To install the PCM service, you must use a service installation utility. To prevent such a security risk, install the PCM service only on workstations where users can't stop services. For example, they can write an application that deletes files in a directory that only domain administrators can access. The substituted executable takes on the rights of a domain administrator application, giving the users open access to most of the domain. On a system with a PCM service account, clever users who have local administrator rights can stop the service and replace pcmsvc32.exe with their own executable. The PCM service associates the pcmsvc32.exe executable with the service account you create. For each service, NT's Service Control Manager makes a Registry entry that includes only the service name, service account name, and executable name. The PCM service account must have domain and local administrator rights, so you can use the PCM service only in a domain (not a workgroup) environment.Ĭreating a PCM service account opens up a security risk for unwitting administrators. You can ensure that the account has both privileges by placing it in the Domain Admins global group, which is a default member of each workstation's local Administrator group. This account must be able to connect to the SMS logon server, and it must have administrator rights on every computer you want the PCM service to install software on. To install the PCM service on machines across your network, you must create an account for the service in NT's User Manager for Domains. You don't need to install the PCM service on SMS logon servers the SMS Hierarchy Manager automatically installs the service on these machines. You need to install the PCM service on every NT workstation and server that you want the service to install software on.
Malware used runonly avoid for five upgrade#
Administrators can use the upgraded PCM service to automatically install and upgrade applications on workstations and servers without any user intervention.
However, the version that ships with SMS Service Pack 2 (SP2) extends the PCM service's reach to user desktops-the service can now run on and distribute applications to any Windows NT workstation or server.
Previous versions of the service had limited functionality because they ran only on SMS logon servers and distributed applications only to SMS site servers. Unlike the interactive PCM application, which also comes with SMS, the PCM service does not require end users to participate in the installation process. The Package Command Manager (PCM) service that comes with Systems Management Server (SMS) 1.2 helps administrators distribute applications. Simplifying SMS's application installation across a network
0 kommentar(er)
