Some wizards in Operations Manager require you to choose whether to distribute the credentials for a Run As account to specific computers or to all managed computers, as shown in the following illustration.



Run As account distribution options

As a best practice, you should always select the More secure option to ensure that the credentials are only provided to specific computers.

If you select the Less secure option, the credentials are distributed to all managed computers in the management group. In addition, Operations Manager performs tests to validate the Run As credentials, including whether the credentials can be used to log on locally to the computer. The “log on locally” right is commonly restricted in enterprise environments. If you select the Less secure option, you can expect numerous alerts from computers on which the “log on locally” right is restricted.

To distribute credentials for a Run As account

  1. In the Operations console, in the Administration workspace, under Run As Configuration, click Accounts.

  2. In the results pane, click the Run As account that you want to configure, and in the Tasks pane, click Properties.

  3. On the Distribution tab, click Add.

  4. In the Computer Search window, you can select from the following:

    • Search by computer name (Default)

    • Show suggested computers

    • Show management servers

    Using any of these options and (optionally) the Filter by box, click Search.

  5. In the Available items list, select the computers where you want the Run As account credentials distributed, click Add, and then click OK.

  6. Click OK to close the Run As Account Properties dialog box.

When you associate a Run As account with a Run As profile in the Run As Profile Wizard, you can select the account on the Completion page to configure the account distribution by using the previous procedure starting at step 3.