Discussion:
Can Administrative Console rights be assigned by function or role?
(too old to reply)
LL
2005-03-29 19:25:02 UTC
Permalink
Is there a way to allow Exchange Administrator rights to only modify the
Exchange Server Managemenent Pack and not be able to modify all other packs
or server settings? Same applies for SMS Administrators how do you seperate
the roles?
Arie de Haan
2005-03-30 11:00:32 UTC
Permalink
Post by LL
Is there a way to allow Exchange Administrator rights to only modify the
Exchange Server Managemenent Pack and not be able to modify all other packs
or server settings? Same applies for SMS Administrators how do you seperate
the roles?
Nope nbot possible at this moment. I thought i've read somewhere that it
might be included in the next version of MOM. You could also submit it
as a request to http://lab.msdn.microsoft.com/productfeedback/
--
Greetz,

Arie
This posting is provide "AS IS" with no guarantees, warranties, rigths
etc.
Andy Dominey
2005-03-30 14:05:04 UTC
Permalink
Post by LL
Is there a way to allow Exchange Administrator rights to only modify the
Exchange Server Managemenent Pack and not be able to modify all other packs
or server settings? Same applies for SMS Administrators how do you seperate
the roles?
LL
2005-03-30 14:19:07 UTC
Permalink
If you cannot seperate management pack access by job funtion/security access,
is there an audit trail to report which administrator did what? Example; who
disabled a rule or what changes occured to settings?

Thank-you
LL
Post by LL
Is there a way to allow Exchange Administrator rights to only modify the
Exchange Server Managemenent Pack and not be able to modify all other packs
or server settings? Same applies for SMS Administrators how do you seperate
the roles?
Blake Mengotto
2005-03-31 04:39:14 UTC
Permalink
Auditing has been removed. All you can do, is when you get a MP tuned how
you want it, export it and save it. Week to week just use the res kit to
compare it to your production MP to see if any changes were made.
Unfortunately you will not be able to know who made the changes.
--
Regards,
Blake Mengotto
Email: ***@nospam.hotmail.com
"MOM 2000/2005 - The ultimate solution for monitoring/managing your Windows
OS and applications."
http://www.momanswers.com - MOM solution center resource
http://www.microsoft.com/mom - MOM Application site
http://www.silect.com - MOM Health Reporter
http://www.excsoftware.com - MOM solution provider
Post by LL
If you cannot seperate management pack access by job funtion/security access,
is there an audit trail to report which administrator did what? Example; who
disabled a rule or what changes occured to settings?
Thank-you
LL
Post by LL
Is there a way to allow Exchange Administrator rights to only modify the
Exchange Server Managemenent Pack and not be able to modify all other packs
or server settings? Same applies for SMS Administrators how do you seperate
the roles?
Jakub Oleksy [MSFT]
2005-04-01 17:36:17 UTC
Permalink
These are all issues we are looking to resolve in the next release, but
unfortunately you are quite limited in this regard in the current release.

If you could take some time to provide feedback regarding your wants in
terms of features for the next release, please browse here
http://lab.msdn.microsoft.com/productfeedback/default.aspx. Your feedback
will go a long way in helping us develop our next release.

Thanks,
Jakub
Post by Blake Mengotto
Auditing has been removed. All you can do, is when you get a MP tuned how
you want it, export it and save it. Week to week just use the res kit to
compare it to your production MP to see if any changes were made.
Unfortunately you will not be able to know who made the changes.
--
Regards,
Blake Mengotto
"MOM 2000/2005 - The ultimate solution for monitoring/managing your Windows
OS and applications."
http://www.momanswers.com - MOM solution center resource
http://www.microsoft.com/mom - MOM Application site
http://www.silect.com - MOM Health Reporter
http://www.excsoftware.com - MOM solution provider
Post by LL
If you cannot seperate management pack access by job funtion/security
access,
Post by LL
is there an audit trail to report which administrator did what? Example;
who
Post by LL
disabled a rule or what changes occured to settings?
Thank-you
LL
Post by LL
Is there a way to allow Exchange Administrator rights to only modify
the
Post by LL
Post by LL
Exchange Server Managemenent Pack and not be able to modify all other
packs
Post by LL
Post by LL
or server settings? Same applies for SMS Administrators how do you
seperate
Post by LL
Post by LL
the roles?
Blake Mengotto
2005-04-02 03:56:14 UTC
Permalink
There is one tool that could help you with this..

Silect MP Studio Express (beta now, but will release eventually).

Just get the eval (buy it later), give it to your ExAdmins. Have them
import the Exchange MP, and baseline, tweak it.

After they are done tweaking it, they can give it to you, and you can import
it into MOM.

This is how I plan on handling the people who will be responsible for
SharePoint and LCS.
--
Regards,
Blake Mengotto
Email: ***@nospam.hotmail.com
"MOM 2000/2005 - The ultimate solution for monitoring/managing your Windows
OS and applications."
http://www.momanswers.com - MOM solution center resource
http://www.microsoft.com/mom - MOM Application site
http://www.silect.com - MOM Health Reporter
http://www.excsoftware.com - MOM solution provider
Post by Jakub Oleksy [MSFT]
These are all issues we are looking to resolve in the next release, but
unfortunately you are quite limited in this regard in the current release.
If you could take some time to provide feedback regarding your wants in
terms of features for the next release, please browse here
http://lab.msdn.microsoft.com/productfeedback/default.aspx. Your feedback
will go a long way in helping us develop our next release.
Thanks,
Jakub
Post by Blake Mengotto
Auditing has been removed. All you can do, is when you get a MP tuned how
you want it, export it and save it. Week to week just use the res kit to
compare it to your production MP to see if any changes were made.
Unfortunately you will not be able to know who made the changes.
--
Regards,
Blake Mengotto
"MOM 2000/2005 - The ultimate solution for monitoring/managing your Windows
OS and applications."
http://www.momanswers.com - MOM solution center resource
http://www.microsoft.com/mom - MOM Application site
http://www.silect.com - MOM Health Reporter
http://www.excsoftware.com - MOM solution provider
Post by LL
If you cannot seperate management pack access by job funtion/security
access,
Post by LL
is there an audit trail to report which administrator did what? Example;
who
Post by LL
disabled a rule or what changes occured to settings?
Thank-you
LL
Post by LL
Is there a way to allow Exchange Administrator rights to only modify
the
Post by LL
Post by LL
Exchange Server Managemenent Pack and not be able to modify all other
packs
Post by LL
Post by LL
or server settings? Same applies for SMS Administrators how do you
seperate
Post by LL
Post by LL
the roles?
Kevin Beares [MSFT]
2005-04-06 18:18:58 UTC
Permalink
Hi there,

Please do not use ***@microsoft.com any longer. We would prefer that
enhancement requests and bugs come to us via the feedback center.
http://lab.msdn.microsoft.com/productfeedback/default.aspx.
--
Thanks,

Kevin Beares
MOM Community PM
--
This posting is provided "AS IS" with no warranties, and confers no rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
Post by LL
Is there a way to allow Exchange Administrator rights to only modify the
Exchange Server Managemenent Pack and not be able to modify all other packs
or server settings? Same applies for SMS Administrators how do you seperate
the roles?
Loading...