Manually set spn update permissions, Exchange credentials, Assigning the – HP Storage Mirroring V4.5 Software User Manual
Page 145: User to the local administrators group
A - 6
Assigning the user to the local Administrators group
Follow these steps to add a user to the local Administrators group.
1.
Select Start, Programs, Administrative Tools (Common), Active Directory Users and
Computers.
2.
Click on Builtin.
3.
Right-click the Administrators group and select Properties.
4.
Select the Members tab.
5.
To add a user to the group, click Add.
6.
In Location, click the domain containing the users you want to add, then click OK.
7.
In Name, type the name of the user you want to add to the group. If you want to validate the
user or group names that you are adding, click Check Names.
8.
Click OK to close all open dialog boxes.
Manually set SPN update permissions
The Write servicePrincipalName permission on the source computer account in Active Directory
must be assigned to the account that will modify the SPNs. This is an advanced permission and
assigning either of the more general Write or Full Control permissions, which are assigned to Domain
Admins by default, would also be adequate. The permission must be assigned to one of the following:
The target's Storage Mirroring service logon account. If the target's Storage Mirroring service is
configured to log on as the System
account, the target's Active Directory computer account should
be assigned the permissions.
The account specified in the failover monitor configuration.
Use the following procedure to assign the Write servicePrincipalName permission to a user or
group:
1.
Start Active Directory Users and Computers.
2.
Select View, Advanced.
3.
Locate the source's computer account.
4.
Right-click on the source computer account and select Properties.
5.
Select the Security tab and click the Advanced button.
6.
If the account or group you want to add is not listed, click Add to add it.
7.
Select the account or group and click View/Edit.
8.
Select the Properties tab and check Validate Write servicePrincipalName.
9.
Click OK twice.
10.
Close Active Directory Users and Computers.
Exchange credentials
Proper rights must be assigned to the account that is entered when the Application Manager prompts
for credentials. If these credentials are not properly assigned, you will be prompted to enter alternate
credentials before protection can be enabled.
For Exchange, you must first configure all permissions as described in
on page A-1. In addition, the user must be an Exchange Full Administrator.
In order to operate the Application Manager for setup and to manage failover and failback for
Exchange, the following permissions are required:
The user running the Application Manager must have rights to manage Exchange in order to query
and modify the Exchange Active Directory objects. The Configuration Container resides in the root
of the Active Directory forest and contains the Exchange organizational objects.