{"id":20,"date":"2006-06-03T19:49:16","date_gmt":"2006-06-03T17:49:16","guid":{"rendered":"http:\/\/contoso.se\/blog\/?p=20"},"modified":"2006-12-28T11:57:42","modified_gmt":"2006-12-28T09:57:42","slug":"console-scope","status":"publish","type":"post","link":"http:\/\/contoso.se\/blog\/?p=20","title":{"rendered":"Console Scope"},"content":{"rendered":"<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 10pt\"><font face=\"Calibri\" size=\"3\">To be enable to work with operators console your account has to be member of a MOM security group, MOM Users, MOM Administrators or MOM Authors. You account can be member of a another security group that is member of a MOM security group, group nesting. When you start operators console your permissions will be checked and if you have permission operators console will start. <\/font><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 10pt\"><font face=\"Calibri\" size=\"3\">You account is also bound to a console scope. Console scope is based on computer groups. Console scope control what you can see in the operators console. If a computer group is in your console scope you will enable to work with them in operators console. A account can be member of many console scopes. <\/font><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 10pt\"><font face=\"Calibri\" size=\"3\">Administrator, Operator and User console scope is created during installation and can work with all computer groups. You can modify them, but it is not recommended. If a client is member of for example MOM User security group and you add him\/her to another console scope, the last added console scope will be the one he\/she use. <\/font><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 10pt\"><font face=\"Calibri\" size=\"3\">In MOM 2005 permissions to console scope is based on username and domain, not SID as it use to be. This could give some funny results, for example:<\/font><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 10pt\"><font face=\"Calibri\" size=\"3\">If you have a client named Anton Berg (ANBE) and you add him to a console scope (scope1) and then he quite, his SID will be removed from all security groups in AD, but there will still be a DOMAIN\\ANBE in the console scope. If you then hire a new guy named Antonio Beludas (ANBE) he will be enable to run scope1, because he and Anton Berg have the same DOMAIN and logonname, DOMAIN\\ANBE.<\/font><\/p>\n<p class=\"MsoNormal\" style=\"margin: 0cm 0cm 10pt\"><font face=\"Calibri\" size=\"3\">Console Scope is used to filter computer groups in operators console. This is not a security boundary. If you need a security boundary you will have to deploy multiple management groups and then connect them to each other.<\/p>\n<p>You do all console scope settings in MOM Administrator Console<br \/>\nMOM 2005 Administrator Console<br \/>\n-Micrsosoft Operations Manager<br \/>\n&#8211;Administration<br \/>\n&#8212;Console Scopes<\/font><\/p>\n","protected":false},"excerpt":{"rendered":"<p>To be enable to work with operators console your account has to be member of a MOM security group, MOM Users, MOM Administrators or MOM Authors. You account can be member of a another security group that is member of a MOM security group, group nesting. When you start operators console your permissions will be &hellip; <a href=\"http:\/\/contoso.se\/blog\/?p=20\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[2],"tags":[],"_links":{"self":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/20"}],"collection":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=20"}],"version-history":[{"count":0,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/20\/revisions"}],"wp:attachment":[{"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=20"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=20"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/contoso.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=20"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}