This computer runs the MDT infrastructure and Configuration Manager. These computers can be either physical computers or virtual machines (VMs) with the system resources designated. To complete this guide, set up the computers listed in Table 1. Also, the Specialized Security – Limited Functionality (SSLF) security profile removes the Create Global Object right and should not be applied to computers deployed using MDT. This right is normally available to accounts with Administrator-level permissions (unless explicitly removed).
The Task Sequencer used in MDT deployments requires that the Create Global Object right be assigned to credentials used to access and run the Deployment Workbench and the deployment process.