User Accounts for DSM Services

DSM Services - Overview

Ivanti DSM uses several components that are implemented as Windows ser­vices:

  • Distribution Service
  • DSM Core Services
  • DSM Runtime Service
  • Service Installation Service (SIS) – service for automatic installation of the DSM Management Services

Depending on the usage of DSM modules and AddOns, further services may be added.

Distribution Service

Ivanti DSM uses an integrated distribution service for distributing data between depots. This windows service is installed as a management application on a Management Point.

For technical reasons you will also need the Distribution Service even if you are initially only using one depot.

DSM Core Services

The DSM Core Services start automatically when the computer is started (i.e. before the user logs on). The DSM Core Services evaluate the current configuration with the ICDB and update the current configuration, if required.

DSM Runtime Service

Ivanti DSM uses an integrated installation service, the DSM Runtime Service. The DSM Runtime Service enables you to exe­cute copy or registry change commands for which the logged-in user has no permissions.
The DSM Runtime Service starts automatically when the computer is started, as soon as the DSM Core Services have been started successfully.

Service Installation Service (SIS)

There are several ways to install the DSM Runtime Service on the managed computers. The easiest method is to use an additional service, i.e., the Service Installation Service (SIS). Advantage: The DSM Runtime Service is automatically installed on every managed computer as soon as it is needed. The SIS is installed as a windows service and management application on a Management Point.

User Accounts

The DSM services require user accounts to access the Management Points or depots.

Recommendation: Use separate user accounts for the DSM Management Services. Create the following domain user accounts:

  • User account for the Distribution Service
  • User account for the DSM Runtime Service
  • User account for Depot Access
  • User account for the SIS (Service Installation Service)
    The SIS user account must be the local administrator on every computer that is to be managed (so the SIS can install the DSM Runtime Service).
    - In a domain you can achieve this by using a domain administrator­ account.