I'm getting a lot of
The Run As account needs to have the "Log On Locally " right.
alerts from our domain controllers and exchange servers, and looking at the alert context it looks as though SCOM's complaining because it's trying to use the SQL Discovery account on these servers.
Obviously I'm not going to just give that discovery account log on locally rights on these servers when it's not necessary - they definitely don't have any SQL installs on them.
How can I tell SCOM to stop trying to discover SQL on these servers? I've tried creating overrides for the basic SQL discoveries in the authoring pane to disable the discovery on the groups I have created for AD and exchange servers, but the alerts keep coming.
I've also checked to make sure that the SQL discovery account is only assigned to the SQL discovery runas profile.