vWorkspace creates "pnadmin" local admin accounts on Terminal Servers. Do those accounts have to be in Local admins group or I can change its membership to say, "Power Users"?
The system automatically creates the pnadmin account, and ensures that it is in the local Administrators group. Our "database manager" service periodically checks on this account. If you were to move it to Power Users, the service would automatically add it back as a member of Administrators.
The auto-generated password is 28 characters and includes a random combination of upper and lower case letters, numbers, and symbols.
If our service can't validate the account, it will reset the PNAdmin password on the local computer to the known password from the database. Therefore changing the password manually will only serve to temporarily incapacitate certain functions in our services which rely on that account.
If the vWorkspace administrator feels that the PNAdmin password has somehow been compromised, a new password may be generated by running the management console with the -NewAdminPW command line switch. Once this is done, all instances of the database manager and broker services should be restarted so the change propagates quickly throughout the farm.
DELL-Adam Dr
28 Posts
833
1
Posted August 30th, 2010 23:00
Ivan,
The system automatically creates the pnadmin account, and ensures that it is in the local Administrators group. Our "database manager" service periodically checks on this account. If you were to move it to Power Users, the service would automatically add it back as a member of Administrators.