Food for thought on DS 6.5

dave.dolan · 10-18-2005, 09:00 AM

This may or may not have an effect on the service performance (memory management and the like)

I had to manually grant the Altiris service account the "Act as Part of the Operating System" flag on the DS 6.5 installation, but the installer for DS 6.1 automatically granted it... I'd imagine that there would be some issues on such a taxing service if it couldn't make kernel calls, so I'm pointing it out for you guys to ponder and comment.

So far, I've had a tremendous success with stability after granting that flag and installing the build 903 version of axengine.

Sachiv · 10-18-2005, 10:23 PM

Hiya,

Where would one make this change after the initial install?
Is it an AD thing or done on the server etc?

Cheers.

P.S Where did you get a copy of 903 .. i'm still waiting for someone to post a link for it as we don't have a Altiris rep in NZ

Rgds
Sachiv

Anthony · 10-18-2005, 10:26 PM

Quote:

Originally Posted by Sachiv

P.S Where did you get a copy of 903 .. i'm still waiting for someone to post a link for it as we don't have a Altiris rep in NZ

You can call Altiris support for build 903 of the axengine.

cfrandall · 10-19-2005, 12:16 AM

"Run As Part of the Operating System" simply grants to the account the ability to impersonate other users for authentication, similar to the ability of the LocalSystem account. This doesn't enable kernel calls. Also, DS is a purely a user-mode Win32 application, it's not executing in kernel-mode.

While the new axengine build may indeed be providing your stability, I don't think the new user right granted to the service account has anything to do with it.

Shadrach · 10-19-2005, 04:48 PM

Quote:

Originally Posted by dave.dolan

I had to manually grant the Altiris service account the "Act as Part of the Operating System" flag on the DS 6.5 installation,

Is this the same as running the service as LocalSystem? Changed by right-clicking the service > properties > Log On tab > Log on as: changed to local system account. Is that what you mean ????

cfrandall · 10-19-2005, 06:50 PM

Quote:

Originally Posted by Shadrach

Is this the same as running the service as LocalSystem? Changed by right-clicking the service > properties > Log On tab > Log on as: changed to local system account. Is that what you mean ????

It's not the same as using LocalSystem as the service account, though the user right is one that LocalSystem also has.

It's a way to increase the rights available to a user account being used for the service. Typically you'll use a domain user account for the service, and may need to add rights such as "Run as part of the operating system"

dave.dolan · 10-21-2005, 12:21 PM

Thanks cfrandall. Like I said I wasn't sure. Just noticed it.