SMS Site Configuration?

[SMSWonder]

In our organization we have a small group of SMS administrators who manage everything with regards to SMS.

We are going to setup individuals collections to be managed by individual department network managers. These managers will need to be able to create packages, create advertisements, remote control and view workstation inventory. This can be done easily by making them all SMS Administrators. Other rights here can be assigned in a much more granular fashion than by just giving the SMS administrator rights.

These are the real issues. We want them to have all SMS administrative rights except the ability to manage distribtution points and advertise jobs to computers other than those in their own collection.

I found the following web site which may indeed solve this problem but I'm not sure if the rights to create packages also gives someone the rights to place SMS jobs on a distribution point.

http://www.myitforum.com/articles/1/view.asp?id=2192

That is my first question.

As far as the second issue with regards to collections, my understanding is that if I setup someone to manage a specific collection of users or computers that they would not be able to assign jobs to anyone else. Please correct me if I'm wrong.

Any help you can provide would be great!

 

[mharcourt]

Here's how we handle a similar situation. I hope this helps.
1.Create a collection
2.Under "Security Rights" branch in the SMS MCC setup security for local group
Class Instance Permission
.Collection All Instances(Class) Create
.Collection "Collection Name" Read,Modify
.Package All Instances(Class) Read, Distribute
.Advertisement All Instances(Class) Create
.Status Messages All Instances(Class) Read
For Remote Control:
.Collection "Collection Name" Read,Read Resource
Create a group in local groups on the SMS server
You will need to modify the security to match your situation.