Client Management Suite

 View Only
  • 1.  DS 7.1 Service Account change.

    Posted Nov 23, 2011 06:30 PM

    Hello.

    When I installed cms 7.1 i used a admin account that i probibaly shouldnt have. Is it possible to change the account that I installed everything with to a different one

    Would this break the product?

    Also which groups will the new account need to be a member of?

    Is it more than local administrators and domain admin.

    Thanks.



  • 2.  RE: DS 7.1 Service Account change.

    Posted Nov 28, 2011 08:00 PM

    hi, ive been trying this url fix in my lab but each time fails.

     

    How to change the Application Identity in NS7

    http://www.symantec.com/business/support/index?page=content&id=HOWTO10009

     

    Is this the only way to do it?

    Thanks.



  • 3.  RE: DS 7.1 Service Account change.

    Posted Dec 04, 2011 01:40 AM
    Yep that is correct. You can do it either of those 3 ways... I suggest doing it via console if you are able.


  • 4.  RE: DS 7.1 Service Account change.

    Posted Dec 05, 2011 12:06 PM

    Thank you for the reply. Please can you let me know how to do it via the console.

    Thanks in advance.



  • 5.  RE: DS 7.1 Service Account change.

    Posted Dec 07, 2011 05:46 PM
      |   view attached

    METHOD 3:  If you can load the console:

    Create a service account in Active Directory and get the AD SID.

    Click on Settings >All Settings>Notification Server> Notification Server Setting > Processing and change to the desired credentials to the NS service account created above and click OK

    Update the [SecurityTrustee] table in the Symantec_CMDB database.

    ---------------------

    i get an error when i try to use my new service account saying This account does not have sufficient credentials to access the database

    Im not sure where to give this account permission.

    also i have looked through the database and I cant seem to find in the database where i edit the [securityTrustee] table

     SID for SKYNET\altiris:
    S-1-5-21-1533168978-3400402331-3331771166-1113

    I think im getting closer but not there yet.



  • 6.  RE: DS 7.1 Service Account change.

    Posted Dec 07, 2011 09:25 PM

    Thanks. I actually was looking at a way to do this for an environment that I didn't build but needed to change in order to fall in line with our standards.