Appendix: Using Low-Privilege Accounts to Run Scripts
Applies To: Operations Manager 2007, Windows Server 2012
Client-Side Monitoring
| Script | Required permissions |
|---|---|
AD_Client_Connectivity.vbs |
Local Admin |
AD_Client_GC_Availability.vbs |
Domain User |
AD_Client_PDC_Response.vbs |
Local Admin |
AD_Client_Serverless_Bind.vbs |
Domain User |
AD_Client_Update_DCs.vbs |
Local User |
ADClientPerspective.vbs |
Local Admin |
Domain Controller Monitoring
| Script | Required permissions |
|---|---|
AD_Database_and_Log.vbs |
Local User |
AD_DC_Demoted.vbs |
Local Admin |
AD_DNS_Verification.vbs |
Domain User |
AD_Enumerate_Trusts.vbs |
Domain User |
AD_General_Response.vbs |
Domain User |
AD_Global_Catalog_Search_Response.vbs |
Domain User |
AD_Lost_And_Found_Object_Count.vbs |
Domain User |
AD_Monitor_Trusts.vbs |
Domain User |
AD_Op_Master_Response.vbs |
Domain User |
AD_Replication_Monitoring.vbs |
Local Admin |
AD_Replication_Monitoring_Helper1.vbs |
Local User |
AD_Replication_Monitoring_Helper2.vbs |
Local User |
AD_Replication_Partner_Count.vbs |
Domain User |
AD_Replication_Partner_Op_Master.vbs |
Domain User |
AD_Server_Moved_Site.vbs |
Domain User |
AD_Sysvol_Share_DataSource.vbs |
Local User |
AD_Time_Skew.vbs |
Domain User |
AD_Validate_Server_Trust_Event.vbs |
Domain User |
DCLocatorRunning.vbs |
Local User |
GeneralResponseCheck.vbs |
Domain User |
Domain Controller Discovery
| Script | Required permissions |
|---|---|
ADLocalDiscovery.vbs |
Local Admin |
ADRemoveTopologyDiscovery.vbs |
Domain User |
ADTopologyDiscovery.vbs |
Domain User |
PrepareEssentialDiscData*.vbs |
Local User |