Re: Client Push Installation Security

From: Shehzad Khoja [MSFT] (srkhoja_at_online.microsoft.com)
Date: 12/24/04 

Date: Fri, 24 Dec 2004 13:19:03 -0800

Client push account doesn't need to be a domain Admin account but it needs
to be a local admin account. If you have an account which is a local admin
then you should specify that as NTPush account. You can specify multiple
accounts to be used as client installation accounts.

For Software Installation account:

1 - it is only used by legacy clients. So if you only have adanced cleints
then you don't need to specify this account.
2 - SMS client will make that account a local admin before trying to run the
program and remove it from local administrators group after running the
program. So again, it doesn't need to be a domain admin. 

-- 
This posting is provided "AS IS" with no warranties, and confers no rights.
"Owen Heart" <owen_heart73@yahoo.com> wrote in message 
news:cqg2cq$bvi$1@mawar.singnet.com.sg...
>
> Hi,
>
> Due to security reason, i do not have any Domain Admin account. SMS
> Services is a Domain User that also have no rights to end user machine. 
> In
> such cases,  how do i specify the client push installation, software
> installation account so that later it can be used for software 
> distribution
> and pushing client. However, I have various deparment e.g HR, ACCT who 
> have
> a standard local administrator password for each department.
>
> Tks.
>
>

Relevant Pages

  • Re: a way to set source for capinst.exe?
    ... > account kicks off ccmsetup /service would have to have local admin rights ... > started this process doesn't have to remain logged in and the SMS client ... >> installation is completed. ...
    (microsoft.public.sms.admin)
  • Re: a way to set source for capinst.exe?
    ... when the user is a local admin and I don't want capinst to have to pull from ... account kicks off ccmsetup /service would have to have local admin rights to ... started this process doesn't have to remain logged in and the SMS client ... > to complete the Advanced Client installation are: ...
    (microsoft.public.sms.admin)
  • Re: Administrator--Client installation account problem
    ... I stated the account was only required to be a ... Of course if it is a domain admin that works also. ... Jeff said to use a Regular domain user, ... You do not have to be in advanced security to push the client. ...
    (microsoft.public.sms.admin)
  • RE: configuring client users
    ... This newsgroup only focuses on SBS technical issues. ... | Thread-Topic: configuring client users ... |> computer to SBS server while we need use "set up computer wizard" to ... |> For user account issue, please understand that if you join the client ...
    (microsoft.public.windows.server.sbs)
  • RE: configuring client users
    ... > Welcome to SBS newsgroup. ... we use "connect computer wizard" to connect the client ... > computer to SBS server while we need use "set up computer wizard" to set up ... > best interest to rerun the wizard again to add the client computer account ...
    (microsoft.public.windows.server.sbs)