Action and RunAs Account Security
In addition to the aforementioned security measures, security of an OpsMgr environment can be strengthened by the addition of multiple service accounts and RunAs accounts to handle the different OpsMgr components and MPs. For example, the Management Server Action account and the SDK/Configuration service account should be configured to use separate credentials, to provide for an extra layer of protection in the event that one account is compromised:
• Management Server Action account—The account responsible for collecting data and running responses from management servers.
• SDK and Configuration service account—The account that writes data to the operations database; this service is also used for all console ...
Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
