Administration Tool

Customizations
1

(imported topic written by SystemAdmin)

Hi,

Currently i have a set up for BigFix Server in a remote database environment. One of the issue im facing now is the Administration Tool Login. In order to login to the Administration Tool, its required the sa account login to connect to the database.

Question: is there anyway that i can configure the sa login to windows authentication?

Thanks in advance.

2

(imported comment written by Shlomi91)

Hi Jeremy,

i have the same setup, and had the same issue.

i believe it was resolved by changing the ODBC authentication to ā€œNT Authenticationā€ rather than SQL authentication.

hope this helps,

Shlomi

3

(imported comment written by SystemAdmin)

i have tested that in 2 environment,

First, (BigFix Server in AD environment)

Tested on this environment, login using domain account, the login windows still the same, did not make any difference, still prompted as sa login account by changing the ODBC setting as mentionedā€¦

Second (local adminsitrator)

Tested on this environment, using local administrator account login, it is working fine and im able to login to the Administration Tool by changing the ODBC setting as mentioned.

Question: just wondering how come its does not make any different on the AD environment, how come the sa login account still hard coded ont he login windows?

Please advise. Really appreciate the clue given. Thanks mateā€¦

4

(imported comment written by Shlomi91)

Hi Jeremy,

iā€™m not totally sure its related to domain vs. local account, it might be the fact that you used a different profile which solved your issue.

try logging in with a fresh domain account (create a fresh profile), and try againā€¦

Shlomi

5

(imported comment written by BenKus)

Hi Jeremy,

You can use this:

HKCU\Software\BigFix\BESAdmin\Settings

ā€œAllowCustomUsernameā€

DWORD

If non-0, user can type in the database username they wish to use instead of ā€˜saā€™

Note that you will need an account with full privileges on the database to set up the system and make new usersā€¦ So if it is not the sa account, it should have the same permissions as sa.

Ben

1 Like
6

(imported comment written by SystemAdmin)

Another way to use Windows authentication is by setting the BES FillDB, BES GatherDB, and BES Web Reports Server services to run as a domain-based service account. Then make sure that service account has dbo priviledges on the SQL server and is a local administrator on the app server.

This configuration works for our organization where we run a remote SQL server.

7

(imported comment written by SystemAdmin)

Ben Kus

Hi Jeremy,

You can use this:

HKCU\Software\BigFix\BESAdmin\Settings

"AllowCustomUsername"DWORD
If non-0, user can type in the database username they wish to use instead of ā€˜saā€™

Note that you will need an account with full privileges on the database to set up the system and make new usersā€¦ So if it is not the sa account, it should have the same permissions as sa.

Ben

Alright Ben, its workā€¦ thanks a lot for helpingā€¦

Thanks guysā€¦