cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
617
Views
0
Helpful
3
Replies

AD permissions on a Windows 2008 server runnng LMS 4.0

ANDERS HANSSON
Level 1
Level 1

Hello

I would like to hear experiences regarding AD permissions on Windows 2008 servers running CiscoWorks LMS.

Some customers have strict permissions which seems to disturb LMS processes.

I do not find any guidelines in the installation docs.

Thanks in advance

Anders Hansson, Sweden

3 Replies 3

Michel Hegeraat
Level 7
Level 7

The only relation between LMS and AD is when you use AD module in LMS for user authentication.

LMS does all its things on the local server disks using the casuser account it created for that purpose.

When it goes out on the network it does not use AD. SNMP, TELNET, SHH, etc.

Cheers,

Michel

Weel, I had one customer with a AD policy that did not allow loacl users on servers. That stopped casuser. And I know that UAC should be turned off.

Any more like that?

Regards

I see better what you mean now I didn't associate AD with the windows domain.

.

Yes I too had a customer where the LMS server down after it was "targeted" by a GPO from a policyserver.

I was good for doing a reinstall of LMS until on of people of their network team found what policy clobbered the server. He could then revert the damage.

Basically the server is best left alone as well as the casuser account.

Actually the prefered situation from cisco is to take the machine out of the domain (standalone).

Cheers,

Michel

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: