Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 5499 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to run STAS agent under another user account other than administrator on Windows server 2016?

ErikFranzen

Is there any howto which describes how to run the STAS agent under another user account other than administrator on Windows server 2016 (technology preview 5)? Especially when using WMI to poll the clients.

How to set up permissions in the Windows AD domain? Which permissions? No local client configuration?



This thread was automatically locked due to age.
  • 0

    Hi Eric,

    STAS installation mandatorily requires Admin privilege to work perfectly.

    Thanks

  • 0 in reply to sachingurung

    Okay, I see.

    I have tried other users than administrator with administrator privileges but no success for the client side WMI-part. The only user which is working for me is Administrator.

    I believe that is because administrator user is the local administrator on each client?

  • 0 in reply to ErikFranzen

    Hey Erik.

    I did some testing about this, but the user running STAS needs domain admin rights. For one, it needs access to your Domain Controllers Event Viewer, what is already kind of a deal breaker when it comes to using any user other then a domain admin. It also needs administrator rights at the client machine so it can pool logged in users through WMI. I was not able to make it work with a more restricted user as well. I ended up creating a new user with and ridiculously long password and made it a member of Domain Admins group. Although is not perfect and at the end of the day is pretty much the same security risks, I still prefer this approach to using the builtin Administrator user.

    Regards - Giovani

  • 0 in reply to giomoda

    Okay. I suspected that I have to use the administrator account.

    Thanks for you reply.