Low-Privilege Environments

Applies To: Operations Manager 2007

Low-privilege Environments and the Agent Action Account

You can use a low-privilege account for the agent action account, although a number of rules and monitors require elevated privileges.

Low-privilege Accounts and Windows XP

On computers that are running Windows XP, the low-privilege account used as the agent action account must meet special requirements, as shown in the following table.

Discoveries and Monitors Configured to Use the Privileged Monitoring Account Run As Profile

The following table lists the object discoveries and monitors that are configured by default to use the Privileged Monitoring Account Run As profile, which defaults to Local System and does not require association with any Run As account or target computer. As a result, no user intervention is required for these object discoveries and monitors that must use a high-privilege account.

If your requirements stipulate that only a low-privilege account should be used in your environment, use overrides to disable the monitor and object discoveries for the appropriate operating systems listed in the table.

For more information and for instructions about how to use overrides, see How to Monitor Using Overrides (https://go.microsoft.com/fwlink/?LinkID=117777) in the Operations Manager 2007 Help.

Using Roles

In order to use Aggregate Client monitoring to monitor the Windows 7 and Windows Vista clients in your environment, you must be assigned the Operator role in Operations Manager 2007. You must be assigned the Administrator role in Operations Manager in order to use Business Critical Client monitoring. For more information about the types of client monitoring available in Operations Manager, see the Understanding Management Pack Operations section of this guide.