This procedure tells you how to create a Run As Account by using a set of Windows credentials as an example. Then it shows you how to edit the properties of the Run As Account to modify the security level and distribution of the credentials. You use this same procedure for all other account types. For more information about the other account types, see Credential Types in Operations Manager 2007.
The credentials that you provide in a Run As Account are used to run tasks, rules, monitors and discoveries as defined by the management pack that they are in. The management pack guide has the settings that you need for configuring the Run As Account and the Run As Profile.
To create a Run As Account
-
Log on to the Operations console with an account that is a member of the Operations Manager Administrators role for the Operations Manager 2007 management group.
-
In the Operations console, click Administration.
-
In the Administration pane, expand Administration, expand Run As Configuration, right-click Accounts, and then click Create Run As Account….
-
In the Create Run As Account Wizard, on the Introduction page click Next.
-
On the General Properties page, do the following:
- Select Windows in the Run As Account type:
list.
- Type a display name in the Display Name text box,
- Optionally, type a description in the Description
box.
- Click Next.
- Select Windows in the Run As Account type:
list.
-
On the Credentials page, type a user name, and its password, and then select the domain for the account that you want to make a member of this Run As Account.
-
Click Next.
-
On the Distribution Security page, select the Less secure or More secure option as appropriate.
-
Click Create.
-
On the Run As Account Creation Progress page, click Close.
When you create a Run As Account you are warned that you must associate the Run As Account with a Run As profile, and you are not presented with the option to configure Run As Account credential distribution. Both of these activities can be accomplished in the Run As Profile wizard. Alternately, you can configure Run As Account credential distribution by editing the properties of the Run As Account as shown next.
To modify Run As Account properties
-
In the Operations console, click Administration.
-
In the Administration pane, expand the Administration node, expand the Run As Configuration node, and select the Accounts container.
-
In the results pane, double click the Run As Account that you want to edit to open its properties.
-
On the Run As Account Properties page you can edit values on the General Properties, Credentials, or the Distribution tabs. In this case, select the Distribution tab.
-
On the Distribution tab, in the Selected computers: area, click Add to open the Computer Search tool.
-
On the Computer Search page, click the Option: list and select one of the following options:
- Search by computer name (Default), then type in the
computer name in the Filter by: (Optional) box.
- Show suggested computers, if you have already associated
the Run As Account object with a Run As profile, a list of
discovered computers that host the monitored service are presented
here.
- Show management servers, in some cases, for example
cross platform monitoring, all monitoring is performed by a
management server and therefore the credentials have be distributed
to the management servers that is performing the monitoring.
- Search by computer name (Default), then type in the
computer name in the Filter by: (Optional) box.
-
Optionally, type in a value in the Filter by: (Optional) box to narrow the search result set and click Search. A list of computers that match the search criteria is displayed in the Available items box.
-
Select the computers that you want to distribute the credentials to, and click Add. The computers appear in the Selected Items box.
-
Click OK. This returns you to the Distribution tab and the computers are displayed. Click OK.
See Also
Did you find this information useful? Please send your suggestions and comments about the documentation.