Finishing AD Schema Extension. We need grant full control for SCCM server “Active Directory Computer Object“.

1. In Part 1 we create “CN=System Management” object;

2. Right Mouse Button click on “CN=System Management” and click “Properties“;

3. Select “Security“;

4. Click “Add” button;

5. In the “Object Types” add “Computers“, enter your SCCM server name and click “OK” button;

6. Set check mark “Full control” (like on screenshot) and click “OK” button;

We did it! Go to Part 3.