Opserver icon indicating copy to clipboard operation
Opserver copied to clipboard

Setup non-admin user account for WMI provider

Open nickluu2018 opened this issue 4 years ago • 0 comments

Hi all,

Please help, We setup OpServer using AD user account with "Local Administration" privileges. Everything is working perfectly.

However, We have been trying to setup non-admin AD user acccount with minimal privileges such as: -Memeber of local group "Event Log Reader", "Performance Monitor Users", "Performance Log Users", "Remote Mangement Users", "Distributed COM Users" -User has Full permission under COM Security (Local Launch, Remote Launch, Local Activiation, Remote Activation) -User has permissions (Execute Methods, Enable Account, Remote Enable, Read Security) under WMI Control\Root

Since We changed to this setup, we cannot:

  • Collect performance data of CPU, Memory, Disk/Volumes (No data displays on the dashboard)
  • Cannot Start/Stop the Windows Services (The user did not have the necessary access)

image

nickluu2018 avatar Mar 30 '21 22:03 nickluu2018