TUCoPS :: Windows Apps :: omanage.htm

TUCoPS :: Windows Apps :: omanage.htm
Dell OpenManage account security issues
Vulnerability

    OpenManage

Affected

    Dell OpenManage Version Assistant Software

Description

    Anthony  Paulina  found  following.    When  you  install   Dell's
    OpenManage Version Assistant software (managed-node version),  the
    installation program asks  for a NT  Domain Validated User  ID and
    Password.  He recently had to change the password for the user  ID
    associated  with  this  software,  however,  when  he  went to the
    systems that had this  software installed, he discovered  that the
    service installed (Dell OpenManage VA Subscription) by the Version
    Assistant doesn't use the ID and password supplied, but rather  it
    uses the system account.

    Anthony  checked  the  registry  key  to  see  if  the ID and / or
    password were being stored in  the registry and couldn't find  any
    entry.  When  he contacted Dell  about this problem,  the only two
    suggestions  that  they  had  for  him  were  to  try changing the
    password  back   to  the   old  password,   or  uninstalling   and
    reinstalling the  Version Assistant  software (neither  suggestion
    being acceptable).

Solution

    Here's the procedure to change the password as provided by Dell:

        - On the Managed Node system, go to the Start menu in Windows,
          select Run and type dcomcnfg.  Then click OK.
        - Browse  the list  of available  components and  double-click
          DovaManagedNodeAgent. Click the Identity tab.
        - Select the  This User: radio  button and enter  a valid user
          name.  Then click OK.