Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Agent permissions (Windows Server)

Hi everyone,

I'm new to Solarwinds, so trying to get myself up to speed. I have been asked to deploy a solution to a small number of servers all of which hold sensitive information, our CyberSecurity team have said that for the deployment I'm not able to use an elevated account to run the agent. The initial plan is to setup a domain level service account that will be used to run the agents. All the documentation I've read so far seems to point towards using an Administrator level account.

Can someone point me in the direction of how I can achieve this approach.

Thanks

Find more posts tagged with

Accepted answers

All comments

jm_sysadmin

How do you normally deploy software to your servers? This is just like any other installation, and in this case it will add a service that runs as System for monitoring going forward.

chad.every

"After the agent is installed, it runs as a Local System account and does not require administrative permissions to function."

https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-agent-requirements-sw476.htm

and

"This the same account used to run virtually all native and non-native Windows services. While the account the Orion Windows Agent service runs under can be changed, this has not been thoroughly tested, is not recommended, and not officially supported at this time. Note that any non-local Windows OS system monitoring requires additional credentials to be specified when it is initially configured through the Orion web interface. For example, monitoring MSSQL, Oracle, Exchange, etc. all require additional credentials to be specified because the local system account that the Agent service runs under does not have sufficient privileges to monitor these types of applications."

In the table row called: Orion Agent - "swiagent"

https://support.solarwinds.com/SuccessCenter/s/article/Manage-Orion-Service-Accounts?language=en_US