SMS objects to which they have been granted permission.
This chapter explains how to install remote SMS Administrator consoles and describes the related security issues. It also provides information on how to create customized SMS consoles. This chapter is organized into the following sections:
To gain the most benefit from this chapter, you should have a thorough understanding of the SMS Administrator console, as described in the following chapter of the SMS 2.0 Administrator’s Guide:
Chapter 7, “Using the SMS Administrator Console”
You should also review the following chapters in the same guide:
Chapter 12, “Distributing Software”
Chapter 15, “Supporting Remote Users and Clients”