Multi-Home Agent Questions

Question

Hello,
For a Multi-Homed Agent what are the permissions required by both MOM Actions and SDK Service accounts on the clients versus both RMS Production and Tests, versus both accounts on the Client.
System Center Data Access service is running under SVCMOMSDK for Prod and Local System
for Test
System Center Management Service Local System is running under Local System for Prod and Test
System Center Management Configuration is running under
SVCMOMSDK for Prod and svcTMOMSDK for test
Should I change the account running System Center data Access on Test to use a domain account? because it is multihomed?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 1

For Permission of MOM Action and SDK account Services will be as below
Account type
When Required
Used For
Minimum
Credentials
Account name
Management Server
Action account
Management
Server Setup
Collecting data
from providers,
running responses
Member of Local
Administrators
Users Group,
Member of Local
Performance
Monitor Users
Group,
Allow logon
locally permission
\OpsMgrAction
SDK and Config
Service account
Management
Server Setup
Writing to
operational
database, running
services
Member of local administrative
rights on management
server computer,
Member of Domain User or Local System.
“The use of Local
User account is not supported”.
Best Practices recommend using a different account from the one used for the Management Server Action Account.
\OpsMgrSDK
Agent Installation
account
Discovery and
push agent
Installation
Installing agents
Member of Local
Administrators
Group
\OpsMgrAction
Data Warehouse
Write\Read accounts
Reporting Server
Setup
Write/Read
to/from Reporting
Data Warehouse
database
Access to Data
Warehouse
Database
\DWRW
For change account running system center data access, you check below link
https://support.microsoft.com/kb/936220/en-us
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"