This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

External Proccess Monitor, Windows 2008, FileModifiedSince.zip not working - permissions issues

Hello,

After being shown this  I have tried to implement it on our ipMonitor system, but it does nto work due to permissions issues.

We have ipMonitor installed on Windows 2008 (called 'IS8') which is in our AD DOMAIN.

I have copied the modifiedsince.vbs script into 'c:\scripts' on the ipmonitor server, and a basic test shows it is working;

C:\Users\remoteadmin>c:\windows\system32\cscript.exe c:\scripts\modifiedsince.vbs c:\scripts\*.* 9999
Microsoft (R) Windows Script Host Version 5.7
Copyright (C) Microsoft Corporation. All rights reserved.

Checking Extension...
readme.txt
Object was modified 7085 minutes ago

 

I created a LOCAL user account on the ipMonitor server called 'IS8\remoteadmin'.

I created a credential in ipMonitor for 'IS8\remoteadmin' with the same password etc.

I created a new external monitor against the ipMonitor host (IS8) in ipMonitor, however no matter what I do, it just keeps saying 'Access rights are insufficient'. I have tried with UAC on and off.

I have made 'remoteadmin' an Administrator and I have also set the permissions on c:\scripts to be full access to everyone but still no luck..

 

It is worth mentioning that I have no problems at all accessing other servers (not in our AD DOMAIN) for things like Windows Event logs using LOCAL user accounts. This is our first external proccess monitor.

I just cannot get this external monitor working on the ipMonitor server itself though!

Thanks for your time.

Regards, Andy.

  • Hi ajl119,

    Assuming the ipMonitorSrv service is running as "LocalSystem", can you try simply removing the Credential from the External Process Monitor and then clicking "Force Test"?

    Let me know what the results are.

    Thanks,

    Chris Foley - SolarWinds - Support Specialist
    Support:866.530.8040 || Fax:512.857.0125
    network management simplified  |  solarwinds.com

  • Hello,

    Yes you were right. For some reason the Service was running as the local Administrator and not just 'LocalSystem'.

    I have since changed this and I can now monitor the contents of a folder on the ipMonitor server itself.

    I am still having problems getting this to work on a remote box however. I.e. We have a file server and I need to check that a folder on the file server is updated nightly. I have tried mapping a drive from the file server to the ipMonitor server without any luck (the script always returns a '3' (could not find path) when run through ipMonitor, but works when run on the command line).

    I assume this is becuase the LocalSystem account does not have access to my mapped drives. It is very unlikely I will be able to get this the script to reside on the remote server and so I would like to perform this test via a mapped drive. Is this possible. Ie. How can I allow a LocalSystem account to access a share mapped under a user.

    Alternatively how should this be done properly assuming I can get the script located on the target server.

    Regards, Andy.

    We do actually have a full valid support contract for ipMonitor which I can provide details for if needed.

    Thanks for your time and help.

  • Hi ajl119,

    Windows services cannot see mapped drives.  Having that said, you need to give the Monitor a UNC path instead.  So instead of using

    x:\directory\filename.ext 

    use

    \\servername\sharename\directory\filename.ext

    Naturally, in order to access this share, you will need to use a Credential which is pointing to a Windows account with permissions to that share.

    Sincerely,

    Chris Foley - SolarWinds - Support Specialist
    Support:866.530.8040 || Fax:512.857.0125
    network management simplified  |  solarwinds.com