When setting up a remote host on Microsoft Windows, what privileges do I have to grant for the Control-M/Agent "This Account" and "Job Owner / RunAs User"?

 

For setting up a Microsoft Windows remote host using WMI, here are the requirements:

1. The Control-M/Agent is installed on either Windows 2008 or a later version.

2. The Log On as option for the CONTROL-M/Agent service is set to "This Account" and have the following:
     a. "This Account" has to be a domain user
     b. "This Account" has to be an ADMINISTRATOR on the Agent server
     c. "This Account" has to have Full permission on the "Sharing" tab of the directory being used as the SYSOUT share.

3. The "Job OWNER" has to have the following:
     a. The "Job OWNER" has to be a member of the Administrator group on the remote host or have access to the executeable, home directory and any other locations needed by the job's command
     b. The "Job OWNER" has to have Full permission on the SECURITY tab of the directory being used as the SYSOUT share
     c. The "Job OWNER" has execute permission on the "<windows>\system32\cmd.exe"
     d. The "Job OWNER" is given Access and Launch and Activation Permissions in COM Security
     e. The "Job OWNER" is given Remote Enable in Windows Management Console >WMI Control > Properties > Security > CIMV2 > Security

4. The SYSOUT directory has to be a network SHARE and the share name needs to be called 'SYSOUT'.
    Example: \\{My Remote Host}\SYSOUT

It is recommended to consult with a Windows System Admin if there are any questions configuring WMI or need help making these changes.
Additional Information:
Customers viewing this solution may find value in the following self-help Connect with Control-M video.



Legacy ID:KA395027