Omni Web Forum: Service account in AD

	Active Topics Search Help
	Register Login

eControl ~ Installation, Management and Support ( Forum Locked)
Omni Web Forum : eControl for Microsoft and Novell Systems : eControl ~ Installation, Management and Support

Topic: Service account in AD

Author

Message

kenny11lee
Member
Member

Joined: 09-December-2010
Location: United States
Posts: 2

Posted: 09-December-2010 at 9:42am

Hello,
We like the product, but we have grave concerns about the
need for eControl to have a "Domain Admin" service account
with non-expiring password, both are violation of our
security policy.
I am wondering if the service account can work with only
the "Account Management" delegation and expiring password.
I know that latter would work but require manual password
rotation. Is there a way to rotate it automatically.

Thanks,

__________________
Kenny

Gordon Welling
Admin Group

Manager Technnical Support Services

Joined: 11-December-2003
Location: Canada
Posts: 637

Posted: 10-December-2010 at 10:36am

Hello, Kenny.

eControl is dependant upon using an eControl service account that has domain admin privilages to ensure that all management and creation features will work correctly.

You can try changing the group membership assignment for the eControl service account and see what effects it has on your eControl implementation.

If you do not set the account password to not expire, then you will be faced with changing the eControl AD connection whenever the AD password is reset. Forgetting to reset the password in the eControl AD connection will result in an inability to login into the eControl web console for any user until the change is made to the connection.

Omni will not support eControl when it is installed and configured in a manner that does not meet the system requirements as defined in the product's documentation.

You can obtain support from Omni for a customised environment if you engage in a professional services contract with Omni.

__________________
Gordon Welling, CNE MCSE
Account Manager & Product Specialist
www.omni-ts.com

+1.780.423.4200 Phone
+1.780.423.4711 Fax

kenny11lee
Member
Member

Joined: 09-December-2010
Location: United States
Posts: 2

Posted: 10-December-2010 at 10:55am

Thanks for your reply. Much appreciated.

__________________
Kenny

Sorry, you can NOT post a reply.
This forum has been locked by a forum administrator.

Printable version

Forum Jump

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot delete your posts in this forum
You cannot edit your posts in this forum
You cannot create polls in this forum
You cannot vote in polls in this forum

This page was generated in 0.0781 seconds.