weakness / strength to use the local system for vSphere services account

Beyond to create Active Directory accounts for the connection of your server vCenter to a SQL remote box, is there a better practical reason to create an AD account to run your services of vSphere?

The default is to use the "Local System" account. Is there an inherent weakness by using the local system account for services such as vCenter, VUM or vConverter?

Hi James. In the service using AD creds accounts can actually be very precarious - a little more info on:

http://articles.TechRepublic.com.com/5100-10878_11-1053581.html (gets interesting about 3/4 of the page down)

http://www.sans.org/reading_room/whitepapers/application/service-account-vulnerabilities_5

Concerning

Owen

If you have found this device or any other useful post please consider the use of buttons useful/correct to award points

Tags: VMware

Similar Questions

  • Cannot use the rollback system for non-system tablespace segment ' TEMP

    Hello world!

    I encountered this error: "cannot use the non-system"TEMP tablespace system rollback segment.

    So what I did to check the cancellation stuffs online.
    SQL> select tablespace_name,status from dba_tablespaces;
    
    TABLESPACE_NAME                STATUS
    ------------------------------ ---------
    SYSTEM                         ONLINE
    UNDO                           ONLINE
    SYSAUX                         ONLINE
    TEMP                           ONLINE
    LARGEDATA                      ONLINE
    LARGEINDEXES                   ONLINE
    MEDIUMDATA                     ONLINE
    MEDIUMINDEXES                  ONLINE
    SMALLDATA                      ONLINE
    SMALLINDEXES                   ONLINE
    XSMALLDATA                     ONLINE
    
    TABLESPACE_NAME                STATUS
    ------------------------------ ---------
    XSMALLINDEXES                  ONLINE
    XXSMALLTABS                    ONLINE
    USERS                          ONLINE
    CONVTABLES                     ONLINE
    UNDO_02                        ONLINE
    
    16 rows selected.
    
    SQL>  SELECT tablespace_name, sum((bytes/1024)/1024) free FROM DBA_FREE_SPACE gr
    oup by tablespace_name;
    
    TABLESPACE_NAME                      FREE
    ------------------------------ ----------
    LARGEDATA                      18.3105469
    SMALLDATA                        10.46875
    SYSAUX                           106.5625
    UNDO_02                            67.125
    XXSMALLTABS                    13.0078125
    CONVTABLES                     170.039063
    MEDIUMDATA                             22
    USERS                           37.265625
    SYSTEM                             55.875
    LARGEINDEXES                   30.5175781
    XSMALLINDEXES                    17.34375
    
    TABLESPACE_NAME                      FREE
    ------------------------------ ----------
    UNDO                             546.9375
    MEDIUMINDEXES                       33.25
    SMALLINDEXES                    31.015625
    XSMALLDATA                     23.6328125
    
    15 rows selected.
    
    SQL> select file#,status from v$datafile;
    
         FILE# STATUS
    ---------- -------
             1 SYSTEM
             2 ONLINE
             3 ONLINE
             4 ONLINE
             5 ONLINE
             6 ONLINE
             7 ONLINE
             8 ONLINE
             9 ONLINE
            10 ONLINE
            11 ONLINE
    
         FILE# STATUS
    ---------- -------
            12 ONLINE
            13 ONLINE
            14 ONLINE
            15 ONLINE
    
    15 rows selected.
    
    SQL> select segment_name, tablespace_name, initial_extent,status
      2  from dba_rollback_segs;
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    SYSTEM                         SYSTEM                                 102400
    ONLINE
    
    _SYSSMU1$                      UNDO                                   131072
    OFFLINE
    
    _SYSSMU2$                      UNDO                                   131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU3$                      UNDO                                   131072
    OFFLINE
    
    _SYSSMU4$                      UNDO                                   131072
    OFFLINE
    
    _SYSSMU5$                      UNDO                                   131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU6$                      UNDO                                   131072
    OFFLINE
    
    _SYSSMU7$                      UNDO                                   131072
    OFFLINE
    
    _SYSSMU8$                      UNDO                                   131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU9$                      UNDO                                   131072
    OFFLINE
    
    _SYSSMU10$                     UNDO                                   131072
    OFFLINE
    
    _SYSSMU11$                     UNDO_02                                131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU12$                     UNDO_02                                131072
    OFFLINE
    
    _SYSSMU13$                     UNDO_02                                131072
    OFFLINE
    
    _SYSSMU14$                     UNDO_02                                131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU15$                     UNDO_02                                131072
    OFFLINE
    
    _SYSSMU16$                     UNDO_02                                131072
    OFFLINE
    
    _SYSSMU17$                     UNDO_02                                131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU18$                     UNDO_02                                131072
    OFFLINE
    
    _SYSSMU19$                     UNDO_02                                131072
    OFFLINE
    
    _SYSSMU20$                     UNDO_02                                131072
    OFFLINE
    
    
    SEGMENT_NAME                   TABLESPACE_NAME                INITIAL_EXTENT
    ------------------------------ ------------------------------ --------------
    STATUS
    ----------------
    _SYSSMU21$                     UNDO_02                                131072
    OFFLINE
    
    
    22 rows selected.
    How do I bring them online?

    I tried this but did not work for me.
    SQL> alter rollback segment _SYSSMU1$ online;
    alter rollback segment _SYSSMU1$ online
                           *
    ERROR at line 1:
    ORA-00911: invalid character
    
    
    SQL> alter rollback segment '_SYSSMU1$' online;
    alter rollback segment '_SYSSMU1$' online
                           *
    ERROR at line 1:
    ORA-02245: invalid ROLLBACK SEGMENT name
    
    
    SQL> alter rollback segment _SYSSMU21$ online;
    alter rollback segment _SYSSMU21$ online
                           *
    ERROR at line 1:
    ORA-00911: invalid character
    
    
    SQL> alter rollback segment SYSSMU21$ online;
    alter rollback segment SYSSMU21$ online
    *
    ERROR at line 1:
    ORA-01534: rollback segment 'SYSSMU21$' doesn't exist
    
    
    SQL> alter rollback segment '_SYSSMU21$' online;
    alter rollback segment '_SYSSMU21$' online
                           *
    ERROR at line 1:
    ORA-02245: invalid ROLLBACK SEGMENT name
    
    
    SQL> alter rollback segment "_SYSSMU21$" online;
    alter rollback segment "_SYSSMU21$" online
    *
    ERROR at line 1:
    ORA-30017: segment '_SYSSMU21$' is not supported in MANUAL Undo Management mode
    
    SQL> ALTER SYSTEM SET UNDO_MANAGEMENT=AUTO SCOPE=SPFILE;
    
    System altered.
    Must I bring each segment online separately? Please guide me.
    Nith

    Published by: user645399 on February 23, 2011 14:52

    user645399 wrote:
    Shouldn't have 2 undo tablespace?

    Is that what you mean?

    Yes, above statements completely wrong.
    If you use single instance database (non-RAC) and then use an undo tablespace

  • EFS is encrypted using the Local System account

    Hey all. I created a Server 2008 R2 to encrypt a set a record by using the domain administrator account. All is well for about a week. Now I can't decrypt files. I looked in the file properties, click Advanced and details and it sees 'SYSTEM (SYSTEM@NT AUTHORITY) as users who can access this file. In the previous files can I decrypt shows administrator. I can't understand why the system account is encryption now all my files in this folder and how do I get those decrypted?

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • A Message in a rectangular box "Messages Agent wants to use the 'Local products' kenchain. appearing on the screen and ask for Keychain password password.  This started after I changed the password of Apple resulting for the purchase of a new iPhone

    A Message in the box 1. "Message agent wants to use the 'Local products' kenchain. "is appearing on the screen and ask for Keychain password password.  This started after I changed the password of Apple resulting for the purchase of a new iPhone.

    My iPhone 5 has been damaged and the screen was not visible.  As a result, I couldn't open the iPhone.  I bought 5 s iPhone and when I got to connect with the iCloud

    I remember the answers to security questions.   The seller must change the password and enter new answers to security questions, I did.  This happened in Bangalore.  When I'm home in Ernakulam, Kochi (India), where I has the Air of Mac, Ipad and my wife had another iPhone and laptop computer Dell, these problems began to come up on the screen and blocks the screen.

    Four Messages are appearing: the first is on the top.

    Other messages are:

    2. ' cloudd wants to use the kenchain 'local products '. '

    appearing on the screen and ask for Keychain password password.

    3. ' com.apple.iCloudHelper.xpc wants to use the kenchain 'local products '. appearing on the screen and ask for Keychain password password.

    4. ' cloudpaired wants to use the kenchain 'local products '. ' is appearing on the screen and ask for Keychain password password.

    It of an upheaval and please suggest how to solve this problem

    Hello remy!

    I see that you are either prompted by iCloud Keychain with various alert messages.  I know it's important to have iCloud Keychain works correctly and I am pleased to offer you an article that should help you.  Please follow the instructions in the following support article:

    If your Mac keeps asking for the password in the keychain

    Thank you for using communities of Apple Support.

    See you soon!

  • can I use the key "reg" for windows 8 to install windows 7 (windows 8 does not work on my system)

    Windows 8 does not work on my system (at the lowest screen resolution)

    can I use the key "reg" of windows 8 to download windows 7. currently have windows 7 starter edition

    Hello
    Thank you for contacting Microsoft Community.

    Unfortunately, you cannot use the keys provided for Windows 8 for Windows 7. In any case, directly upgrade your installation from Windows 7 to Windows 8. The keys are specific to the Windows versions, editions and architectures. They cannot be used between.

  • Is there anyway that I can use the MP3 files for the computer system sounds in windows 7

    Is there anyway that I can use the MP3 files for the computer system sounds in windows 7. Any help would be appreciated, thanks - Joe

    I don't think so. If you convert the .wav files, you could. Google for an MP3 to WAV converter.
     
     
  • HOW CAN I GET A HP LASERJET 4V IN ORDER TO PROPERLY USE THE OPERATING SYSTEM TO XP PRO AND USB USING A PARALLEL CABLE?

    HOW CAN I GET A HP LASERJET 4V IN ORDER TO PROPERLY USE THE OPERATING SYSTEM TO XP PRO AND USB USING A PARALLEL CABLE?

    The printer works at all with this cable?

    The cable has recognized and installed by Windows XP when you logged on to the computer?

    If the cable has been recognized, what steps have you taken to install the printer then (be as accurate and complete as possible)?

    You get an error message?  If so, please provide, without paraphrasing.

    This printer has already been installed on this computer?  If so, with what type of connection?

    And especially, what is the brand and model of the USB to parallel cable?  Many of them do not work.  See, for example, the comments here , which suggests that 25% of the units will simply not work.  This seems to be one of these products you should buy at a local store, rather than on the Internet, then you can continue taking it back until you get a working unit.

  • Why I can boot into safe mode with internet connection, use the operating system, etc., but can not open a normal session without password administrator; who got the disabled.

    OEM Vista Home Premium. Normal startup does not recognize the password. When you click User icon it says: "your account has been disabled. Please, see your system administrator"I looked in the mirror, but it did not help. Booted, press F8, went in safe mode with network connection. Everything seemed to be there. Surf the internet and then started to ask me why I don't have a password here when I did normal start-up. What is the password? Check "Microsoft Answers", but what I came out which was, I need to reinstall the OS, which I can't do it without a drive anyway.  I thought that I've used it before, I knew the password. This computer has been recently "reinstalled" internal folder 'restore '. Something must happen. A unknown password can be removed from safe mode? Ultimately how reinstall you a clean Vista when all you have is the key to product and no local or OEM support? What would be the difference between a password reset disk and the OS disk.  The two would probably be stored side by side. Not to mention that most of us Dummies want to just surf to buy, and if we can not surf, we cannot buy. Dummies help us get back on the internet, Microsoft. At least take care of this shot.

    Hi PAM,.

    In Safe Mode, try to activate the high administrator account http://www.howtogeek.com/howto/windows-vista/enable-the-hidden-administrator-account-on-windows-vista/.  Then log in using account and use it to solve problems with your normal administrator account login via control panel / user accounts / manage other accounts.  Find the one you want and make the appropriate changes to fix it.  If you can't, then you need to address as a corrupt account by using the following procedure:

    To fix this use http://windows.microsoft.com/en-AU/windows-vista/Fix-a-corrupted-user-profile.  If this is the only available administrator profile (you must be an administrator to solve this problem), activate the hidden administrator account (HAA) (i.e. what you did above, or you can do this by using these instructions instead: http://www.computerworld.com/s/article/9001970/How_to_access_the_true_Administrator_account_in_Windows_Vista?taxonomyId=17&pageNumber=1.)

    Once that is done, don't forget to disable the HAA to save it in case it is necessary once again and for safety reasons (since people often try to hack into systems using this account).  Do NOT use the HAA as your administrator account because if you lose the only administrator on the system account or it is damaged again, then you're watered.

    The fact that it says it is disabled gives me to think that you can use the guest or built-in Administrator account already (as normally, you cannot disable an account, but you can with these two which cannot be deleted and only disabled).

    The password reset disk is only good if created before that you need and only to restore a password, do not to activate a disabled account.  Another thing that goes beyond passwords here.

    A recovery disk allows you to do some advanced options of recovery by booting the disk, but it will help you restore the operating system (or help you with this problem either).

    An Installation of Vista genuinve disc (the operating system drive as you seem to be describing) is a disk that contains the operating system.  That, if it is the original disc supplied with the system and is exactly the same as the product OEM key that you must allow you to do a clean OS install (although I would be first backup you'll pretty much lost everything in the process).  The following should help: http://www.vistax64.com/tutorials/117366-clean-install-full-version-vista.html.

    If you have a factory Conditions or a recovery Partition restore disk, then these are alternatives to a clean install if you don't have this disc.  But the procedure varies according to the manufacturer, make and model of PC.  Most of the manufacturers will allow you to buy these records of restoration (for a fee) If you cannot do it with a recovery Partition cannot create diskettes from the recovery Partition or have no other option.  Visit the support site of the computer for information on this topic, available options, and related costs.

    If you cannot enable the built-in Administrator account and cannot access the system in normal mode with this or another administrator account, then I'm afraid a clean install or restore to factory conditions is your only option.

    I hope this helps.

    Good luck!

  • Cannot SSH in vmware player (can use the local IP address but not external IP)

    As above

    Cannot SSH in vmware player (can use the local IP address but not external IP)

    Am new to vmware, so if you need information to help me on what you'll need to tell me how to get

    See you soon

    Vodkaholic27, let me start with the layoff of vodka for a bit and then set Virtual Machine network card to bridged and then assign a static IP address that is appropriate for the guest as the physical LAN operating system is the host.  Then in the local physical network for static IP address router you assigned in the guest OS configure it to allow Port Forwarding on the appropriate port.  Then, you will be able to access from outside local physical host network.  If it's just on the other system on the physical LAN to the host that you want to access the guest you need not set up the Port Forwarding on the router on the local physical host network, simply use linked by a bridge to the network adapter in the Virtual Machine.  If you use NAT to the NIC of the Virtual Machine, then you need to set Port Forwarding in the virtual network Editor.

    Note: The virtual network Editor is not installed by default in Vmware Player 3.x and later versions.

    ==========

    To install the missing virtual network Editor, the command prompt:

    VMware-player-*.exe -e c:\vmptmp
    

    Then in the c:\vmptmp folder find the file c:\vmptmp\network.cab and extract (double-click on the .cab file) vmnetcfg.exe (virtual network editor) file in the working directory of VMware Player usually 'C:\Program VMware Player' or ' C:\Program Files (x 86) \VMware\VMware Player.  You can create a shortcut and place it with the shortcut of VMware Player, if you want to access it more easily.  Note: there are some for all the files to be extracted to then access the network.cab file.

  • Can I use the debit card for purchases of the appstore?

    can I use the debit card for purchases of the appstore?

    Is the debit card issued by your bank to access funds in an account of cheques to the Bank? Or did you buy this debit card at a local store? Apple does not accept debit, sold in stores cards. Often a debit card issued by a Bank works very well.

    By the end of 2012 mini Mac, OS X El Capitan 10.11.4. Apple Watch, 38 mm silver AL, Watch OS 2.2; iPad 2 Air & iPhone 6 + iOS 9.3

  • Is it possible to use the same password for two computers through quickbooks?

    We have two computers that are connected to each other through quickbooks and we must be able to get our e-mails from computers. Is this possible? We need to send invoices to the customers of a computer and the other is used for accounting and payroll.

    Original title: you can use the same password for two computers if they are already linked through quickbooks?

    Hi JayneB,

     

    (1) are you referring to the password of the user account?
    (2) who is the operating system installed on the computer?

     

    Method-

    I would like you to contact the Quickbooks support for assistance.

    Check out the link-

     

    QuickBooks support

     

    Hope this helps!

     

  • I lost the disc to restore my phone and it is no longer supported by the manufacturer. Can I use the installation disc for my desktop with my laptop serial number?

    I lost my laptop computer restore disc and it is no longer supported by the manufacturer. Can I use the installation disc for my desktop with my laptop serial number?

    My title says it all. I have an old HP laptop that they do not send to restore the disc more (I don't know yet I had one; his old laptop from my brother) and I have an installation disc for my new PC. I have a Windows XP Home edition SP2 installation disc. However, as the hard drive of my laptop broke down, I don't know what version of windows it was. I think it should have been an OEM version and the sticker says it was Windows XP Home Edition.

    Now, anyway I tried to install my installation on laptop computer disc, offering series of laptop computer but now it asks me to activate. Will it work if I activate it?

    Thank you

    Unless you are lucky enough to know someone who has a generic OEM drive, which you can borrow, I don't see a practical solution for you.  I advise you to spend the money to buy one, even if you could find one to buy from a reliable source (not eBay!).  Although a generic OEM disc should work with your product key, there is no guarantee that it will work with your product key.

    If your laptop can be retrieved through a restore partition, and you can't borrow a disc that will work with your product key, then you have pretty much exhausted all reasonable or practical options.

    I finally did! I borrowed a copy of a generic OEM drive, through activation and it is!

    Thank you much for the help...

    Now I've done could you help me more? Say now, I returned the drive OEM back (don't want to make an illegal copy) and want to be able to use my current system installed to generate a system disk that will allow me to avoid all the problems I've had up to now. What would you recommend? I've read a few articles on other forums (I did some research!) but is a little confusing. I hope you could help.

    Thank you

    @Carey Frisch - positive Get... you want to help here not only your view of what I would do with my money!

  • BlackBerry smartphones, I can't enter Thai language. How can I upgrade and choose the operating system for my BB9900?

    How can I upgrade and choose the operating system for my BB9900? I need thai input but on the site of H3G Italy software download is not all the language version. I don't know from which site to download.

    Hi niranaja

    If your device is running always on OS 7.0 then try 7.1 any Pack OS carrier that also supports Languages.But of Southeast Asia before opening your computer and uninstall any previous packs if installed OS on it. After that, try this:

    1. download and install on your PC a pack OS with any language by carriers

    • (Make sure you download for the same phone model)

    2. download and install the latest version of BlackBerry desktop from here BlackBerry desktop software software

    Then using software office perform your full backup of your device.

    3. search your drive C: Vendor.xml and delete them, there may be one or two vendor.xml (on changing your Pc folders option to show the hidden files/folders ):

    • C:\Program Files (x 86) \Common Files\Research In Motion\AppLoader
    • C:\Users\Windows UserName\AppData\Roaming\Research in Motion\BlackBerry\Loader XML

    4. go into C:\Program Files Research In Motion\AppLoader. (For Vista or Windows 7 64-bit, the path will be C: > Program Files x 86 > common files > Research In Motion > AppLoader) double-click on Loader.exe.

    Upgrade will continue then after Installation of the new OS restore your BlackBerry Desktop backup

    Software.

    Once done open BlackBerry Desktop Software (7.1) > select Applications. > in the section of language and support for entry , select the language to be added to the BlackBerry smartphone (a + will appear next to the language to install) > click apply.

    KB13067 : How to get smart BlackBerry phone language packs.

    So please try it and let us know.

    Prince

    _____________________________________________________________________________

    Click 'Like' If you want to thank someone.

    If problem resolves mark message (s) as a 'Solution', so that others can use.

  • What happens if a password or authorization is required for a "interactive logon to the local security for domain policy or..?

    I use a pc at home on my wireless router which is password protected.  Under the local security policy, if enable password to access interactive domain requirement, what happens?  [Activate: interactive logon: requires authorization by domain controller...] I block someone tries to access my pc via a domain or I will block my access?  I use windows 8 and windows 7 HP, (different PC)

    Hi Laurie,

    Thanks for posting your query in Microsoft Community.

    According the information you have provided, I understand that you need information about the interactive logon to the local security for the domain policy. I will certainly give you with this information.

    Logon information must be provided to unlock a locked computer. For domain accounts, this security setting determines whether a domain controller must be contacted to unlock a computer. If this setting is disabled, a user can open the computer using cached credentials. If this setting is enabled, a domain controller must authenticate the domain account used to unlock the computer.

    If you face problems more when working with Windows Mail on the Microsoft Community Forum.

  • How to create a window with its own window border other than the local system window border?

    How to create a window with its own window border other than the local system window border?

    For example, a border: a black line with a width of 1, then a transparent line with a width of 5. Inside, it's the content pane.

    In JavaSE, there seems to be for the JFrame paintComponent() method to realize the effect.

    I can't see what you're trying to do now: it's a little trickier. You need stage.initStyle (StageStyle.TRANSPARENT), and I think you have to imitate the transparent part of the border by the presence of a second vessel inside the root container, properly positioned.

    Something like:

    
    import javafx.application.Application;
    import javafx.application.Platform;
    import javafx.event.ActionEvent;
    import javafx.event.EventHandler;
    import javafx.scene.Scene;
    import javafx.scene.control.Button;
    import javafx.scene.layout.AnchorPane;
    import javafx.scene.layout.StackPane;
    import javafx.scene.paint.Color;
    import javafx.stage.Stage;
    import javafx.stage.StageStyle;
    
    public class CustomBorderExample extends Application {
    
      @Override
      public void start(Stage primaryStage) {
      AnchorPane root = new AnchorPane();
      root.setStyle("-fx-border-color: black; -fx-border-width: 1px; ");
    
      StackPane mainContainer = new StackPane();
        AnchorPane.setTopAnchor(mainContainer, 5.0);
        AnchorPane.setLeftAnchor(mainContainer, 5.0);
        AnchorPane.setRightAnchor(mainContainer, 5.0);
        AnchorPane.setBottomAnchor(mainContainer, 5.0);
      mainContainer.setStyle("-fx-background-color: aliceblue;");
      root.getChildren().add(mainContainer);
    
      primaryStage.initStyle(StageStyle.TRANSPARENT);
      final Button closeButton = new Button("Close");
        mainContainer.getChildren().add(closeButton);
        closeButton.setOnAction(new EventHandler() {
          @Override
          public void handle(ActionEvent event) {
            Platform.exit();
          }
        });
      primaryStage.setScene(new Scene(root,  300, 200, Color.TRANSPARENT));
      primaryStage.show();
      }
    
      public static void main(String[] args) {
      launch(args);
      }
    }
    

Maybe you are looking for