In addition to the aforementioned security measures, security of an OpsMgr environment can be strengthened by the addition of multiple service accounts to handle the different OpsMgr components. For example, the Management Server Action account and the SDK/Configuration service account should be configured to use separate credentials to provide for an extra layer of protection in the event that one account is compromised.
• Management Server Action account—The account responsible for collecting data and running responses from management servers.
• SDK and Configuration service account—The account that writes data to the operations database; this service is also used for all console communication.
• Local Administrator ...