User Accounts and Groups Checklist Worksheet
When installing Microsoft System Center Service Manager, there are a lot of things to consider to make sure the install goes well and will be easy to modify in the weeks, months and years to come.
In order to maintain a secure, stable and maintainable SCSM environment, it’s important that all required user accounts are set up with individual service accounts, long secure passwords, and only the necessary rights to get the job done.
Below is a checklist worksheet of the user accounts and groups that would be needed for a typical installation of both SCSM and Cireson products. Each person installing SCSM and/or Cireson products may have a different setup, different app and a different number of environments, but this checklist should cover all the items needed (just remove the ones that are not relevant to your environment).
The environment column is for recording what environment the account is for. It is best practice to have a different service account for the same function across dev, test and production environments to ensure that changing the password in one does not impact the other environments.
* Ensure GPO is not going to pull users or groups off computers
* Ensure the service accounts are not in OUs or Groups that will restrict “Logon as a service”
* Ensure the service accounts are not in OUs or Groups that will restrict “Batch logon”
* Ensure the passwords will not be changed
* Ensure the passwords do not contain $ or ‘
There are also several user groups that are required for each of the items below:
*Can use company naming convention for prefix e.g. scsm_ scsm. scsm-
