Forum Discussion

gregoreilly's avatar
gregoreilly
Icon for Neophyte rankNeophyte
10 months ago

Least Privilege not showing full list of Windows Services

Using LogicMonitor in full admin mode (ie we connect with a service account with admin rights on the target windows server) has presented no issues. All metrics work perfectly, we can monitor ALL win...
least privelege
Müller_N's avatar
Müller_N
Icon for Neophyte rankNeophyte
10 months ago

You already found the section that is about the special privileges that are required to work with NT services.
If everything else is working apart from these, it is pretty likely you did a mistake while setting these ACLs.

However...
You can check if your user has sufficient privileges by starting a Powershell with that particular user on the target machine and see if you get output for following command:

Get-WmiObject -Class Win32_Service
Müller_N's avatar
Müller_N
Icon for Neophyte rankNeophyte
10 months ago

Actually the most accurate test you could do is starting the same type of Powershell on the collector machine with that particular user and do a:

Get-WmiObject -ComputerName <value of your system.hostname property> -Class Win32_Service

  • gregoreilly's avatar
    gregoreilly
    Icon for Neophyte rankNeophyte
    9 months ago

    Slight issue we have here, is that we cannot logon to a server or impersonate a gMSA account. There is no password. However, all other metrics from windows work...just services do not list. We see a subset.(I guess those we have access too)