IT_GUY
Joined 7 years ago
User Profile
User Widgets
Contributions
Re: PSA: Collect from windows systems without admin rights
13 hours ago, Eric Singer said: Sorry for any confusion. The LogicMonitor collector service must still run as a local admin account, at least as far as i'm aware. The solution is to allow that collector to remotely pole Windows devices with a service account that isn't a local admin. Meaning: Collector Server Name = WinCollector Collector Account = UserCollector Remote Server to Poll = "RemoteServerIWantToPoll" The account "UserCollector" must be a local admin on the server "WinCollector" BUT the service account "UserCollector" doesn't need to be a local admin on server "RemoteServerIWantToPoll". Thanks Eric that makes sense. Also did you have any issues runnning the Set-WMINameSecurity powershell script as a scheduled task? Manuallly running the power shell commands it adds the correct wmi permission but it seems running from task schedule it doesn't do anything.35Views0likes0CommentsRe: PSA: Collect from windows systems without admin rights
On 7/12/2018 at 12:43 PM, Eric Singer said: I wanted to add one more step, you also need to add that same account you're delegating access to in the MS article to the "performance monitor users" local group as well. Then restart the collector. I'm trying to implement this on a 2016 server and running into some issues. The logic monitor service doesn't start even though the service account is in the local distributed com users group. Putting the account into administrators group works. Event log shows that the service account doesn't have dcom permissions which is strange since it's in the group that's' supposed to give it access to DCOM. Any help would be interested.52Views0likes0Comments