oqueck
Flexera
Flexera

Do not allow storage of passwords

Hi,

we've installed FlexNet Manager Suite 2019 R2 in a high secure customer environment and its global policy will not allow the setting for Network access as being Do not allow storage of password and credentials for network authentication set to Disabled. In the installation guide it is stated that if it is Enabled some errors are appearing in Windows Task Scheduler but why exactly is this setting needed and is there no other workaround (except using BMC Control M) to keep FNMS up and running in such high secure customer environments ?

Thanks & best regards

Oliver

6 Replies
kclausen
Flexera
Flexera

Re: Do not allow storage of passwords

The Scheduled Tasks required by the Batch Processing server must be run using the Service Account, and to create a task in the Microsoft Task Scheduler automatically, you must provide the Logon and the Password so that scheduled task will run as the Service Account.

In fact, if this policy is not Disabled, the PowerShell script that is run during the installation of FNMS will fail as it is not able to create the Scheduled Tasks.

oqueck
Flexera
Flexera

Re: Do not allow storage of passwords

Hi,

thanks for the reply, but is my assumption correct, that it only needs to be Disabled during installation to be able to run the PowerShell scripts and during an upgrade ? and in between the setting could be set back to Enabled ?

Thanks & best regards

Oliver

0 Kudos
kclausen
Flexera
Flexera

Re: Do not allow storage of passwords

@oqueck  - The policy must always stay Disabled.  If you enable the policy, Windows will delete all of the stored password credentials, and then all of the Scheduled Tasks will stop working.

0 Kudos
jlu_tmg100_c
Active participant

Re: Do not allow storage of passwords

A fix for this would be for FNMS to support Group Managed Service Accounts.

I've previously raised an enhancement request for this, as case 01826878

Can I ask anyone experiencing this please get Flexera Support to add your company/customer to that case.

In the long term, this will add weight to this issue, and get it fixed sooner.

thanks,

j