How to Use a Local Account for the Agent Manager Service Account (298466)

MORE INFORMATION

The Consolidator and Agent Manager service account must be a member of the local Administrators group on each computer where an agent will be installed. To install agents, the Consolidator and Agent Manager service account needs access to the Windows NT Security event log, access to administrative shares, and read and write access to the registry on each agent computer. By default, the global group Domain Admins is a member of the local Administrators group on each computer in the domain.

When you create the Consolidator and Agent Manager account, you normally make this account a member of the Domain Admins global group, which gives the account the necessary privileges to configure agents on computers in the domain. For password authentication in situations that involve untrusted domains, you can create the Consolidator and Agent Manager account in each domain. Use exactly the same username and password (pass-thru authentication) and specify membership in the Domain Admins global group.

It is also possible to use a local account on each computer for the Consolidator and Agent Manager service account, instead of using the domain service account. To accomplish this, follow these steps:

1. Create a new local account on each computer where an agent will be installed.
2. For the new account on each computer, use exactly the same username and password that the Consolidator and Agent Manager account in the domain uses. Without this, the pass-thru authentication does not work.
3. Make the account a member of the local Administrators group on each computer where an agent will be installed.

For more information about the Consolidator and Agent Manager account, refer to Chapter 4, "Installing Components on Multiple Computers," in the Installation Guide.