2.6 Permissions for Running Knowledge Scripts

For the Exchange-RT Knowledge Scripts, the AppManager Windows agent—specifically, the netiqmc process—must run as Local System. This requirement stems from the fact that AppManager ResponseTime applications run out-of-process from the AppManager agent. The separate process for the managed object is run as the Logon and Run As user account specified in each Knowledge Script. The agent must have the authority to start a new process as any user ID specified in a Knowledge Script parameter. Therefore, the agent must run with Local System authority.

When you install AppManager ResponseTime for Exchange and Exchange Online on computers with existing AppManager agents, you’ll need to update any agents that aren’t running as Local System. Even though the requirement to run with this authority only applies to the netiqmc service, it’s a good idea to update both agent services (netiqmc and netiqccm) so that they’re running with the same authority. If you don’t update these services to run as Local System, the Discovery_Exchange-RT Knowledge Script will fail.

NOTE:The agent is installed to run under the Local System account by default.

IMPORTANT:If you want to run only the ExchangeOnline-RT Knowledge Scripts, these permissions are not required. The netiqmc process can run as any user.

To update the agent services:

  1. On each computer on which you install the ResponseTime for Exchange module, click Start > Settings > Control Panel.

  2. Click Administrative Tools > Services.

  3. Find the NetIQ AppManager Client Communication Manager (netiqccm) service in the list of services. Right-click, and select Properties.

  4. In the Properties dialog box, click the Logon tab. Click to select Log on as...Local System account.

  5. Take the same steps for the NetIQ AppManager Client Resource Monitor (netiqmc) service.

  6. Restart both services.