Which permissions are needed for OpsMgr 2007 SP1 Cumulative Hotfix?

  • Article

Some days ago I got a question from a customer why their OpsMgr 2007 SP1 Cumulative Hotfix installation was failing.

As you might know this update provides a cumulative rollup of hotfixes for Microsoft System Center Operations Manager 2007 Service Pack 1 together with the following improvements:

  • Support for Windows 7
  • Support for Windows Server 2008 R2
  • Support for SQL Server 2008 and SQL Reporting Services 2008 Upgrade
  • Additional fixes and improvements

Note This update applies to System Center Operations Manager 2007 SP1 only.

 

SYMPTOMS

They were getting the next error message when running the Run Server Update.

image

The first thing I do, is look at the install log file if an installation is failing. So type %temp% in your run box and go to the temp folder and look for the log file.

While searching the log file I noticed it had probably something to do with the (database) permissions for the account which run the hotfix.

 

“"MSI (s) (B8!94) [10:35:51:068]: Creating MSIHANDLE (28) of type 790531 for thread 2452

2009-12-15T10:35:51.0687372+01:00        Warn:        SetRootHealthService: The sql client throws exception Cannot open database "OperationsManager" requested by the login. The login failed.

Login failed for user 'CONTOSO\Test_UserSP1Hotfix'."

 

CAUSE

The account running the hotfix needs db_owner permissons for the OperationsManager database.

 

RESOLUTION

In my demo environment (An all-in-one RMS server with all OperationsManager databases on that machine) the account installing the hotfix needed the next permissions.

Please keep in mind I only tested this in my demo environment. If you have your OpsMgr databases installed on separate servers more permissions may need to be configured.

OpsMgr Permissions:

  • Member of the Operations Manager Administrators Role

OS permissions:

  • Member of the Local Admin Group

Database Permissions:

  • Public for server-wide  security

clip_image002

 

  • Db_owner for OperationsManager database

clip_image004

For the Reporting Server Update no extra database permissions were needed.

 

MORE INFORMATION

You can find more info about the OpsMgr 2007 SP1 cumulative hotfix on Kevin Holman’s weblog.

 

Posts in this blog are provided "AS IS" with no warranties, and confers no rights. Use of examples are subject to the terms specified in the Terms of Use