Configuring Insight Provider Security for a User Account using HP SIM Configure and Repair Agents

The following procedure provides access rights to allow a standard user account to view most management information. However, you must use an administrator account to perform some management tasks such as rebooting a server.

To configure a domain or local user (non-administrator) account for remote management:

1. From HP SIM, select Configure > Configure or Repair Agents.

   If the targets are selected, the Step 1: Select Target Systems page appears.

2. Click Next.

   The Step 2: Enter credentials page appears.

3. The credentials you specify on this page are for a privileged account on the target system. In addition, the credentials must work for all selected target systems. HP recommends using domain administrator credentials. HP SIM only saves these credentials to run a scheduled task later.
   1. In the User name field, enter the system administrator name.
   2. In the Password field, enter the system administrator password.
   3. In the Password (Verify) field, re-enter the system administrator password.
   4. If you are using a domain account, enter the Windows domain in the Domain field.
4. Click Next.

   The Step 3: Install Providers and Agents (Optional) page appears.

5. Select the Install WBEM / WMI Provider (HP Insight Management WBEM Provider) for Windows box.
6. Click Next.

   The Step 4: Configure or Repair Agents page appears.

7. (Optional) Select the Configure a non-administrative account for HP SIM to access WMI data option.

   This option applies to Windows® systems with the Insight Providers. The configuration of the managed system is updated to allow the user to access WMI information over the network. This user account is used by HP SIM to read inventory and configuration information from the system, and is configured as the WBEM user in the System Protocol Settings.

   This configuration step is not necessary if HP SIM is configured with a user with Windows® administrator rights. HP SIM does not create this user. The user must exist as a domain user or one local to the managed system.

   The user is added to the Distributed COM Users group on the managed system and is given read-only access to WMI information in addition to read-write permissions to the HPQ name space.

   This user does not need to be an administrator of the managed system and does not need login rights. HP recommends that the domain administrator create a special-purpose domain account.

8. Enter the credentials for HP SIM to access the managed systems:
   1. In the User name field, enter a user name.
   2. In the Password field, enter the password for the user.
   3. In the Password (Verify) field, re-enter the password.
   4. If the user account is a domain account, enter the Windows domain in the Domain field.

      If configuring a nonadministrative user is successful, these credentials are saved as the System Protocol settings for WBEM access in HP SIM.

9. Choose one of the following options:
   • Click Run Now.
   • Click Schedule, and then set up a schedule to run this task at a later time.

     The Task Results page appears and displays the following information.

   • Status—Displays the details for each target system in a task instance.
   • Exit Code—Represents the success or failure of an executable program, but does not indicate if all attempts were successful. If the return value is zero or positive, the executable ran successfully. If the return value is negative value, the executable failed.
   • Target Name—Displays the name and IP address of the target.
   • The stdout tab—Displays output text information.
   • The stderr tab—Displays information if the executable experienced an error.
   • View Printable Report—Enables you to print reports for the selected target system or for all target systems associated with the task instance.
10. (Optional) To print a report:
    1. Click View Printable Report.
    2. From the Options Message box, select the report to display.

       You can generate a report containing the selected target system or all systems associated with the task instance.

    3. To display the report, click OK, or to return to the View Task Results page, click Cancel.

       NOTE: The Configure or Repair Agents tool can update multiple target systems, each of which might have different results. The log results indicate whether the configure/repair attempt was successful.