By default, whenever any of the components of Storage Manager for Active Directory are installed on a computer in a domain, the SMProxyRights universal security group is granted membership in that domain's Administrators built-in security group. This grants the product all of the necessary permissions to read and write attribute values on objects in the domain. This also eliminates the need for theprivilege to be granted to the SMProxyRights group on each domain controller in the domain.
IMPORTANT:If your organization's security policies do not allow for SMProxyRights to be a member of each domain's Administrators built-in security group in each managed domain, then you need to explicitly grant permissions and extend rights in Active Directory to SMProxyRights at the domain level of every managed domain. Please contact Micro Focus technical support for assistance when configuring these detailed permissions.
By default, whenever any of the components of Storage Manager for Active Directory are installed on a member server in a domain, SMProxyRights is granted membership in the built-in Administrators group on the member server.
On other servers in the domain that are hosting user or collaborative storage managed by Storage Manager for Active Directory, you must also grant SMProxyRights group membership in the built-in Administrators group. This is necessary because there are many storage management actions performed that require membership in this group regardless of the LSA privileges that the user has been granted—in particular, managing file shares and directory quotas.
Additionally, the other servers in the domain that are not hosting components, but are hosting user or collaborative storage, must have the rights and privileges described in the table above, along with Full Control share permissions. The easiest way of granting these rights and privileges is through Group Policy objects in Active Directory.
As explained in Micro Focus Storage Manager 5.2 for Active Directory Installation Guide, you must grant Full Control sharing and security privileges to the SMProxyRights group for each share that Storage Manager for Active Directory will manage.