Setting Credentials for the Job System to work with Enterprise Manager

Windows systems require that you set the correct credentials for the Jobs system to work properly in Enterprise Manager. By default, the Management Agent service is installed as a LocalSystem user. When submitting jobs, such as stopping or starting the database, the user submitting the job must have the Log on as a batch job privilege enabled.

Perform the following steps to establish that privilege for any
operating system user who needs to submit an Enterprise Manager job.

1. Start the Local Security Policy tool:
   
   • Windows 2000: From the Start menu, select Control Panel, Administrative Tools, then Local Security Policy.
     
   • Windows 2003: From the Start menu, select Administrative Tools, then Local Security Policy.
     
   • Windows XP: From the Start menu, select Control Panel, Administrative Tools, then Local Security Policy.
     
   
   
2. Under the Security Settings list, expand the list to Local Policies.
   
3. Under Local Policies, double-click User Rights Assignment.
   
4. Under Policy, search for the Log on as a batch job policy.
   

   If the Management Agent service is installed as any other user (that is, not LocalSystem), then, in addition to granting the Log on as a batch job privilege, you must grant the "Windows service" user the following three privileges:

   
   
   • Act as part of the operating system
     
   • Adjust memory quotas for a process (This setting is named Increase memory quotas

     on Windows 2000.)

   • Replace a process level token
     
   
   
5. With each policy, perform the following steps:
   
   1. Double-click the policy name.
      
   2. In the Properties dialog box, click Add User or Group.
      
   3. In the Select Users or Groups dialog box, enter the name of the user (for example, jsmith, administrator, and so on.)
      
   4. Click Check Names to check that you have entered the name correctly.
      
   5. Click OK.
      
   
   
6. Click OK to exit the Properties dialog box, then exit Local Security Settings and Administrative Tools.
   
7. Restart your computer.
   

If a user exists locally and at the domain level, Windows gives the
local user precedence. To use the domain user, qualify the user name
with the domain name. For example, to use the user joe in the ACCOUNTS domain specify the user name as ACCOUNTS\joe.

Note: Validated for EM Grid Control 10.2.0.4 - 10.2.0.5

powered by performancing firefox