HP DL360 HP Insight Management WBEM Providers for Windows Server 2003 and Wind - Page 19

Configuring Insight Provider Security for a User Account using HP SIM Con and Repair Agents

Page 19 highlights

Configuring Insight Provider Security for a User Account using HP SIM Configure and Repair Agents NOTE: When you must configure a non-administrator account on an x64 target server, verify that the system is identified to HP SIM as a server and that it has the system subtype. For more information, see the HP SIM help file. The following procedure provides access rights to allow a standard user account to view most management information. However, you must use an administrator account to perform some management tasks such as rebooting a server. To configure a domain or local user (non-administrator) account for remote management: 1. From HP SIM, select Configure > Configure or Repair Agents. If the targets are selected, the Step 1: Select Target Systems page appears. 2. Click Next. The Step 2: Enter credentials page appears. 3. The credentials you specify on this page are for a privileged account on the target system. In addition, the credentials must work for all selected target systems. HP recommends using domain administrator credentials. HP SIM only saves these credentials to run a scheduled task later. a. In the User name field, enter the system administrator name. b. In the Password field, enter the system administrator password. c. In the Password (Verify) field, re-enter the system administrator password. d. If you are using a domain account, enter the Windows domain in the Domain field. 4. Click Next. The Step 3: Install Providers and Agents (Optional) page appears. 5. Select the Install WBEM / WMI Provider (HP Insight Management WBEM Provider) for Windows box. 6. Click Next. The Step 4: Configure or Repair Agents page appears. 7. (Optional) Select the Configure a non-administrative account for HP SIM to access WMI data option. This option applies to Windows® systems with the Insight Providers. The configuration of the managed system is updated to allow the user to access WMI information over the network. This user account is used by HP SIM to read inventory and configuration information from the system, and is configured as the WBEM user in the System Protocol Settings. This configuration step is not necessary if HP SIM is configured with a user with Windows® administrator rights. HP SIM does not create this user. The user must exist as a domain user or one local to the managed system. The user is added to the Distributed COM Users group on the managed system and is given readonly access to WMI information in addition to read-write permissions to the HPQ name space. This user does not need to be an administrator of the managed system and does not need login rights. HP recommends that the domain administrator create a special-purpose domain account. 8. Enter the credentials for HP SIM to access the managed systems: a. In the User name field, enter a user name. Security 19

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41

Security 19
Configuring Insight Provider Security for a User
Account using HP SIM Configure and Repair Agents
NOTE:
When you must configure a non-administrator account on an x64 target server, verify
that the system is identified to HP SIM as a server and that it has the system subtype. For more
information, see the HP SIM help file.
The following procedure provides access rights to allow a standard user account to view most
management information. However, you must use an administrator account to perform some management
tasks such as rebooting a server.
To configure a domain or local user (non-administrator) account for remote management:
1.
From HP SIM, select
Configure > Configure or Repair Agents
.
If the targets are selected, the Step 1: Select Target Systems page appears.
2.
Click
Next
.
The Step 2: Enter credentials page appears.
3.
The credentials you specify on this page are for a privileged account on the target system. In
addition, the credentials must work for all selected target systems. HP recommends using domain
administrator credentials. HP SIM only saves these credentials to run a scheduled task later.
a.
In the User name field, enter the system administrator name.
b.
In the Password field, enter the system administrator password.
c.
In the Password (Verify) field, re-enter the system administrator password.
d.
If you are using a domain account, enter the Windows domain in the Domain field.
4.
Click
Next
.
The Step 3: Install Providers and Agents (Optional) page appears.
5.
Select the
Install WBEM / WMI Provider (HP Insight Management WBEM Provider) for Windows
box.
6.
Click
Next
.
The Step 4: Configure or Repair Agents page appears.
7.
(Optional) Select the
Configure a non-administrative account for HP SIM to access WMI data
option.
This option applies to Windows® systems with the Insight Providers. The configuration of the
managed system is updated to allow the user to access WMI information over the network. This user
account is used by HP SIM to read inventory and configuration information from the system, and is
configured as the WBEM user in the System Protocol Settings.
This configuration step is not necessary if HP SIM is configured with a user with Windows®
administrator rights. HP SIM does not create this user. The user must exist as a domain user or one
local to the managed system.
The user is added to the Distributed COM Users group on the managed system and is given read-
only access to WMI information in addition to read-write permissions to the HPQ name space.
This user does not need to be an administrator of the managed system and does not need login
rights. HP recommends that the domain administrator create a special-purpose domain account.
8.
Enter the credentials for HP SIM to access the managed systems:
a.
In the User name field, enter a user name.