For the monitoring of endpoints is it necessary to have the solarwinds service account in the local administrators group?
Thx
Justin
The answer is always no, but depending on which service account you are talking about it can be much more difficult than others.
For monitoring with WMI, while I am sure it's possible, I have always used a user that is a local admin. If it needed to be more secure, then I run the agent and don't need a user, it runs as local service. Some monitors that run might need to run as a user, and then it would depend on what you are monitoring.
And for even more secure environments, I run the agent as a least privileged user instead of "local system". That sounds like it would be a good thing... but it's really annoying, as the agent cannot upgrade itself.
