What rights for SCCM administrator?

This is a planning for new setup of MS SCCM 2012 working environment. We are decided to use only one domain user account to administrating the whole SCCM structure. The tasks include, fully administrative rights on the SCCM server (1 server), all site system roles, reporting, database, clients access for client agent installation, software updates, OSD, and any client-section SCCM activities.

We are decided to only assign one domain user account - SCCMAdmin. What are those administrative rights need to assign? If possible, we don't want to assign a domain admins rights, schema admins (may not used to extend schema once only). Can we have a whole administrative rights that this user should possess?

Thanks in advance.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Nagendra Pratap SinghDesktop Applications SpecialistCommented:
Local admin rights on the site server.
Schema extension is to be done once only/

Please see
Pedro GamaCitrix AdminCommented:

Your SCCMAdmin user account should be member of local administrator group of the client machines and SCCM Server.
This account should have permissions of Join Domain (delegate control in AD, select the user and give the permissions to join the computer to domain.)
Also SQL Server: Expand option Security > right-click Logins > select the user account from Active directory and select sysadmin role.

Hope it helps

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Nagendra Pratap SinghDesktop Applications SpecialistCommented:
Client machines Local Admin is not needed. It is risky.
MichaelBalackAuthor Commented:
I used a domain user with privileges as suggested by Pedro, and so far, SCCM administrative jobs are conducted without problem,
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.