Configuration Manager Connector User account

Hello All,
Is there any problem if I create configuration Manager connector with one user that has sysadmin permitions in SCCM database?
Regards,

Hi,
The user account that you specify as the Run As account must be a member of the smsdbrole_extract and the db_datareader groups for the Configuration Manager site database. If user is sysadmin that's ok.
Remy BOVI

Similar Messages

  • HT1420 Possibility to use 1 Computer - configured with 2 user accounts - each account uses a different Apple-ID for iTunes authorization ?

    I wonder if it is possible to use 1 Computer (Macbook Pro)
    - configured with 2 (ore even more) user accounts (i.e. me + my kid)
    - and each user account has a different Apple-ID (account) for iTunes purchases & iTunes authorization ?
    I woud think that is fine in terms of the underlying license agreement refereing to re-download purchased movies, shows, apps, etc.
    However, it seams that there is that miraculous 90 days restriction, which I don't understand, and which allows me only to "authorise" the Computer under one or the other account. The switch is unfortunatelly only possible every 90 days ?!?
    Thanks anybody for help
    Oliver

    The 90 day association doesn't stop you authorising an account, it only stops you from using another account for iTunes Match or automatic downloads or redownloading its past purchases : http://support.apple.com/kb/HT4627
    There are a few methods listed on this page for how you could do it e.g. multiple user acounts, same iTunes but you having separate playlists, separate iTunes libraries : http://support.apple.com/kb/HT1495

  • Power Management with User Account

    On my T43p, I have the newest power management version installed and XP SP3. In the power management, I cannot change power profiles from within a user account. I can however change the power profile in the Windows control panel (this only after I changed the power policy registry keys). Is there a way to make power management do this?

    Hi,
    I have discovered a workaround to this problem, but it's not a definitive solution. When you log in as a 'not administrator' user, you have to use the 'Run As' command of WinXP on the file (right button mouse click on it):
    "C:\Program Files\TOSHIBA\Power Management\CePMTray.exe"
    And then, you have to insert username and password of an administrator user. You have to do the same thing to the
    file:
    "C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe"
    if you want to use the function key too, to change power profiles.
    The problem is that you have to do this each time you log in as limited user. If it was an Unix O.S. you could set a flag SUID in the files to execute them always as administrator. But this is Windows and I don't know if there is a way to do this!
    Anyway, there is another possibility. You can use SpeedSwitchXP tool (http://www.diefer.de/speedswitchxp), instead of the toshiba power management tool. This software is a power management tool that works from a limited user too, but you have to give write access at all users to the following reg keys:
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Controls Folder\PowerCfg\GlobalPowerPolicy
    HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Controls Folder\PowerCfg\PowerPolicies
    These keys are necessary in order to modify power schemas. You can give write access to these reg keys with the standard tool 'regedit'.

  • Error while trying to publish 2013 workflow via designer. Probably a workflow manager backend user account issue?

    Hello, I am getting error while publishing the 2013 workflow via designer. Also, under sharepoint designer if I try to delete any workflow then the page just refreshes and the workflow does not get deleted.
    I checked the services.msc and found that the workflow backend service was stopped. (this happened as the password of the user under which this serivce was running had changed).
    So, the network admin changed the service user to LOCAL SYSTEM and started the service.
    Now, the workflow backend service is started. We have run the iisreset also.
    However, I am still getting the same error:-
    System.IO.InvalidDataException: A response was returned that did not come from the Workflow Manager. Status code = 503:
    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
    <HTML><HEAD><TITLE>Service Unavailable</TITLE>
    <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
    <BODY><h2>Service Unavailable</h2>
    <hr><p>HTTP Error 503. The service is unavailable.</p>
    </BODY></HTML>
    Client ActivityId : ee94689c-4e08-b055-fe9c-268d7a94
    Please find attached snapshot.
    Is the error as a result of the change in service user? Can you tell me what priviledges should the account running the workflow backend service must have?
    UPDATE 1:-
    We have set the workflow service backend account user as farm admin and also tried to set it to site admin. The service is re-started. Now, for a new web application,
    I can delete workflows. However, for existing site, I am not able to delete the existing workflows.. Also, I am not able to publish workflows (present under new and previous sites) and the error is same as described earlier.

    Hi Nachiket,
    According to your description, my understanding is that you got an error while publishing the 2013 workflow via SharePoint 2013 Designer.
    As you have changed the password of this service. Please open IIS and make sure identify of the WorkflowMgmtPool is correct, you can re-type the identify. Then  make this pool is started.
    Open Services, find Service Bus Message Broker service and Windows Fabric Host Service. Make sure they are running. If not, firstly, start Windows Fabric Host Service, then start Service Bus Message Broker service. If Service Bus Message Broker service is
    started, stop and re-start it.
    Here are some similar posts for you to take a look at:
    http://developers.de/blogs/damir_dobric/archive/2012/10/23/deploying-sharepoint-workflows.aspx
    http://developers.de/blogs/damir_dobric/archive/2012/09/18/servicebus-message-broker-service-is-starting-and-starting.aspx
    I hope this helps.
    Thanks,
    Wendy
    Wendy Li
    TechNet Community Support

  • Best way to manage oracle users account

    I have around 300 databases with a total of 2000 users defined with password. I have to activate the password expiration and I would like to know if there is a nice tool or method to manage password reset from a central place or can be linked to any LDAP or Active Directory.
    Thanks

    Ya ok, sometime my question are a bit strange reason is I'm not a DBA and my knowledge on oracle product and feature are very limited but I would like to have a bit of information to challenge my DBA here. So far they always give me all kind of weird reason. Now regarding OID (oracle internet directory) is there a fee for that? One of my DBA told me that a centralize authentication method is 500K$ minimum.
    We use Solaris binded on AD (using LDAPS).
    Also is it a better idea to use, instead, the authentication by the operating system?...
    Thanks

  • Configuration Manager console Mix accounts rights

    Hi,
    I have two accounts with differents rights on SCCM console :
    - X account has Full Administrator rights
    - Y account has just a few rights.
    When I log on the console with Y account on a computer that I logged before with X account, it's giving me full Administrator rights. But when it's on another computer, that works fine.
    I tried to restart computer, change AD groups, change rights on SCCM, nothing worked..
    Do you know if there is a cache somewhere that I can clean or what is causing that ?
    Thanks !

    @jasonsandys : Hi, this wasn't happening before, it's seems to happen only on a few computer. I don't know
    what is CSS
    @Fernsantos: Hi, I checked the task manager and it's run on the right account. I removed all the rights
    on Y account but I can modify all objects like if I where on X account.
    @Daniel JiSun: I tried to use RBA Viewer, it's working well for X account (full Admin) and for Y account I don't see any rights on it because I had remove them. But Y account still have full admin rights
    Thanks for the answers !

  • Message (on one account) when logging in: The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database.

    After installing the reportservice/database i cannot use the Configuration Manager Console 2012 anymore with my own AD account. (The accounts of my colleagues are stil working)
    When i login i get the following message:
    The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database. The account must belong to a security role in Configuration Manager. The account must also have
    the Windows Server Distributed Component Object Model (DCOM) Remote Activation permission for the computer running the Configuration Manager site server and the SMS Provider.
    I checked the following:
    I am a administrative user in SCCM (Full Administrator)
    I am a member of the administrator group on the server
    Deleted HKEY_CURRENT_USER\Software\Microsoft\ConfigMgr10
    I tried to start it on multiple workstations and deleted my roaming profile
    Any more suggestions?

    Hi,
    Maybe you could have a look on the below blog.
    http://blog.nimbo.com/how-to-disable-user-account-control-in-windows-server-2012/
    (Note: Microsoft provides third-party contact information to help you find technical support. This contact information
    may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.)
    Best Regards,
    Joyce Li
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • User accounts corrupted - how to fix

    So my Mac locked up the other day when the babysitter decided to put it to sleep. The fan was on full and it was unresponsive. I force-powered it off and then on again. When it came back, almost everything was fine except for my wife's account. It had switched to sort of my son's account. What I mean is that my son is running the restricted finder, and when my wife logged in, it was using the restricted finder and the "My Applications" folders, etc. were pointing to my son's directories. Everything else was normal, so when you select full finder, it's running from my wife's account (has her desktop files, etc.), but the dock was still the messed up one. Going into Accounts as me, it shows her as an admin and doesn't show that she is running the restricted finder.
    I'm quite comfortable with Unix sys admin activities, but OS-X doesn't run things the same way as normal Unix systems. Can anybody help me figure out what's gotten messed up and how to fix?
    Thanks.
    Andrew

    With a full or otherwise marginalized hard disk drive with possible damages
    to files or directory (or corruption, lost data, or files lost due to meddling) the
    advice to make a full backup of the computer's contents to an external HDD
    in a suitable enclosure for use with your computer, is the best first step to
    not loose any more data. Clone utilities help do this while retaining what is
    left of the correct and original file structure which would be otherwise lost.
    For other ideas about user accounts and their place in OS X systems, you
    can take a look at how they work and how the topic is addressed in these
    selected web page links. User accounts are the basis of keeping a system
    secure and help keep the contents organized and protected. If someone
    who has no business in an Admin account had this access, they could be
    responsible for a considerable degree of damage. And the blame does not
    necessarily fall on the last person to unknowingly mess it up. The owner
    has to be accountable for learning how to best protect their investment and
    the contents of the computer, and other users, from loss or harm.
    There are several articles & documents to help manage accounts.
    • Mac OS X: How to manage user access to applications, system ...
    Aug 5, 2008 ... Mac OS X 10.2 reintroduced this level of Admin user control
    over local users via the "Capabilities" function of the Accounts preference pane ...
    http://support.apple.com/kb/HT2400
    • Managing User Accounts - XvsXP.com, Mac OS X vs. Windows XP, OS X
    has five main types of user accounts: Root; Administrator; Standard... acct
    available under OS X. Root has absolute power and control over the system
    Fewer types of user accounts limit access options. No easy way to limit ...
    http://www.xvsxp.com/system/users_configuring.php
    • Mac OS X 10.5: Working with user accounts and Accounts preferences
    Dec 8, 2008 ... You can use Accounts preferences to configure or delete user
    accounts in Mac OS X. Each account can have its own log in, password, ...
    http://support.apple.com/kb/HT3309
    • Mac OS X: Changing or resetting an account password
    Learn how to change or reset an account password in Mac OS X, including the
    original administrator account password... From the Apple menu choose System
    Preferences. Select the user name of your original administrator account.
    http://support.apple.com/kb/HT1274
    • Mac OS X 10.5 Help: Creating a new user account
    You should create individual user accounts for each person who regularly...
    http://docs.info.apple.com/article.html?path=Mac/10.5/en/8235.html
    • Mac OS X 10.5 Help: Creating a guest user account
    When the log in window is appears the user can just click Guest Account...
    http://docs.info.apple.com/article.html?path=Mac/10.5/en/15600.html
    • Mac 101 - File Sharing:
    http://support.apple.com/kb/HT1549
    These links cover OS X in general, and the newer more common later ones.
    Some of the ideas and processes can be applied, and knowing how the
    basics work, should help in looking for more applicable information for 10.3.9.
    To take charge of security and account management when more than one
    person uses a computer (or even just one admin-owner account user) is a
    preventative action. The later OS X systems are even more elaborately made
    and there are some very in-depth articles and documents for management of
    system accounts, user access, security and so on, for Leopard. These are
    often pro-level documents and some of them are 3MB downloads.
    In the meantime, damage control requires a different path be taken to recover
    from the problems at hand; while looking into how to prevent them.
    {Do you have a backup computer?}
    Good luck & happy computing!

  • ISE Internal User Accounts Deactivated

    Hi
    I noticed this morning that rather than the regular minimum number of overnight users on our wireless network of around 200 we had 68. The missing clients were Hospira infusion pumps that were configured with local user accounts on the system so I looked at the accounts. Most of the accounts for the hospira pumps were deactivated though not all and no other accounts were deactivated other than a few that are no longer needed and were deactivated by me.
    What could cause multiple accounts to deactivate without manual intervention?
    Thanks
    Martin

    Martin,
    Can you check the settings for the user password policy, there is a default setting to disable the user account after 60 days. See if you can shut this off.
    Thanks,
    Tarik Admani
    *Please rate helpful posts*

  • Cannot create or rename a user account in Windows 7 HP x64

    Hi. I have Windows 7 Home Premium x64 with one single account with Administrator rights (it's been set up in the computer shop).
    It turned out that I cannot create a new user account with it. I try to create one from Control Panel / User accounts menu / Manage other user account. It asks me to enter a name of the account and its kind, after it is done and Create button is pressed
    it returns to the User accounts list, which stays blanc (no account created). No error messages or warnings.
    I cannot even just change the name of my exsisting account, it looks almost the same: it asks for a new name and when the the name is typed in and Rename button is pressed it returns to the previuos screen where I can see that the name remains unrenamed.
    The only thing I can do with my account is to change its image for Logon screen. :)
    Please help me to fix this issue.

    Hi....  I have the same problem with my laptop and my netbook. Same OS in my laptop and Win7 Starter in my netbook.
    The only way I found to address this issue was as following:
    - Start your computer in 'Safe Mode'
    - Logon as 'Administrator' (preferred, but also works with all local users)
    - Go to control panel and 'User Accounts'
    - Create the new user with administrator rights
    - Then close Admin session
    - Logon as the new user
    - Once logged on, and desktop and icons shows up for you, is done.
    - Then, close new user session or restart your computer normally
    This started to happen to me after a Windows 7 update for 'Service Pack 1'.
    It seems to be an error in this update because the normal process to create a new user only creates the name in the list but no folders and other files necessary to start sessions. The profile is not fully created by the normal process. Then you need to
    start the process in SAFE MODE, because it only loads the very basic functions for the OS, no drivers, no services, no antivirus....
    Hope this can help...!
    Thanks.
    A.V.

  • User account disable on ACS 5.X

    Hi,
    I'm working with the new ACS version 5.X, and i have a question. Is possible configure a local user account to disable it automatically, as in the 4.2 ACS version. When I create an local user account there isn't this option, and I don't know how to implement it.
    Thanks a lot and kind regards.

    I am attaching an example of how to create both temporary and permanent accounts within the internal user database. It achieves the requirements above although maybe with a different approach. It uses two new capabilities in ACS 5.3
    - Attribute to attribute comparison in the authorization policy
    - Leverages a new System attributed called "NumberOfHoursSinceUserCreation"
    I am also including a summary of the steps below
    - Create two identity attributes for internal users
      -Define an identity attribute for the user type. Can use an integer where 1 indicates a permanent account and 2 a temporary one
    - Define an identity attribute for user lifetime. Use an integer. Defines the user lifetime in hours
    - Create a rule in a compound condition in the the authorization policy to deny access to users where Number Of Hours Since User Creation exceeds the lifetime. Eg (Internal Users:User Type = 2 And System:NumberOfHoursSinceUserCreation > Internal Users:UserLifetime) then DenyAccess
    Note, I used an integer attribute type for the user type. This is because of issues displaying the enumerated values of an attribute in a compound condition. However, if install patch 1 for ACS 5.3 it may be possible to use an enumerated attribute instead of an integer one (which will be clearer) since the following CDETS is resolved in patch 1
    CSCtg51846 Enum values are not shown in compound conditions in rule
    I have not tested with patch 1

  • Change user account in snow leopard server??

    Trying to change a user account picture in snow leopard server. Have couple computers that are on snow leopard and it uses the the network server that has all the login in. I can't change the user icon within system prefernces. Please help me!

    There are server user accounts and computer user accounts. System Preferences is for creating and managing computer user accounts. Server Preferences and Workgroup Manager are for creating and managing server user accounts. If you created the account in System Preferences, you won't be able to manage it with Server Preferences or Workgroup Manager.

  • OIM - EBusiness User Management Connector

    Hello there,
    Can anybody please tell me within the Ebusiness connector i.e. provided in 9.1 version connector pack, which one needs to be installed? there are 3 different categories within the same -
    1.) For the User Management connector:
    Oracle EBS User Management 9.1.0.0
    2.) For the User Management with HR Foundation connector:
    Oracle EBS HR Foundation User Management 9.1.0.0
    3.) For the User Management with TCA Foundation connector:
    Oracle EBS TCA Foundation User Management 9.1.0.
    I don't know which one resembles to which operations that OIM can perform. Can anybody please throw some light and explain which connector does what?
    thanks,
    - oidm.

    An FND_USER record represents an Oracle E-Business Suite account. This record is the main component of the account data whose management is enabled by the connector. *(Oracle EBS User Management 9.1.0.0)*
    Depending on your configuration of the target system, there may be other user data components that must be managed by the connector:
    Some applications in Oracle E-Business Suite require a user to have a person record in Oracle E-Business HRMS. *(Oracle EBS HR Foundation User Management 9.1.0.0)*
    These users are either full-time employees of the organization or users (such as contract or part-time employees) who have been provided with access that is similar to the access provided to full-time employees. iExpense is an example of an application that requires users to have person (HRMS) records.
    Some applications in the Oracle E-Business Suite require a user to have a record in Oracle E-Business TCA. *(Oracle EBS TCA Foundation User Management 9.1.0.)*
    Typically, these users are representatives or employees of customers and vendors of your organization. iStore and iProcurement are examples of applications that require users to have TCA records.
    For more info
    http://download.oracle.com/docs/cd/E11223_01/doc.910/e11203/intro.htm#CHDJCHDC
    Thanks
    Suren

  • What is the "best" way to configure iTunes on an iMac with personal user acounts so each user can access the media library but sync devices on their personal user account?

    I am trying to determine the best way to set up our imac so each user account can access the same media (songs, movies etc.) through itunes and also back up and manage their personal devices under their own personal user account.  There are 4 users on our iMac.  Me, my wife, and our 2 children.  We have built an extensive library of music/media together using the same iTunes store account.  I would like to establish a seperate apple id and iTunes store account for each of us going forward but have the ability for each of us to share our purchases.  What is the best way to configure our system and devices in order to allow shared access to media and at the same time allow for individual management of devices including contacts, apps, photos, etc. Please help, I would like to do this once!
    Thank you in advance! 

    OK, seeing as no-one replied (presumably because a lot of this information is on the forums in bits elsewhere) here's how I've got on so far.
    Applications - just went through them.  About the only one I needed was my media server app.  Just downloaded and re-installed, had a quick look back though my email to find the license key and it all went on fine.  Installation never seemed quite right on my old machine so solved that problem too. 
    Movies - New iMovies just copied across the clips and projects into their respective folders.  Seems to have worked but haven't checked it all that thoroughly.  Some duplicate footage here but I can trim this out at some point when I get a chance to go through here. 
    Documents - Just copied these across. 
    Photos - used an app called iPhoto Library Manager.  You can download for free but have to pay to use the part that consolidates your libraries.  Possibly if I was willing to spend a bit more time I could have got away without using this but given I didn't know the state of my different libraries and just how many duplicates I had this was too much of a convenience to ignore.  Also got my library into a state where I can now spend a few hours organising it a bit better with Faces / Events etc. 
    Not attempted Music or iPhone sync yet as been stuck trying to solve a problem with my power adapter. 

  • HOW TO CONFIGURE MANAGER or APPROVER USER IN ACCESS REQUEST MANAGEMENT TO APPROVE OR REJECT REQUEST

    hi sap gurus,
    i configured grc 10 system successfully. I created one user: GR_AR_APP001 and assign following roles:
    SAP_GRAC_ACCESS_APPROVER
    SAP_GRAC_ACCESS_REQUEST_ADMIN
    SAP_GRC_FN_BASE
    SAP_GRC_FN_NUSINESS_USER
    and I maintained GR_AR_APP001 in access control owners as "POINT OF CONTACT", "SECURITY LEAD" and "WORKFLOW ADMINISTRATOR"
    but when i am creating access request for new user and defining MANAGER under user details tab as GR_AR_APP001.
    the user GR_AR_APP001 is not receiving any request for APPROVE or REJECT in his WORK INBOX.
    can u please guide me how to configure APPROVER or MANAGER to approve or reject request.
    I will be very much thankful if you guide me successfully.

    Hi Colleen,
    thanks a lot for your time.
    PIC1: I created one user: GR_AR_APP001
    and assigned all the GRC ROLES.
    PIC2: I assigned owner type to GR_AR_APP001 user : POINT OF CONTACT, SECURITY LEAD and WORKFLOW ADMINISTRATOR in NWBC ACCESS CONTROL OWNERS
    PIC3: I created one EUP 980 (copied from default EUP)
    PIC4: I maintained default manager as GR_AR_APP001 user in 980 EUP
    PIC5: I selected SAP_GRAC_ACCESS_REQUEST process id
    PIC6: I created one agent id as ZGRAC_MANAGER11 in which I added approver user id: GR_AR_APP001
    PIC7: I saved agent id
    PIC8: I added agent id as ZGRAC_MANAGER11 in stage5 in manager stage.
    PIC9: I saved
    PIC10: I maintained EUP 980 (in which I configured manager as GR_AR_APP001 user) in stage 5 task settings
    PIC11: Maintain Route Mapping, I clicked on next
    PIC12 and PIC13: I saved and activated.
    After this process I created one request for new account and selected the manager as GR_AR_APP001 and one request is created with request no 9000000030.
    now I logged into system by user GR_AR_APP001 and checked, there is no request under his work inbox.
    please guide me at least one procedure, how to receive request in approver work inbox so that I can learn other procedures to configure approver as per our organization requirement.
    thanks for your support Colleen.

Maybe you are looking for