
Ivanti EPM uses an essential service that allows you to run configured tasks.Â
Usually are given, that the (Landesk) Scheduler service should work on a domain user account with high (administrative) privileges over the managed systems.

One of the first configuration tasks, then, is to convert the LocalSystem account to the appropriate domain account, sometimes even the domain administrator.


However, I decided to test a different configuration, leaving the LocalSystem account, and instead creating a group in AD WorkstationAdmins with the account of the computer-server "CORE" Ivanti EPM, and to use the LocalSystem account on the "CORE" server, and on the managed systems use the account of the CORE server computer in the domain. For the experiments described below, an instance of Ivanti EPM version 2020.1 was used.

Then, through GPO Preferences, the WorkstationAdmins group enters the local Administrators group of managed systems:


Once the configuration is done, you can proceed with the actual test to see if the configuration so conceived actually works.
A task performed by the Scheduler - Windows Agent Confiuguration - is assigned to the detected (network scan) device:

After a while, the machine becomes managed and the Ivanti EPM agent works on it:

As you can see, the installation of the agent on the station was successful. Just in case, you may want to check for alternative credentials in the configuration, which used could have changed the result:

So, although the documentation does not describe it, you can use the default configuration of the service account, and by using the computer account (the "CORE" server) achieve the ability to manage computers in the domain (without using the domain administrator here). In addition, there is no need to maintain the password of the service user.
- Support and development of Microsoft and Nintex based applications
- Application design and development including digital processes
- Invoice management
- Requisition management
- Contract management
- Modern Intranet
ISCG sp. z o.o.
Al. Jerozolimskie 178, 02-486 Warsaw
NIP: 5262798378
KRS: 0000220621
Phone