Minimum Rights Requirement for RMA agent

[Sainyam]

Hi Support,

I'm trying to tighten my security. Currently I've set RMA service account as Domain Admin / local admin so that all servers can be easily monitored.

But now I want to remove the domain / local admin rights from the agent service account, please advise which are minimum rights requirement for the following test for local and network servers for an RMA active agent.
- Disk Size
- Event Logs.
- CPU Monitoring.
- Services Status monitoring.

[KS-Soft]

- Disk Size
local disk? everyone
remote share? depends on permissions you set

- Event Logs
I think the following articles will help you to change permissions
http://support.microsoft.com/kb/323076
http://blogs.technet.com/b/janelewis/ar ... -2008.aspx

- CPU Monitoring
Depends on Windows version and settings. Usually administrators, local system, interactive users, Performance Log Users
You may check and change this, e.g. add user with KEY_READ access to the following registry key on target system HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows_NT\CurrentVersion\Perflib
To view/change permissions to the registry key you can use the registry editor utility Regedt32.exe

- Services Status monitoring
Depends on your system as well. Before Windows Server 2003 Service Pack1, any authenticated user; later: administrators, local service, network services, Power user

Regards
Alex