Owner's Manual

Ensuring a Secure Dell OpenManage IT Assistant Installation 217
As a final security step, Server Administrator should be configured to deny
access to user and possibly power user accounts, thereby limiting access to
administrator accounts only. This can be done through the Server
Administrator top navigation bar by selecting Preference and then unchecking
the User Access boxes.
NOTE: You can also limit user access using the Server Administrator CLI command
omconfig preferences useraccess enable=admin.
See the Dell OpenManage Server Administrator Command Line Interface
User’s Guide at support.dell.com/manuals for more information.
In summary, to successfully and securely manage servers per the security
measures introduced here, system administrators should adhere to the
following best practices:
• Ensure that the operating system is up-to-date with the most recent
operating system security patches.
• Implement SNMP community names that cannot be easily guessed.
•Configure SNMP to be
Read Only to limit configuration, update, and
power control to Server Administrator only.
• Configure SNMP to accept requests only from the IP address of the system
running IT Assistant.
• Use tools such as Group Policies in Active Directory
to enforce the SNMP
settings for all servers to be managed.
• Configure Server Administrator to deny user level access.