Fix SCCM Script Approve Deny Option is Disabled

This post covers the fix for the issue where the SCCM script approve deny option is disabled or greyed out. The steps are applicable to Configuration Manager current branch builds 2006 and above.

Many admins prefer to deploy PowerShell scripts via the SCCM console using Run Scripts feature. Configuration Manager has an integrated ability to run PowerShell scripts. However sometimes a small missing prerequisite will not allow you to complete your work. The same is the case when you create a script in SCCM and you notice that the approve deny button is disabled or greyed out.

No matter you are logged in with an account that is member of SCCM full administrator security role, you may still have no access to approve a new script. Let me show you the issue where you see SCCM script approve deny button is disabled or greyed out.

Table of Contents

Script Approve Deny Option is Disabled

When you create a script and try to approve the script in SCCM, the approve deny button is greyed out.

In the SCCM console, navigate to Software Library\Overview\Scripts.
When you right-click the PowerShell script, the Approve/Deny option is disabled or greyed out.

SCCM Script Approve Deny Option is Disabled

Why the SCCM Script Approve Deny Option is Greyed Out ?

The reason why the SCCM script Approve Deny option is greyed out is because by default, users can’t approve a script they’ve authored. Microsoft suggests that you separate the roles between the person that authors the script and the person that approves the script. To fix the approve deny option is greyed out issue, you must turn off Script Authors require additional script approver option.

Why the Script Approve Deny Option is Greyed Out

Fix SCCM Script Approve Deny Option is Disabled

Follow the below steps to fix SCCM Script Approve Deny option is disabled issue.

In the SCCM Console, navigate to Administration\Overview\Site Configuration\Sites.
Select the SCCM primary site server and click Hierarchy Settings.
On General tab of hierarchy settings properties, uncheck the option – Script Authors require additional script approver.
Click Apply and OK.

After you turn off Script Authors require additional script approver setting, you should be able to approve or deny a script in SCCM. In the Configuration Manager console navigate to Software Library\Overview\Scripts. Right click a script and now the Approve/Deny option is enabled.