ONLINE QUOTE | BUY ONLINE | CUSTOMER PORTAL | BLOG | PARTNERS | CONTACT US
search solarwinds.com
Home > Support > Knowledge Base Home Favorites
SolarWinds Knowledge Base
What are you looking for?
Knowledge Base Home > Server & Application Monitor (SAM) > Monitoring (SAM)Knowledge Base Home > Server & Application Monitor (SAM) > Security (SAM)
solarwinds thwack geek speak
| More
How to create a nonadministrator user for SAM polling.Note: This article is for educational purposes only. SolarWinds Technical Support cannotassist with the creation of a least privileged Windows user account, nor the assignment ofpermissions to such a user account. For assistance configuring Microsoft Windows’ useraccount permissions, please refer to Microsoft Technical Support at:http://support.microsoft.com/contactus/).
For troubleshooting purposes, you may be asked by SolarWinds support to utilize a local ordomain administrator account solely to eliminate possible permissions related issues as thecause of polling errors.
If you want to monitor Performance counters using RPC, refer to this KB article. If you wantto use WMI, refer to the following steps:
1. Create a regular user on the target machine (for example: SAMUser).2. Add this user into the Performance Monitor Users and Distributed COM Users groups.
3. Start the WMI management console. Right click on the WMI Control (local) and setpermissions for the SAMUser you just created.
100% (5 votes)
0% (0 votes)
Article Details
Last Updated17th of June, 2015
Would you like to...
Print this page
Email this page
Post a comment
Add to favorites
Export to PDF
User Opinions
How would you rate thisanswer?
HelpfulNot helpful
Rate It !
Log in
4. In the properties dialog box, click the Security tab. 5. Select Root in the namespace tree and then click Security.
6. The Security for Root dialog box will appear. Click Advanced.
7. In Advance Security Setting for Root, click Add. Add the SAMUser and grant EnableAccount and Remote Enable permissions.
8. Start the DCOM configuration console by typing dcomcnfg through the Run applicationin the Start menu.9. Expand Component Service.10. Expand Computers and rightclick My Computer.11. Click Properties.
12. Under Launch and Activate Permissions, click Edit Limits.13. In the Launch and Activate Permission dialog, select APMUser and allow him Remotelaunch and Remote Activation. (If the user is missing, add him first). 14. In My Computer Properties, click Edit Limits under the Access Permissions button.15. In the Access Permission dialog, select APMUser and allow him Remote Access. (If theuser is missing, add him first).
16. To allow SAMUser access to the Win32_Service object remotely, you need to give someadditional permissions to the authenticated user. To do so, refer to the following steps:
a. In a command window, type: Sc sdshow scmanager. b. The output should look like this: D:(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD) c. You need change the first section from (A;;CC;;;AU) to (A;;CCLCRPRC;;;AU). Thismodification will add to the authenticated user the following permissions:
1. 1. LC = ADS_RIGHT_ACTRL_DS_LIST2. RP = ADS_RIGHT_DS_READ_PROP3. RC = READ_CONTROL
d. Now set the security permission: Sc sdset scmanager D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:
(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD). Note: This applies to both machine access and launch and activation.
17. Check to see if you have started the Remote Registry service. (At this point, you shouldhave a non admin user which is allowed to monitor most of the services, but not all ofthem.)
18. Not all services are accessible by authenticated users through remote connection. Thelast step to enable nonadministrator user to be able monitor them is to adapt their securitypermissions as well. To do so, refer to the following steps:
1. Log on to the remote machine where you want to adapt security permissions for thenonadministrator account.
2. In a command window, type: Sc sdshow3. The output should look like this: D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CR;;;AU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
4. To have more control over, this copy this string into Notepad.5. Back in the command window, type whoami /USER /FO LIST6. You should get APMUser SID
USER INFORMATION
User Name: xxxxxxvm\APMUserSID: Sxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1. Use this SID to construct a new permission section (A;;LC;;;Sxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
2. Add it to the service permission string you copied earlier into D: section.D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CR;;;AU)(A;;LC;;;Sxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
3. Now type into the command window: Sc sdset D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;IU)(A;;CCLCSWRPLOCRRC;;;SU)(A;;CR;;;AU)(A;;LC;;;Sxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
Note: The proper syntax is “sc sdset ” and you should run this command for each servicewhich is not affected by steps 117.
Related Articles
No related articles were found.
Attachments
No attachments were found.
Visitor Comments
No visitor comments posted. Post a comment
Post Comment for "How to create a nonadministrator user for SAM polling."
If this article does not provide the solution you need, please consider visiting ourcommunity forums on thwack or contacting SolarWinds Support. Please use thefollowing form to provide comments that help us improve this KB article. Fields marked withan asterisk are required.
Name:
* Email:
* Comment:
* Enter the code below:
Explore Our Site
Company
NewsroomCorporate BlogEventsAwardsManagementCustomersCareersContact Us
Products
DownloadsOnline QuoteBuy Online
Resources
What's Hot This WeekProducts ResourcesFederal ResourcesSolarWinds Resources for Cisco NetworksSolarWinds Certified Professionals (SCP)Geek Speak (Educational Resources)IT Management NewsAdditional ResourcesView Full Resource IndexIT Management Glossary
Support
Partners
View Full Sitemap »
Who Are We and What Do We Do?SolarWinds makes awardwinning storagemanagement, application management, servermanagement, and network managementsoftware trusted by more than one millionengineers to manage IT environments ranging fromtens to thousands of devices.
Discover our network monitoring, configurationmanagement, network mapping, and free networktools today!
EnterpriseClass Network Management
Orion Network Performance MonitorPowerful management for dynamic networks.Try It Free »
Orion Network Configuration ManagerNetwork configuration & change management.Try It Free »
Orion NetFlow Traffic AnalyzerFlowbased traffic analysis & bandwidth utilization.Try It Free »
Orion IP Address ManagerCentralized IP address management that's affordable.Try It Free »
Orion IP SLA ManagerWAN performance management & VoIP monitoring.Try It Free »
Orion Enterprise Operations ConsoleCommand center for your distributed IT infrastructure.Try It Free »
Orion Scalability EnginesScalability and failover options for the Orion products.Try It Free »
EnterpriseClass Application & ServerManagement
SolarWinds Server & Application MonitorAgentless application & server performance monitoring.Try It Free »
EnterpriseClass Virtualization Management
Virtualization Manager (formerly Hyper9)Manage performance, capacity, VM sprawl & more!Try It Free »
EnterpriseClass Storage Management
Storage Manager, Powered by ProfilerPowerful storage management for virtualizedenvironments.Try It Free »
Backup ProfilerBackup management that is affordable & easytouse.Try It Free »
Tools for Engineers
Engineer's ToolsetA collection of tools for fast fixes to network issues.Try It Free »
Kiwi Syslog ServerOne of the most trusted Syslog servers in the world!Try It Free »
CatToolsDesktop network configuration management.Try It Free »
LANsurveyorAutomated network discovery & mapping tool.Try It Free »
ipMonitorUp/down monitoring that is affordable on any budget.Try It Free »
Free RealTime Bandwidth Monitor Easily monitoring bandwidth usage on a troublesomeinterface!Download Now »
Free Web Transaction WatcherRecord and test web transactions with the touch of abutton!Download Now »
VMtoCloud CalculatorQuickly discovers all of your virtual machines, thenestimates what it would cost to move them to the cloud.Download Now »
RealTime AppFlow AnalyzerAnalyze Network Traffic & Diagnose IssuesDownload Now »
SAN MonitorQuickly & easily monitor your storage array!Download Now »
VM ConsoleBounce VMs & Track Their Status from Your Desktop!Download Now »
View Our IT Management Products »
Download Free IT Management & Free Networking Tools »
Post Comment
View More Free Downloads »
Privacy Statement | Investor Relations | Terms of Use | Trademarks | EULA | Manage My Subscriptions | RSS Feeds | Contact | Feedback | Site Map | Recent Searches
Prices displayed do not reflect international pricing unless otherwise stated. Please see our international price list for current pricing specific to your location.All prices are subject to change without notice.
© 20032016 SolarWinds. All Rights Reserved.
Recommended
