|
I recently installed MOM SP1 and
loaded an agent including the Active Directory management pack to a DC. It went
well except for a continuous permissions error I get from the script that runs
hourly showing an error trying to add the OU Momlatencymonitors to AD.
The service account used for MOM is in the Builtin Administrators group for the
domain. I've checked the permissions for the container (our domain) and it looks
like it should work. Has anyone else seen this behaviour?
From the microsoft.public.mom
newsgroup
Check the service
account the agent is running under. Usually, it is LocalSystem which will
usually have sufficient rights on a DC to add a container. The OU
Momlatencymonitors should be present in the OU structure.
You might need to modify the service account to use a predefined account that is
part of the Builtin Administrators group. You also might need to change your
global option for the service account to use the predefined account instead of
the LocalSystem account as in some cases the LocalSystem account might not have
the correct permissions in the AD structure.
|