HP Insight Management WBEM Providers - Manual (Page 20)

Configuring Insight Provider Security for a User Account using
HP SIM Configure and Repair Agents
NOTE:
When you must configure a non-administrator account on an x64 target server, verify that the system
is identified to HP SIM as a server and that it has the system subtype. For more information, see the
HP SIM help file.
The following procedure provides access rights to allow a standard user account to view most
management information. However, you must use an administrator account to perform some
management tasks such as rebooting a server.
To configure a domain or local user (non-administrator) account for remote management:
1. From HP SIM, select Configure > Configure or Repair Agents.
If the targets are selected, the Step 1: Select Target Systems page appears.
2. Click Next.
The Step 2: Enter credentials page appears.
3. The credentials you specify on this page are for a privileged account on the target system. In
addition, the credentials must work for all selected target systems. HP recommends using domain
administrator credentials. HP SIM only saves these credentials to run a scheduled task later.
a. In the User name field, enter the system administrator name.
b. In the Password field, enter the system administrator password.
c. In the Password (Verify) field, re-enter the system administrator password.
d. If you are using a domain account, enter the Windows domain in the Domain field.
4. Click Next.
The Step 3: Install Providers and Agents (Optional) page appears.
5. Select the Install WBEM / WMI Provider (HP Insight Management WBEM Provider) for Windows
box.
6. Click Next.
The Step 4: Configure or Repair Agents page appears.
7. (Optional) Select the Configure a non-administrative account for HP SIM to access WMI data
option.
This option applies to Windows® systems with the Insight Providers. The configuration of the
managed system is updated to allow users to access WMI information over the network. This
user account is used by HP SIM to read inventory and configuration information from the system,
and is configured as the WBEM user in the System Protocol Settings.
This configuration step is not necessary if HP SIM is configured with a user with Windows® ad-
ministrator rights. HP SIM does not create this user. The user must exist as a domain user or one
local to the managed system.
Users are added to the Distributed COM Users group on the managed system and given read-
only access to WMI information in addition to read-write permissions to the HPQ name space.
This user does not need to be an administrator of the managed system and does not need login
rights. HP recommends that the domain administrator create a special-purpose domain account.
8. Enter the credentials for HP SIM to access the managed systems:
Security 20