Today, a large number of alerts were produced that the runas account was unable to log on to our Windows Server agents because the account is not granted the "Allow log on locally" user right. This has never occurred for as long as I have been running Operations Manager. The account it is referring to is one of the default action accounts. I use the System for default action account on our agents. At this time, I have no need to use the other account. For discoveries, I am using my own administrative account credentials. As for operation tasks, they are executed as System from the agent. So my question is why were these generated today when it never happened in the past? I looked at the OpsMgr event logs and didn't see anything helpful. For security reasons, in most cases, we only grant Administrators "log on locally" for our servers, so I can understand the logon failure. Now I have most of our system showing up in Warning state because of this. Will it clear up on its own or do I have to manually reset the health on every agent? Will it happen again? Again, this is the first time I ever saw this happen. Thanks.
↧