Default ZAM 10 Windows Service Accounts

Question

Hi there,
My customer's security department did a review and noticed some strangely named service accounts in this Windows 2008 member server running just ZAM 10. They would like to get more info on these accounts but we could find none in the documentation.
Here is part of the conversation:
Our security people are questioning some logon accounts used by Novell Zam/ZCM on servers. (See Below). It has proven impossible so far to find definitive info about these accounts possibly due to Google not liking the format of the account name. The account used on the main server is slightly different (.\__z_1_200__). These accounts were created by Zam on install. Any information on them would be greatly appreciated and in particular the rights they require on the server.
There is a strange local admin user set up <server-name>.
The account is called _z_1_80_ . Does anyone know what it is?
It must be created as part of the zcm product that is installed on this server. The server <another-server> also has an account like this and this has zcm installed also.
Also is a screen shot of the services aplet.
cheers,
Kirk

Answer 1

They are created during the install for using in various ZEN Services.
There is nothing special about the accounts other than that they are
local administrators.
The Services using those accounts can be changed to use another local
administrators accounts by using the services control panel.
On 7/21/2010 11:46 AM, kmaule wrote:
>
> Hi there,
>
> My customer's security department did a review and noticed some
> strangely named service accounts in this Windows 2008 member server
> running just ZAM 10. They would like to get more info on these accounts
> but we could find none in the documentation.
>
> Here is part of the conversation:
>> Our security people are questioning some logon accounts used by Novell
>> Zam/ZCM on servers. (See Below). It has proven impossible so far to find
>> definitive info about these accounts possibly due to Google not liking
>> the format of the account name. The account used on the main server is
>> slightly different (.\__z_1_200__). These accounts were created by Zam
>> on install. Any information on them would be greatly appreciated and in
>> particular the rights they require on the server.
>>
>>
>> There is a strange local admin user set up<server-name>.
>> The account is called _z_1_80_ . Does anyone know what it is?
>> It must be created as part of the zcm product that is installed on
>> this server. The server<another-server> also has an account like this
>> and this has zcm installed also.
>
> Also is a screen shot of the services aplet.
>
> cheers,
> Kirk
>
>
> +----------------------------------------------------------------------+
> |Filename: ZAM10WindowsServices.jpg |
> |Download: http://forums.novell.com/attachment....achmentid=4626 |
> +----------------------------------------------------------------------+
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.