SQL Server Services monitoring for non-admin account
I am trying to add SQL Server Services (SQL Server Agent, SQL Server Browser) for non-admin accounts. For Collector server it is auto discovered because the service account is part of local admin group. I have trouble setting it up for non-admin account. (WinSQLServices module in Logic Monitor). I followed steps from documentation: https://www.logicmonitor.com/support/getting-started/advanced-logicmonitor-setup/windows-server-monitoring-and-principle-of-least-privilege#h-granting-windows-service-permissions-nbsp-sddl-nbsp-changes It didn't work. SDDL doesn't seem to be changing anything and after running active discovery SQL Server Services are not showing up for other servers with non-admin account. There is not much information about troubleshooting it. Are there specific SDDL string changes needed? Is there an order in which this string supposed to go? Are there specific permissions needed?132Views1like19Comments