Accounts and Groups in Configuration Manager

Microsoft System Center Configuration Manager 2007 uses many accounts, groups, and SQL Server database roles to perform management functions on the site server, site systems, site database server, and client computers. Configuration Manager 2007 can perform many management functions using the Local System account, which simplifies management because the operating system manages the account and password. Some functions, however, require an actual user account, group, or database role. The following section describes all of the accounts used by Configuration Manager 2007, their required permissions, and the account creation and maintenance, along with any recommended best practices for using the account.

In This Section

• Accounts Configured in the Configuration Manager Console
  Describes accounts created in either the local or Active Directory Domain Services database and configured in the Configuration Manager console.

• About the Client Status Reporting Service Account
  Describes the account configured on the client status reporting host system for Configuration Manager 2007 R2

• About the Database Roles for Configuration Manager
  Describes database roles created in the SQL Server database and used to manage access to Configuration Manager database resources.

• About the Proxy Account for Internet-Based Clients
  Describes the account configured on the Configuration Manager client computers in the Control Panel.

• Configuration Manager Groups
  Describes groups created in either the local or Active Directory Domain Services database and used by Configuration Manager.

• Windows Accounts Used by Configuration Manager
  Describes accounts used by Configuration Manager but not actually configured in the Configuration Manager console.