How to Reset the Administrator Group in Operations Manager 2007
If the wrong group is configured for the Operations Manager 2007 Administration role, you will be unable to start the Operations Console. Use the following procedures, in the order given, to reset the group assigned to the Administrator role.
Note
Active Directory Domain Services integration will not work if local machine group is used as the Operations Manager 2007 Administrators group
To stop the OpsMgr SDK Service
Log on to the computer with an account that is a member of the Administrators group.
On the Windows desktop, click Start, and then click Run.
In the Run dialog box, type services.msc and then click OK.
In the Services dialog box, right-click OpsMgr SDK Service and then click Stop.
To edit the MOMAuth.xml file
On the Windows desktop, right-click Start, and then click Explore.
In the <drive letter>:\Program Files\System Center Operations Manager 2007\SDK Service State folder, right-click MomAuth.xml and then click Edit.
Note
<drive letter> is the drive on which Operations Manager was installed (for example, C).
In the MomAuth.xml file, search for Description="OperationsManagerAdministrators". Ensure that you have found the AzRole Guid tag.
The following SIDs are listed as members:
- S-1-5-18 (LocalSystem)
- The SID for the Administrators group that was entered during setup.
Replace the Administrators group SID with the desired SID.
Note
The SID for BUILTIN/Administrators is S-1-5-32-544.
Open Notepad, click File, and then click Save.
To copy MOMAuth.xml into the clipboard
In Notepad, click Format, and ensure that Word Wrap is not enabled.
Click Edit, and then click Select All.
Click Edit, and then click Copy.
Close Notepad.
To replace the contents of the Data field in the AuthorizationStore table
On the Windows desktop, click Start, point to Programs, click Microsoft SQL Server 2005, and then click SQL Server Management Studio.
In the Connect to Server dialog box, click Connect.
In the Object Explorer pane, expand Databases, right-click OperationsManager, and then click New Query.
In the query pane, type update authorizationstore and then press ENTER.
Type set Data = '.
Press CTRL+V to paste the contents of the MOMAuth.xml file.
Type ' (single quote), and then click Execute.
Click File, and then click Exit.
To start the OpsMgr SDK Service
On the Windows desktop, click Start, and then click Run.
In the Run dialog box, type services.msc and then click OK.
In the Services dialog box, right-click OpsMgr SDK Service and then click Start.
Click File, and then click Exit.
See Also
Other Resources
About Security in Operations Manager 2007
Security Considerations in Operations Manager 2007