System Requirements

Permissions

When installing Enhanced Notification Service for SCOM, you should take into account the following security considerations.

Create a Windows Domain User Account to use as a Service Account

The service account should be a domain account and a Local Administrator on the machine where the service is installed. Our service uses Winsocks to open the SMTP listening port so local administrator rights are needed on the machine where it is being installed.

You can (re)use the System Center Operations Manager Action account if you like. To find your SCOM Action account, from the Operations Manager Shell run:

Get-SCOMRMSEmulator | ft ActionAccountIdentity

The Operations Manager Action account is already a member of the needed OpsMgr User role below. (but you might have to add it to the Local Administrators group)

Add the Service Account to the Operations Manager Administrator User Role

The service account used must also be a Operations Manager Administrator inside System Center Operations Manager due to the fact the service pulls Operations Manager variables such as console web url and needs management pack access.

In the OpsMgr console, goto Administration -> Security -> Users Roles and add the Service account to Operations Manager Administrators group.