User mangement

[Ayman Altounji]

My organization is implementing a very large enterprise with several hundred 2000 Proliant servers that will have 5.3 agents and CIM 7 on 3 servers at the top of the forest. Can I set access on the 3 levels, administrator, Operator and User with OU's from the Active Directory instead of individual accounts to ease network administration.

Any assistance with SNMP security would also be helpful, for everything I can find leaves the systems exposed to attack. Thanks in advance for any input.

[Ayman Altounji]

There isn't a way to base access to CIM7 on groups or OU's today, however this is something we are seriously considering for the future.

As for SNMP I would make sure that IP-address based security was enabled (although make sure that localhost is one of the valid hosts or the agents won't work) and that you have a sufficiently unique Community String. This does expose you to IP address spoofing, but then that probably causes a lot of other trouble in your enterprise in any event.

Scott