Hi to all
please can someone tell me how to prevent a job running on unix to be executed as root
and prevent a job running on windows to run as windows administrator
I have to specify only the owner of the job to run it or i have also to specify and the EM users
regards
Sotiris
root- windows administrator rights
- philmalmaison
- Nouveau
- Posts: 1148
- Joined: 08 Jun 2007 12:00
- Location: Ile de France
To assign user rights on windows machines
1) set the option in the agent configuration "logon as user" to yes
2) set user rights:
1 Log on to the CONTROL-M/Agent computer as a local administrator.
2 Choose Start => Settings =>Control Panel=> Administrative Tools => Local Security Policy.
3 In the displayed tree structure, select Local Policies.
4 In the displayed panel, double-click User Rights Assignments to display the list of user rights.
5 Double-click the user right you want to assign. The Local Security Policy Settings window for that user right is displayed.
3) then use the utility ctmpwd to assign user execution rights.
If the user that run the jobs must have network rights (roaming profile)you can change the user that starts services:
4) If Logon As User is set to N, the owner of the job is the user account for the CONTROL-M/Agent service:
— Local System
—This Account
1) set the option in the agent configuration "logon as user" to yes
2) set user rights:
1 Log on to the CONTROL-M/Agent computer as a local administrator.
2 Choose Start => Settings =>Control Panel=> Administrative Tools => Local Security Policy.
3 In the displayed tree structure, select Local Policies.
4 In the displayed panel, double-click User Rights Assignments to display the list of user rights.
5 Double-click the user right you want to assign. The Local Security Policy Settings window for that user right is displayed.
3) then use the utility ctmpwd to assign user execution rights.
If the user that run the jobs must have network rights (roaming profile)you can change the user that starts services:
4) If Logon As User is set to N, the owner of the job is the user account for the CONTROL-M/Agent service:
— Local System
—This Account