5.7

Create VCM Domain Accounts
VCM requires that you create domain accounts with certain permissions. In the VCM Typical Installation,
you have the option to use the built-in Local System account in place of some of the accounts.
Before installing VCM, create or identify the domain accounts to use for each of the VCM functions. Keep
the credentials on hand for when the installation prompts for an account username and password.
n
All of the accounts must be domain accounts and not local machine accounts.
n
If you plan to select the built-in accounts option, you only need to prepare the following:
n
The VCM Administrator account for logging in during installation
n
If collecting Windows machine data over the DCOM protocol, the Default Network Authority
account
n
You can reuse an account for more than one function, but dedicated accounts might be useful for
troubleshooting and tracking.
The Collector, VCM Remote, Tomcat, and vSphere Client VCM Plug-in can be the same account. If you
reuse one account, apply the permissions shown for the Collector service account.
IMPORTANT Never use the service accounts for logging in to the VCM Console or for any other purpose.
Logging in to VCM using a service account can lead to unexpected or inconsistent behavior. Services that
use the same account as a logged in user might modify the logged in user's current role or the machine
group, or log the user out of the system.
Account Permissions
VCM Administrator During installation only, local admin on VCM Collector and Web
server
During installation only, system administrator access in VCM SQL
Server on the database server
Must be an interactive account and separate from the other
accounts in this table
VCM Collector Service Local admin on VCM Collector and Web server
Not a domain administrator
Not an interactive user account
VCM Remote Service Local admin on VCM Web server
Not a domain administrator
Not an interactive user account
VCM Tomcat Service Local admin on VCM database server
Public access on VCM databases
Not an interactive user account
vSphere Client VCM Plug-in
Service
Local admin on VCM Web server
Not an interactive user account
Table 1–1. VCM Domain Accounts to Create
Preparing to Install VCM
VMware, Inc.
9