LS service will then have local admin access. Get your free trial now and start auditing your network. The service account only needs to have local admin access on the machine.įYI: Domain admin accounts have the rights to make changes to your active directory, the service account for running LanSweeper should NOT have these rights.Ĭreate a local admin account on each machine, or, what we did in addition to that was to use GPO to add a specific AD group (you can call it Local_Admin or anything you'd like), then once that GPO "takes hold", add your LS service account to that group. Download Lansweeper today and discover assets you don't even know about. No it does NOT need to be a domain admin. So that there was a separation, i'm sure we could lock it down a bit more etc. It still pretty much needs domain admin, we created a service account called ls.scanning Is there a way to limit the security permissions of the account? I'd like to have just the specific permissions needed. I'd prefer not to use an account that is domain administrator. With Lansweepers file scanning you can scan any directory (since it will put. I want to create a service account for scanning desktops that is only used for that purpose. it was frequently advertised in the Russian pirated forum websites.
0 kommentar(er)
