Hi Experts,

Do we need to have  Allow log on locally permission (SetInteractiveLogonRight) for any of the SCOM accounts in 2012 R2?

If yes why?

Regards,

Prajul Nambiar

Yes, The default action account must have the following minimum privileges:
Member of the local Users group
Member of the local Performance Monitor Users group
Allow log-on-locally permission (SetInteractiveLogonRight)

because SCOM provide you with monitoring for agents which need to access event viewer of this server to show you any issue that happened.

• Monitoring and collecting Windows event log data.
• Monitoring and collecting Windows performance counter data.
• Monitoring and collecting Windows Management Instrumentation (WMI) data.
• Running actions such as scripts or batches.

Also you can refer below link

https://technet.microsoft.com/en-us/library/hh212808.aspx

Hi,

You may check Action Accounts part in the link below:

Account Information for Operations Manager

https://technet.microsoft.com/en-us/library/hh457003.aspx

Regards,

Yan Li