?
Solved

Configuring Read/Write Community String through Group Policy

Posted on 2008-06-24
8
Medium Priority
?
5,464 Views
Last Modified: 2009-01-21
Is there any way of configuring the Read/Write community strings trhough Group Policy?  We have Windows 2003 and what to configure all servers with the same SNMP community settings.  Some of our monitoring tools require Read/Write such as HP System Management.
0
Comment
Question by:madhour
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 26

Expert Comment

by:MidnightOne
ID: 21856022
For HP Systems management, we've discovered it requires at least two community strings with read-only access: public and private, with the loopback address being a trap destination. Without it, HP Insight Manager tends to fail rather badly - the front page will not load properly.

THAT said, you can configure SNMP via group policy. Try this:

In the left pane, go to:
Computer Configuration
      Administrative Templates
            Network
                  SNMP
                  
In the right pane, right click Communities and choose Properties
Click the radiobutton Enabled
Click the button Show
Click the button Add...
add the SNMP community strings

In the right pane, right click Permitted Managers and choose Properties
Click the radiobutton Enabled
Click the button Show
Click the button Add...
add the Ip addresses or hostnames for the managers of this device

In the right pane, right click Traps for public community and choose Properties
Click the radiobutton Enabled
Click the button Show
Click the button Add...
Add the trap destinations
0
 

Author Comment

by:madhour
ID: 21856844
This does not seem to be working.  I thought a Public community string is not great for Server Security.

This is my settings:

Traps tab
Community Name:  public
Trap destinations:  blah

Security tab
Accepted community names:  
blah        READ ONLY
myCmtName    READ ONLY

Accept SNMP packet
localhost
myserver
                                                 
0
 
LVL 26

Expert Comment

by:MidnightOne
ID: 21857082
Using public and private for community strings isn't good, but unfortunately they're a requirement for HSIM to function properly.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:madhour
ID: 21857214
I don't think I will use HP System Management then.  Is there anyway to add read/write community string via Group Policy?
0
 
LVL 26

Expert Comment

by:MidnightOne
ID: 21858104
As far as I've been able to determine, the default SNMP GPO only adds READ-ONLY community strings.
0
 

Author Comment

by:madhour
ID: 21858264
Yes.  That is correct.  I was hoping someone can post if there is an alternative way to put the read/write entry
0
 

Accepted Solution

by:
WTDC earned 1000 total points
ID: 22615196
0
 

Expert Comment

by:Felicity_Harte
ID: 23428289
Comment:

With HP Sim although it is a requirement to use snmp community names they can be either read or write, but you can choose anynames you want and not just have to use the default Public and Private.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question