Re: computeraccount in admingroup?

How when the remote machine has a secret password? Am I misunderstanding
the scenario?

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx> wrote in message
news:eMM4FmKGGHA.3976@xxxxxxxxxxxxxxxxxxxxxxx
> > I want to know, if users or services of the central server have
> > admin-rights on the site server or if it's just done that SMS central
> > server can replicate the database to/from the SMS site server.
>
> Yes, any service running localsystem or any person who can spawn a process
> running as localsystem will have rights (say like through the scheduler,
> etc).
>
> joe
>
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> joe wrote:
>> It's used for SMS:
>> The computer-account of the SMS central server must be a member of the
>> local administrator group on the site server.
>> I want to know, if users or services of the central server have
>> admin-rights on the site server or if it's just done that SMS central
>> server can replicate the database to/from the SMS site server.
>>
>>
>> Paul Bergson schrieb:
>>
>>> I couldn't answer why it is there. It has local rights of which I have
>>> no
>>> idea. I would pull it out. This must be some old legacy issue. I
>>> haven't
>>> seen this before but it doesn;t look safe.
>>>
>>> --
>>>
>>> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
>>>
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>> "joe" <googlegroups@xxxxxx> wrote in message
>>> news:1137081167.401721.31430@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>>>> I ment:
>>>> Computer-Account 2 is member of Computer 1: group: local administrators
>>>>
>>>> This works.
>>>> But why do I need a computeraccount as a member in the
>>>> local-admin-group on another server?
>>>> Does the services of Computer 2 have adminrights then?
>>>>
>>


.

Relevant Pages

  • Upgrade SMS 2.0 to SMS 2003 to new hardware without losing old data
    ... Upgrade central SMS 2.0 Server to SMS 2003. ... boundaries of secondary sites to central site. ... Distribute Advanced Client to all Clients. ... Turn off central server. ...
    (microsoft.public.sms.setup)
  • Re: Architecture question
    ... Maybe SQL Server Reporting Services might be the answer. ... Fairly complex, PCU-intensive reports acessed monthly ... > too much to ask a central server and the company's network. ... > required on the client machines to generate them (rather than a saved ...
    (microsoft.public.dotnet.general)
  • Re: Computers not shopwng up in collections
    ... A collection created on the central server for the computers in a active ... > subset of machines on a child Primary site. ... >> number of systems, half do not have the client, the other half does. ...
    (microsoft.public.sms.admin)
  • Re: SSO
    ... They're more like "double sign on" because you have to login ... Well, no, they're double sign-on because the central server usually has to ... But only if clients are members of the domain. ...
    (comp.protocols.kerberos)
  • Re: SSO
    ... to a central server and they get redirected back to the target site. ... Well, no, they're double sign-on because the central server usually has to ... Negotiate-Auth and the browser speaks it, both WebAuth and Cosign give you ... can both leverage Negotiate-Auth to extend that single sign-on capability ...
    (comp.protocols.kerberos)
Loading