SCCM Client installation account
I have to implement SCCM Client push installation in my production environment, But one of the prerequisite of the Client push installation is to have a common user account/SMS Site Serverâ€™s machine account to be added on all the workstation machines.
In our Production environment we donâ€™t have any common account added on all the workstations that we can use for Client Push installation. So I left with one option that is to use Domain Admin account.
Now I have to create a business case for AD team in order to get the domain admin privileges.And I need to know the answer to the following question for the same
1. What would be the consequences of using Domain Admin Account for Push installation?
2. If AD Team creates a Domain Admin User Account for SMS and add the same in SCCM Client push installation properties. Providing they will keep the password of that account with themselves. Does this create any security threat?
3. What role does Client push installation account play in SCCM Client installation?
4. Once the Client got installed on all the machines will that domain Admin/Client push installation account will be used in anyways.