AD integration - Run As Profile Questions
I'm working on setting up AD integration for scom 2012 I have read the document here http://technet.microsoft.com/en-us/library/hh212712.aspx have some questions about the runas profiles. I have 3 domains - Domain A, B and C for reference going forward. Domain A has a two way trust with B and C has a two way trust with B also. Scom is installed with two Management Servers in Domain B. I created a runas Account (Type Windows) for Domain A in the SCOM Console. the Technet docs say to save the Runas profile in the default management Pack - This results in an object reference error so I created an new MP for the Runas Profile. this allowed the creation of the runas profile. When I try to reference this runas profile with the Auto Agent Assignment Rule I get and error that I can't use an unsealed MP as a reference. Questions are: 1. if I seal the MP that has my runas Profile am I going to be able to Update the runas account in the future and is the correct way to do this? (this requires a copy of the microsoft.systemcenter.library 7.0 MP for a reference to seal the MP I can't find this MP or export it from the console) 2. is the error about not being able to save in the default MP something I need to fix? 3. is there a way to use multiple domain runas accounts in the Active directory Based Agent Assignment runas profile? is the profile smart enough to know what domian it is connecting to and use the corresponding account?
June 1st, 2012 6:42pm

If I missed some information that you need to help answer this question please let me know. I really would like to remove the human element from deploying scom agents. Thanks
Free Windows Admin Tool Kit Click here and download it now
June 4th, 2012 3:18pm

Hi, Would you please let us know more details about the TechNet document you noticed, such as links? Is it this post? OpsMgr 2007: How to enable AD integration for an untrusted domain http://blogs.technet.com/b/smsandmom/archive/2008/05/21/opsmgr-2007-how-to-enable-ad-integration-for-an-untrusted-domain.aspx Regarding AD integrations, please refer to the guide below: Integrating Active Directory and Operations Manager http://technet.microsoft.com/en-us/library/hh212829.aspx Thanks.Nicholas Li TechNet Community Support
June 7th, 2012 2:46am

I had included the url it just didn't convert to a html link, I have fix that in my original post. Integrating Active Directory and Operations Manager http://technet.microsoft.com/en-us/library/hh212829.aspx the above link is where I started the link in my first http://technet.microsoft.com/en-us/library/hh212712.aspx is where I am having the problem. I ran momadadmin.exe with out any issues. I understand what the documentation is saying but either due to the unsealed MP or the error saving to the default MP I can not save the configuration.
Free Windows Admin Tool Kit Click here and download it now
June 8th, 2012 10:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics