HP StorageWorks Storage Mirroring Recover User's Guide (T5437-96008, November 2009)

650 of 739
● The target's Storage Mirroring service logon account. If the target's Storage
Mirroring service is configured to log on as the System account, the target's Active
Directory computer account should be assigned the permissions.
● The account specified in the failover monitor configuration.
Use the following procedure to assign the Write servicePrincipalName permission to a
user or group:
1. Start Active Directory Users and Computers.
2. Select View, Advanced.
3. Locate the source's computer account.
4. Right-click on the source computer account and select Properties.
5. Select the Security tab and click the Advanced button.
6. If the account or group you want to add is not listed, click Add to add it.
7. Select the account or group and click View/Edit.
8. Select the Properties tab and check Validate Write servicePrincipalName.
9. Click OK twice.
10. Close Active Directory Users and Computers.
Exchange credentials
Proper rights must be assigned to the account that is entered when the Application
Manager prompts for credentials. If these credentials are not properly assigned, you will
be prompted to enter alternate credentials before protection can be enabled.
For Exchange, you must first configure all permissions as described in Application
Manager Credentials. In addition, the user must be an Exchange Full Administrator.
In order to operate the Application Manager for setup and to manage failover and
failback for Exchange, the following permissions are required:
● The user running the Application Manager must have rights to manage Exchange
in order to query and modify the Exchange Active Directory objects. The
Configuration Container resides in the root of the Active Directory forest and
contains the Exchange organizational objects.
● The user running the Application Manager must be an Exchange full administrator
at the organizational level, as delegated via the Exchange System Manager at the
user level or have delegated rights via the Application Manager Delegate Rights
control, described in Delegating Exchange administrative rights. The Application
Manager will first attempt to impersonate the current logged-on user before
prompting for different credentials.
Note:
Rights must be delegated to a specific user and not the group the user belongs
to in order for the Application Manager to recognize them.