Installing Recast Proxy Separately

This way is only needed if the Recast Proxy was not installed during the Recast Management Server installation or it needs to be installed on a server other than the Recast Management Server.


Recast Proxy is a service that runs under a service account. It can be used to read from Active Directory to populate scopes, or it can be used to run Right Click Tools actions under that Service Account. There is also a “hidden” type of proxy. A Console User Proxy is automatically installed with your standard Right Click Tools installation. The Console User Proxy ensures that the actions you to run in Right Click Tools will run as the logged in user with the logged in user's permissions. These User Proxies do not show up on the Proxies list.


Proxy Service Account Permission Requirements

  • Minimum requirements

    • Local admin on the server where it is being installed
    • Read-only analyst in ConfigMgr Console
    • db_datareader in ConfigMgr DB
    • Read permissions in Active Directory
  • Run Actions as a Service Account

    • Local admin on any device that actions will be run against
    • Read/Write permissions in Active Directory (Write is only required to delete devices from AD)
    • Appropriate ConfigMgr Security Role for intended actions in ConfigMgr Console (Full Administrator for all actions)
    • Permission to MBAM if applicable
  • Collect Warranty Information with Endpoint Insights

    • If your Recast Management Server is installed on a server other than your ConfigMgr SQL DB, the proxy account will need to be added to the "SMS_SiteSystemToSiteServerConnection_MP_(YourSiteCode)" local group on that server. This will allow it to read/write to your "inboxes\auth\" which is required to gather warranty data.

Installing Recast Proxy

Proxies run as a service account. Proxies are useful when you want to run Right Click Tools actions a service account, and can also be used run Right Click Tools actions against untrusted domains. The service account must be a Local Admin on the computer where it is being installed in order to function correctly.

Start the Installer

Installing Recast Device Proxy

Test Connection to the Recast Management Server

Enter the Recast Management Server address and port number, click test to make sure that the Proxy can connect to the Recast Management Server. When the installer responds with "Success" you can click next to continue.

If the installer does not connect to the Recast Management Server, the Proxy will not be installed successfully. You should troubleshoot any error messages that appear in the installer before continuing with the the install.

Enter Service Account Configuration

In the following Window, enter the Service Account information that you would like to use for your Proxy. You can then click Next to continue.

If the User Account Credentials that you enter on the Service Account Proxy Screen do not validate correctly, the Service Account Proxy will not work correctly. You should troubleshoot any login errors before continuing on to the next step.

Enter Domain Information

In the next window enter the Domain information of your primary domain, this will verify that the service account can read from the domain. When your test is successful, click Next.

Enter Configuration Manager Information

In the next window enter the information about your Configuration Manager environment. This will verify that your service account has permission to read into MEMCM. After your test is successful, click Next.

Choose to Configure Standalone MBAM

If you have a standalone MBAM server (and are not managing Bitlocker in ConfigMgr), you can click the box and enter the information for your MBAM environment. If you are not using an MBAM Server, leave the box blank and click Install.

Enter Standalone MBAM information

If you have a standalone MBAM environment, enter it below. This ensures that the service account you selected has permission to use MBAM. After you have entered and tested the information, click Install. After your test is successful, click Next.

Finishing Proxy Installer

After the Proxy installer has finished, click Finish

Finish Proxy Installer