Exchange 2007 MP Question
Ok, I answered my own question on the last one so that should not count against me :) I have another: CheckRunningLocalSystem : ExecuteDiagnostic.js script not running as local system Now the EXCHANGE 2007 LOCAL SYSTEM ACCOUNT that I setup is a member of the local administrators group. Does that not grant local system privileges?? Hope someone will answer this one for me!!! :) Kevin
January 28th, 2011 3:09pm

Technically, no. The meta-account "LocalSystem" is a sandboxed entity - if you do make an account that has localsystem behavior, it will not be successful at doing things that have to execute off-box. Any remote access, remote powershell, web URL calls, .NET calls etc that traverse the network are blocked by the localsystem association.Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 5:28pm

Technically, no. The meta-account "LocalSystem" is a sandboxed entity - if you do make an account that has localsystem behavior, it will not be successful at doing things that have to execute off-box. Any remote access, remote powershell, web URL calls, .NET calls etc that traverse the network are blocked by the localsystem association.Microsoft Corporation
January 28th, 2011 5:28pm

So how do I do that? Do I point the EXCHANGE 2007 LOCAL SYSTEM profile to MACHINENAME\LOCALSYSTEM instead of DOMAIN\USERACCT?? Also, if I am on the right path....would I have to use .\LocalSystem since this account is used on many machines??? Kevin
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 9:47am

You may want to check the guide for the specific steps. You need to use a domain account that is exchange admin and a member of local administrator group, I believe (but do check the guide)Microsoft Corporation
January 31st, 2011 11:43am

Hi, I think you can have a check referring to the following document: Exchange Server 2007 Management Pack for Operations Manager 2007 R2 Guide - Security Considerations http://technet.microsoft.com/en-us/library/dd772571.aspx Hope this helps. Thanks. Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 1:42am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics