Article ID: 321997 - View products that this article applies to.
This article was previously published under Q321997
The agent service account is the account under which the OnePoint service runs on a managed Microsoft Exchange 2000 Server computer. To use some of the advanced script functionality of the Exchange 2000 Management Pack, you must make the agent service account a domain account instead of the local computer account. Typically, administrators give the agent service account the Domain Administrator role so that Microsoft Operations Manager (MOM) 2000 has the appropriate permissions to operate. For additional information about the scripts require the agent service account to be a domain account, click the article number below to view the article in the Microsoft Knowledge Base:
322065This article describes how to give the agent service account (of the managed Exchange 2000 computer) the Local Administrator role. You can use this configuration as an alternative configuration; however, this configuration requires a bit more administrative overhead. If you give the agent service account the Local Administrator role, Microsoft recommends that you use a separate Data Access Server/Consolidator-Agent Manager (DCAM) server for the Exchange 2000 computer than the DCAM server that you use for other managed servers (such as the Active Directory servers).
(http://support.microsoft.com/kb/322065/EN-US/ )Dependencies for Exchange 2000 Management Pack's Functionalities and Scripts
Typically, Microsoft recommends that you use a separate DCAM server to monitor and administer Exchange 2000 servers than the DCAM server that you use to manage non-Exchange 2000 servers. If you use a separate DCAM server for Exchange 2000 monitoring, you can specify the account on which you want to run the agent OnePoint service on these Exchange 2000 computers. The other DCAM settings may reflect the default local computer account for the agent OnePoint service, which may be acceptable for non-Exchange 2000 servers.
NOTE: If you use restricted groups and specify membership at the organizational unit level, group policy settings may affect other programs if these policy settings either modify individual Local Administrators groups or add their accounts. Local membership to the Administrators group is overwritten by the group policy setting enforced membership that is described in this section. For additional information about restricted groups, click the article number below to view the article in the Microsoft Knowledge Base:
228496To specify the account on which you want to run the agent OnePoint service on the Exchange 2000 server:
(http://support.microsoft.com/kb/228496/EN-US/ )HOW TO: Use Restricted Groups in Windows 2000
After you complete this procedure and the agent service account is granted the Local Administrator role on all servers in the organizational unit, you can safely remove the Domain Administrator membership for the agent OnePoint service account.