Install Recast Proxy Separately

You'll need to install a Recast Proxy separately if it was not installed during the Recast Management Server installation, or if it needs to be installed on a server other than the Recast Management Server.

Proxies run as a service account. Proxies are useful when you want to run Right Click Tools actions a service account, and can also be used to run Right Click Tools actions against untrusted domains. The service account must be a Local Admin on the computer where it is being installed in order to function correctly. 

There is also a “hidden” type of proxy. A Console User Proxy is automatically installed with your standard Right Click Tools installation. The Console User Proxy ensures that the actions you to run in Right Click Tools will run as the logged in user with the logged in user's permissions. These User Proxies do not show up on the Proxies list.

For more information, see About Recast Proxies.


Proxy Service Account Permission Requirements

Minimum permissions:

  • Local admin on the server where it is being installed
  • Read-only analyst in Configuration Manager console
  • db_datareader in Configuration Manager database
  • Read permissions in Active Directory

Permissions to run actions as a service account:

  • Local admin on any device that actions will be run against
  • Read/Write permissions in Active Directory (Write is only required to delete devices from AD)
  • Appropriate ConfigMgr Security Role for intended actions in the Configuration Manager console (Full Administrator for all actions)
  • Permission to MBAM, if applicable

To install Recast Proxy:

1. Run the Recast Proxy installer.

2. On the Recast Server Configuration page, enter the Recast Management Server Name and Server Port number.

3. Click Test Connection to make sure that the proxy can connect to the Recast Management Server. 

If the installer does not connect to the Recast Management Server, the proxy will not install successfully. Troubleshoot any error messages that appear in the installer before continuing with the install.

4. On the Service Account Configuration page, enter the Domain, Username and Password that you would like to use for your proxy.

If the User Account Credentials that you enter on the Service Account Proxy Screen do not validate correctly, the Service Account Proxy will not work correctly. Troubleshoot any login errors before continuing to the next step.

5. On the Domain Configuration page enter your primary Domain and click Test Domain Connection to check that the service account can read from the domain. 

6. On the Configuration Manager Configuration page, enter your SMS Provider, Site Code, SQL Server, and SQL Database information and click Test ConfigMgr Connection to check that your service account has permission to access your Configuration Manager environment.

7. If you have a standalone MBAM server (and are not managing BitLocker in ConfigMgr), enable Configure MBAM and enter the information for your MBAM environment. If you are not using an MBAM Server, leave the checkbox blank and click Install.

8. If you have a standalone MBAM environment, enter its details and click Test MBAM Connection to ensure that the service account you selected has permission to use MBAM. 

9. Click Install.

10. After the installation completes, click Finish to close the installer.