How to Create and Configure a Run As Profile in Operations Manager 2007
Applies To: Operations Manager 2007 R2
The process of creating and configuring a custom Run As Profile consists of four steps:
Identifying the class, group or objects the Run As Account will be applied to.
Creating and configuring Run As Accounts.
Associating the Run As Accounts with the Run As Profile.
Configuring the distribution of Run As Account object credentials to specific computers.
This procedure can be used for creating and configuring a new Run As Profile, or you can use the configuring section to modify or configure Run As Profiles that are pre-existing in your management group. This procedure assumes that you have not previously created a Run As Account object.
To create a Run As Profile
Log on to the Operations console with an account that is a member of the Operations Manager Administrators role for the Operations Manager 2007 management group.
In the Operations console, click Administration.
In the Administration pane, expand Administration, expand Run As Configuration, select the Profiles container. Right-click in the Results pane, and then click Create Run As Profile. If this is your first time through the Run As Profile wizard, be sure to read the text on the Introduction page.
On the General Properties page, do the following:
Type a display name for the Run As Profile in the Display name box.
Optionally, enter a description for the Run As Profile.
Click New for the Select destination management pack list to create an override management pack if you have not already created one. If you have already created an override management pack, select it from the drop down list and skip to step 9.
In the Create a Management Pack wizard on the General Properties page, type a name in the Name box. Optionally, enter a description for the management pack. Then click Next.
By default, when you create a management pack object, disable a rule or monitor, or create an override, Operations Manager saves the setting to the Default Management Pack. As a best practice, you should create a separate management pack for each sealed management pack that you want to customize, rather than saving your customized settings to the Default Management Pack. For more information, see Customizing Management Packs http://go.microsoft.com/fwlink/?LinkId=140601
On the Knowledge Article page, click Edit if you want to provide summary, configuration, additional information, and external knowledge sources information about this management pack.
Click Create. This returns you to the General Properties page of the Run As Profile wizard.
On the Run As Accounts page, click Add to open the Add a Run As Account page.
Click New which starts the Create Run As Account Wizard and opens the General Properties page.
From the Run As Account type box, select the type of account that you need to create. This is specified in the management pack guide.
Type a name in the Display name: box, optionally type a description, and then click Next.
On the Credentials page type the user name and password of the actual credential that you want the Run As Profile to use in the respective User name, Password, and Confirm password boxes.
Ensure that the correct domain for the credentials is selected in the Domain list. Click Next.
On the Distribution Security page, select the Less secure or More secure option as instructed by your management pack guide. Note that if you choose the Less secure option, the credentials are accessible to the administrators of all recipient computers. For more information about credential distribution security, see Run As Profiles and Run As Accounts in Operations Manager 2007.
On the Run As Account Creation Progress page, when creation is complete, read the warning note, and then click Close. This returns you to the Add a Run As Account page.
In the This Run As Account will be used to manage the following objects area select All targeted objects or A selected class, group or object options, per the configuration values in your management pack guide.
If the A selected class, group or object box is prepopulated with a value, click OK; otherwise click Select and pick either ClassGroup, or Object as instructed by the management guide. This opens the respective Class search, Group search, or Object search page.
In any of the search tools, type your search or filter criteria, and click Search. The results are displayed in the Available items box.
Select the item you want the Run As Account object to be used to manage, and then click OK.
Click OK. This returns you to the Run As Accounts page in the Run As Profile Wizard.
If you want to add additional Run As Accounts, click Add again and repeat steps 10 through 23; otherwise click Create.
This procedure assumes that you selected the More secure option and presents the remaining steps in order. If you are selected the Less secure option skip to step 29.
On the Run As Profile Wizard Completion page you see all the Run As Accounts that were configured with the More secure setting listed as a link. It is now necessary to select each Run As Account one at a time and configure credential distribution.
Double-click an account; this opens the Run As Account Properties page to the Distribution tab. You will see your security level selection and the Selected computers displayed. You can edit both from here.
Click Add for the Selected computers box and do the following:
Select Search by computer name (Default) or Show suggested computers, or Show management servers.
Optionally type in a value in the Filter by: (Optional) box.
Click Search. The result set is returned in the Available items box.
Select the computers you want from the result set, and click Add. This adds the selected computers to the Selected objects box.
Click OK. This returns you to the Completion page of the Run As Profile Wizard. A green checkmark appears next to the accounts that you have successfully completed distribution configuration for.