‎02-18-2020 09:59 PM
‎02-21-2020 03:31 AM
‎02-19-2020 12:21 AM
abevelacqua wrote:
I want to create a service account for scanning desktops that is only used for that purpose. I'd prefer not to use an account that is domain administrator. Is there a way to limit the security permissions of the account? I'd like to have just the specific permissions needed.
‎02-19-2020 06:33 PM
CyberCitizen wrote:abevelacqua wrote:
I want to create a service account for scanning desktops that is only used for that purpose. I'd prefer not to use an account that is domain administrator. Is there a way to limit the security permissions of the account? I'd like to have just the specific permissions needed.
It still pretty much needs domain admin, we created a service account called ls.scanning
So that there was a separation, i'm sure we could lock it down a bit more etc.
‎02-20-2020 04:47 PM
RobertB wrote:CyberCitizen wrote:abevelacqua wrote:
I want to create a service account for scanning desktops that is only used for that purpose. I'd prefer not to use an account that is domain administrator. Is there a way to limit the security permissions of the account? I'd like to have just the specific permissions needed.
It still pretty much needs domain admin, we created a service account called ls.scanning
So that there was a separation, i'm sure we could lock it down a bit more etc.
This is TERRIBLE advice!
No it does NOT need to be a domain admin. The service account only needs to have local admin access on the machine.
FYI: Domain admin accounts have the rights to make changes to your active directory, the service account for running LanSweeper should NOT have these rights.
‎02-20-2020 06:09 PM
abevelacqua wrote:RobertB wrote:CyberCitizen wrote:abevelacqua wrote:
I want to create a service account for scanning desktops that is only used for that purpose. I'd prefer not to use an account that is domain administrator. Is there a way to limit the security permissions of the account? I'd like to have just the specific permissions needed.
It still pretty much needs domain admin, we created a service account called ls.scanning
So that there was a separation, i'm sure we could lock it down a bit more etc.
This is TERRIBLE advice!
No it does NOT need to be a domain admin. The service account only needs to have local admin access on the machine.
FYI: Domain admin accounts have the rights to make changes to your active directory, the service account for running LanSweeper should NOT have these rights.
I am open to other suggestions.
Experience Lansweeper with your own data. Sign up now for a 14-day free trial.
Try Now