Action Account least privileges Windows Server 2008/2008 R2
As per SCOM 2007 R2 design guide
The least privileges required for the Action Account on Windows Server 2003, Windows Server 2003 R2, and the Windows Vista operating system are:
• Member of the local Users group
• Member of the local Performance Monitor Users group
• Allow log-on-locally permission (SetInteractiveLogonRight)
Is this applicable to Windows 7 and Windows server 2008/2008R2?
Regards
-Mnaish
May 20th, 2011 4:28am
as far as i know that applies there as well.
However normally I use the LocalSystem as the default action account who already has enough rights. Except for mp's where specific runas profiles are defined and more rights are needed on application level.Bob Cornelissen - BICTT (My BICTT Blog)
Free Windows Admin Tool Kit Click here and download it now
May 20th, 2011 7:22am
Thanks Bob. I will try to configure using least privilidges on Windows Server 2008 R2 and see how to goes.
May 24th, 2011 4:29am