Configuring a maintenance server for delegation

You can configure a maintenance server to manage Storage Locations that are hosted by a different computer. Then, you must configure the maintenance server to access these locations on behalf of desktop users that run the Desktop Agent. This configuration is managed by using Active Directory.

For detailed information on delegating Active Directory administration, see the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/actdid1.mspx

To configure a maintenance server for delegation

  1. Verify that the following conditions are met:

    • Domains are Windows 2000 or later. NT 4 domains are not supported.

    • Both the Desktop Agent user's account and the maintenance service's account must be in the same forest.

    • Desktop Agent user and computer accounts must be in mutually trusted domains.

    • Desktop and server operating systems must be Windows 2000 or later

  2. Confirm that the desktop user account is configured for delegation.

  3. Confirm that the server process account is trusted for delegation.

To confirm that the desktop user's account is configured for delegation

  1. Log on to the domain controller by using a domain administrator account.

  2. On the taskbar, click Start > Programs > Administrative Tools > Active Directory Users and Computers.

  3. Under the domain, click the Users folder.

  4. Right-click the user account to be delegated, and then click Properties.

  5. On the Account tab, in the Account options list, verify that the following option is not selected:

    Account is sensitive and cannot be delegated

  6. Click OK.

To confirm that the server process account is trusted for delegation

  1. Log on to the domain controller by using a domain administrator account.

  2. On the taskbar, click Start > Programs > Administrative Tools > Active Directory Users and Computers.

  3. Right-click the Computers folder, and then click Properties.

  4. Right-click the computer on which the maintenance server runs, and then click Properties.

  5. On the General page, click Trust computer for delegation.

  6. Click OK.