Minimum Rights Requirement for RMA agent

All questions related to installations, configurations and maintenance of Advanced Host Monitor (including additional tools such as RMA for Windows, RMA Manager, Web Servie, RCC).
Post Reply
Sainyam
Posts: 37
Joined: Fri Aug 12, 2011 12:31 am

Minimum Rights Requirement for RMA agent

Post by Sainyam »

Hi Support,

I'm trying to tighten my security. Currently I've set RMA service account as Domain Admin / local admin so that all servers can be easily monitored.

But now I want to remove the domain / local admin rights from the agent service account, please advise which are minimum rights requirement for the following test for local and network servers for an RMA active agent.
- Disk Size
- Event Logs.
- CPU Monitoring.
- Services Status monitoring.
KS-Soft
Posts: 13012
Joined: Wed Apr 03, 2002 6:00 pm
Location: USA
Contact:

Post by KS-Soft »

- Disk Size
local disk? everyone
remote share? depends on permissions you set

- Event Logs
I think the following articles will help you to change permissions
http://support.microsoft.com/kb/323076
http://blogs.technet.com/b/janelewis/ar ... -2008.aspx

- CPU Monitoring
Depends on Windows version and settings. Usually administrators, local system, interactive users, Performance Log Users
You may check and change this, e.g. add user with KEY_READ access to the following registry key on target system HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows_NT\CurrentVersion\Perflib
To view/change permissions to the registry key you can use the registry editor utility Regedt32.exe

- Services Status monitoring
Depends on your system as well. Before Windows Server 2003 Service Pack1, any authenticated user; later: administrators, local service, network services, Power user

Regards
Alex
Post Reply