Installing IBM Spectrum Control on a Windows domain

You can install IBM Spectrum Control and Db2® by using a Windows domain or a local user account.

Installing Db2 and IBM Spectrum Control by using local user accounts

Prerequisite: If the local user account is used to install the database repository, this account must be a member of the Db2 administrator (DB2ADMNS) group.
To install IBM Spectrum Control and Db2 by using local user account, complete the following steps:
  1. Install Db2 by using a local user account.
  2. Log on to the Windows domain computer on which you plan to install IBM Spectrum Control by using a local user account that is a member of the local Administrators group and the local Db2 Administrators (DB2ADMNS) group.
  3. On the Single Server Installation Information page, in the User name field, enter a local user account that is a member of local administrator group.

Installing Db2 by using a local user account and IBM Spectrum Control by using a domain user account

Prerequisite: If the local user account is used to install the database repository, this account must be a member of the Db2 administrator (DB2ADMNS) group.
To install Db2 with a local user account and IBM Spectrum Control with a domain user account, complete the following steps:
  1. Install Db2 by using a local user account.
  2. Log on to the Windows domain computer on which you plan to install IBM Spectrum Control by using a domain user account that is a member of the local Administrators group and the local Db2 Administrators (DB2ADMNS) group.

    This user must have the Act as part of the operating system and Login as a service permissions set in the security policy.

  3. On the Single Server Installation Information page, in the User name field, enter a domain user account (with a Windows domain name prefix) that is a member of the local administrators group.
  4. Click Configure Database repository.
  5. On the Configure the Database Repository page, enter the Db2 user name without a Windows domain name prefix, enter the password for the Db2 user, and click Validate.
  6. When the validation is complete, click OK to return to the Single Server Installation Information page.
Restriction: If the domain security policy overrides the local security policy, you must set the indicators on the domain controller computer.

Installing Db2 and IBM Spectrum Control by using domain user accounts

Prerequisite: If the domain user account is used to install the database repository, this user account must have Db2 SYSADM authority.
To install IBM Spectrum Control and Db2 by using domain user accounts complete the following steps:
  1. Install Db2 by using a domain user account.
  2. Log on to the Windows domain computer on which you plan to install IBM Spectrum Control by using a domain user account that is a member of the local Administrators group and the domain Db2 Administrators (DB2ADMNS) group.
  3. On the Single Server Installation Information page, in the User name field, enter a domain user account (with a Windows domain name prefix) that is a member of the local administrators group.
  4. Click Configure Database repository.
  5. On the Configure the Database Repository page, enter the Db2 user name without a Windows domain name prefix, enter the password for the Db2 user, and click Validate.
  6. When the validation is complete, click OK to return to the Single Server Installation Information page.

Resolving Windows domain prevalidation errors

Adding Windows domain user accounts to a local group, such as Administrator or DB2ADMNS, and later deleting these user accounts from the domain controller computer can cause an error when the account is validated.

When you delete user accounts from the domain controller computer, a reference to the user account is created as a security ID on the computer that is a member of a Windows domain. If these references are not removed, the IBM Spectrum Control installation can fail.

To locate the references that have a security ID, complete these steps:
  1. On the domain member computer, click Start > Control Panel > Administrative Tools > Computer Management. If you are prompted by a User Account Control window, click Yes.
  2. In the Computer Management navigation tree view, expand the Local Users and Groups node and select Groups.
  3. In the Name column, look for a security ID like the following example:
    S-1-5-21-337177553-1671989427-887411491-500
  4. To remove a reference, select the security ID and click Delete.
    1. To add the user account back to the group, click Add. The user account now belongs to the group.
When a prevalidation error occurs, depending on the type of user account and the group, error messages might be displayed: 
  • BPCIN0109E An unexpected error occurred......
For more information, review the log files and see the 
IBM Documentation.
    To resolve this situation, use these steps:
    1. On the domain controller computer, open Users and Groups on the Active Directory.
    2. Delete all groups from the user account, and then add the groups again.
    3. Log on to the computer again that is the member of the domain.
    You have to add the DB2ADMNS rights to the user account again.
    Locate the installation log files, lax*-out.txt and lax*-err.txt, for more details about the root cause of the error message. For example, 
    name=DB2ADMNS An error occurred while enumerating the groups. 
The group could be found.
  • BPCIN0244E An error occurred while enumerating the 
local administrator group membership. On the current computer, on 
the Properties page of this group, remove the user names that are 
displayed with a security ID (SID). An example of a SID is 
S-1-5-21-337177553-1671989427-887411491-500 and is used instead 
of a user name.
  • BPCIN0245E An error occurred while enumerating the 
local DB2 administrator group membership. On the current computer, 
on the Properties page of this group, remove the 
user names that are displayed with a security ID (SID).
An example of a SID is S-1-5-21-337177553-1671989427-887411491-500 
and is used instead of a user name.
For more information about these messages, go to IBM® Docs and search for the message number.

In the error message window, click OK to resume the installation program or Quit to restart the IBM Spectrum Control.