solarwinds

thwack

geekspeak

Login

ONLINEQUOTE | BUYONLINE | CUSTOMERPORTAL | BLOG | PARTNERS | CONTACTUS

searchsolarwinds.com

More

SolarWindsKnowledgeBase
Home>Support>KnowledgeBaseHome

Whatareyoulookingfor?

Favorites

KnowledgeBaseHome>Server&ApplicationMonitor(SAM)>Monitoring(SAM)
KnowledgeBaseHome>Server&ApplicationMonitor(SAM)>Security(SAM)

HowtocreateanonadministratoruserforSAMpolling.
Note:Thisarticleisforeducationalpurposesonly.SolarWindsTechnicalSupportcannot
assistwiththecreationofaleastprivilegedWindowsuseraccount,northeassignmentof
permissionstosuchauseraccount.ForassistanceconfiguringMicrosoftWindowsuser
accountpermissions,pleaserefertoMicrosoftTechnicalSupportat:
http://support.microsoft.com/contactus/).
Fortroubleshootingpurposes,youmaybeaskedbySolarWindssupporttoutilizealocalor
domainadministratoraccountsolelytoeliminatepossiblepermissionsrelatedissuesasthe
causeofpollingerrors.
IfyouwanttomonitorPerformancecountersusingRPC,refertothisKBarticle.Ifyouwant
touseWMI,refertothefollowingsteps:
1.Createaregularuseronthetargetmachine(forexample:SAMUser).
2.AddthisuserintothePerformanceMonitorUsersandDistributedCOMUsersgroups.

ArticleDetails
LastUpdated
17thofJune,2015

Wouldyouliketo...
Printthispage
Emailthispage
Postacomment
Addtofavorites
ExporttoPDF

UserOpinions
100%
(5votes)

0%
(0votes)

Howwouldyouratethis
answer?
Helpful
Nothelpful
RateIt!

3.StarttheWMImanagementconsole.RightclickontheWMIControl(local)andset
permissionsfortheSAMUseryoujustcreated.

4.Inthepropertiesdialogbox,clicktheSecuritytab.
5.SelectRootinthenamespacetreeandthenclickSecurity.

6.TheSecurityforRootdialogboxwillappear.ClickAdvanced.

7.InAdvanceSecuritySettingforRoot,clickAdd.AddtheSAMUserandgrantEnable
AccountandRemoteEnablepermissions.

8.StarttheDCOMconfigurationconsolebytypingdcomcnfgthroughtheRunapplication
intheStartmenu.
9.ExpandComponentService.
10.ExpandComputersandrightclickMyComputer.
11.ClickProperties.

12.UnderLaunchandActivatePermissions,clickEditLimits.
13.IntheLaunchandActivatePermissiondialog,selectAPMUserandallowhimRemote
launchandRemoteActivation.(Iftheuserismissing,addhimfirst).
14.InMyComputerProperties,clickEditLimitsundertheAccessPermissionsbutton.
15.IntheAccessPermissiondialog,selectAPMUserandallowhimRemoteAccess.(Ifthe
userismissing,addhimfirst).

16.ToallowSAMUseraccesstotheWin32_Serviceobjectremotely,youneedtogivesome
additionalpermissionstotheauthenticateduser.Todoso,refertothefollowingsteps:
a.Inacommandwindow,type:Scsdshowscmanager.
b.Theoutputshouldlooklikethis:
D:(ACCAU)(ACCLCRPRCIU)(ACCLCRPRCSU)(ACCLCRPWPRCSY)
(AKABA)S:(AUFAKAWD)(AUOIIOFAGAWD)
c.Youneedchangethefirstsectionfrom(ACCAU)to(ACCLCRPRCAU).This
modificationwilladdtotheauthenticateduserthefollowingpermissions:
1.
1.LC=ADS_RIGHT_ACTRL_DS_LIST
2.RP=ADS_RIGHT_DS_READ_PROP
3.RC=READ_CONTROL
d.Nowsetthesecuritypermission:ScsdsetscmanagerD:(ACCLCRPRCAU)
(ACCLCRPRCIU)(ACCLCRPRCSU)(ACCLCRPWPRCSY)(AKABA)S:

(AUFAKAWD)(AUOIIOFAGAWD).
Note:Thisappliestobothmachineaccessandlaunchandactivation.

17.ChecktoseeifyouhavestartedtheRemoteRegistryservice.(Atthispoint,youshould
haveanonadminuserwhichisallowedtomonitormostoftheservices,butnotallof
them.)
18.Notallservicesareaccessiblebyauthenticatedusersthroughremoteconnection.The
laststeptoenablenonadministratorusertobeablemonitorthemistoadapttheirsecurity
permissionsaswell.Todoso,refertothefollowingsteps:
1.Logontotheremotemachinewhereyouwanttoadaptsecuritypermissionsforthe
nonadministratoraccount.
2.Inacommandwindow,type:Scsdshow
3.Theoutputshouldlooklikethis:D:(ACCLCSWRPWPDTLOCRRCSY)
(ACCDCLCSWRPWPDTLOCRSDRCWDWOBA)(ACCLCSWRPLOCRRCIU)
(ACCLCSWRPLOCRRCSU)(ACRAU)S:
(AUFACCDCLCSWRPWPDTLOCRSDRCWDWOWD)
4.Tohavemorecontrolover,thiscopythisstringintoNotepad.
5.Backinthecommandwindow,typewhoami/USER/FOLIST
6.YoushouldgetAPMUserSID
USERINFORMATION
UserName:xxxxxxvm\APMUser
SID:Sxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.UsethisSIDtoconstructanewpermissionsection(ALCSxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
2.AddittotheservicepermissionstringyoucopiedearlierintoD:section.
D:(ACCLCSWRPWPDTLOCRRCSY)(ACCDCLCSWRPWPDTLOCRSDRCWDWOBA)
(ACCLCSWRPLOCRRCIU)(ACCLCSWRPLOCRRCSU)(ACRAU)(ALCSx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)S:
(AUFACCDCLCSWRPWPDTLOCRSDRCWDWOWD)
3.Nowtypeintothecommandwindow:
ScsdsetD:(ACCLCSWRPWPDTLOCRRCSY)
(ACCDCLCSWRPWPDTLOCRSDRCWDWOBA)(ACCLCSWRPLOCRRCIU)
(ACCLCSWRPLOCRRCSU)(ACRAU)(ALCSxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxx)S:(AUFACCDCLCSWRPWPDTLOCRSDRCWDWOWD)

Note:Thepropersyntaxisscsdsetandyoushouldrunthiscommandforeachservice
whichisnotaffectedbysteps117.

RelatedArticles
Norelatedarticleswerefound.

Attachments
Noattachmentswerefound.

VisitorComments
Novisitorcommentsposted.Postacomment

PostCommentfor"HowtocreateanonadministratoruserforSAMpolling."
Ifthisarticledoesnotprovidethesolutionyouneed,pleaseconsidervisitingour
communityforumsonthwackorcontactingSolarWindsSupport.Pleaseusethe
followingformtoprovidecommentsthathelpusimprovethisKBarticle.Fieldsmarkedwith
anasteriskarerequired.
Name:
*Email:
*Comment:

*Enterthecodebelow:

PostComment

ExploreOurSite
Company

ViewOurITManagementProducts
EnterpriseClassNetworkManagement

EnterpriseClassVirtualizationManagement

Newsroom

OrionNetworkPerformanceMonitor

VirtualizationManager(formerlyHyper9)

CorporateBlog

Powerfulmanagementfordynamicnetworks.

Manageperformance,capacity,VMsprawl&more!

Events

TryItFree

TryItFree

Awards

EnterpriseClassStorageManagement

Management

OrionNetworkConfigurationManager

Customers

Networkconfiguration&changemanagement.

StorageManager,PoweredbyProfiler

Careers

TryItFree

Powerfulstoragemanagementforvirtualized

ContactUs

OrionNetFlowTrafficAnalyzer
Flowbasedtrafficanalysis&bandwidthutilization.

Products

TryItFree

Downloads
OnlineQuote

OrionIPAddressManager

BuyOnline

CentralizedIPaddressmanagementthat'saffordable.
TryItFree

Resources

environments.
TryItFree
BackupProfiler
Backupmanagementthatisaffordable&easytouse.
TryItFree

ToolsforEngineers

What'sHotThisWeek

OrionIPSLAManager

Engineer'sToolset

ProductsResources

WANperformancemanagement&VoIPmonitoring.

Acollectionoftoolsforfastfixestonetworkissues.

FederalResources

TryItFree

TryItFree

OrionEnterpriseOperationsConsole

KiwiSyslogServer

CommandcenterforyourdistributedITinfrastructure.

OneofthemosttrustedSyslogserversintheworld!

TryItFree

TryItFree

AdditionalResources

OrionScalabilityEngines

CatTools

ViewFullResourceIndex

ScalabilityandfailoveroptionsfortheOrionproducts.

Desktopnetworkconfigurationmanagement.

ITManagementGlossary

TryItFree

TryItFree

SolarWindsResourcesforCiscoNetworks
SolarWindsCertifiedProfessionals(SCP)
GeekSpeak(EducationalResources)
ITManagementNews

Support

EnterpriseClassApplication&Server
Management

Partners
ViewFullSitemap

WhoAreWeandWhatDoWeDo?

SolarWindsServer&ApplicationMonitor

LANsurveyor
Automatednetworkdiscovery&mappingtool.
TryItFree

Agentlessapplication&serverperformancemonitoring.

ipMonitor

TryItFree

Up/downmonitoringthatisaffordableonanybudget.
TryItFree

SolarWindsmakesawardwinningstorage
management,applicationmanagement,server
management,andnetworkmanagement

DownloadFreeITManagement&FreeNetworkingTools

softwaretrustedbymorethanonemillion

FreeRealTimeBandwidthMonitor

SANMonitor

engineerstomanageITenvironmentsrangingfrom

Easilymonitoringbandwidthusageonatroublesome

Quickly&easilymonitoryourstoragearray!

tenstothousandsofdevices.

interface!

DownloadNow

DownloadNow
Discoverournetworkmonitoring,configuration
management,networkmapping,andfreenetwork
toolstoday!

VMConsole

FreeWebTransactionWatcher

BounceVMs&TrackTheirStatusfromYourDesktop!

Recordandtestwebtransactionswiththetouchofa

DownloadNow

button!
DownloadNow
VMtoCloudCalculator
Quicklydiscoversallofyourvirtualmachines,then
estimateswhatitwouldcosttomovethemtothecloud.
DownloadNow
RealTimeAppFlowAnalyzer
AnalyzeNetworkTraffic&DiagnoseIssues
DownloadNow

ViewMoreFreeDownloads
PrivacyStatement|InvestorRelations|TermsofUse|Trademarks|EULA|ManageMySubscriptions|RSSFeeds|Contact|Feedback|SiteMap|RecentSearches
Pricesdisplayeddonotreflectinternationalpricingunlessotherwisestated.Pleaseseeourinternationalpricelistforcurrentpricingspecifictoyourlocation.
Allpricesaresubjecttochangewithoutnotice.
20032016SolarWinds.AllRightsReserved.