Return
-
Title
Minimum Permissions Required by Active Administrator Services -
Description
Minimum Permissions Required by Active Administrator Services -
Cause
N/A -
Resolution
Minimum Permissions Required by Active Administrator Services
Service Member of Why? Active Template Repair Domain Admins
AA_Admin group- Needs the ability to access all objects in Active Directory, and to change Active Directory permissions on any Active Directory object.
- Needs administrative access to the Audit database.
AD Object Backup Domain Admins
AA_Admin group- Needs the ability to access all objects in Active Directory, and to change Active Directory permissions on any Active Directory object.
- Needs administrative access to the Audit database.
Maintenance Local Administrators group on any computer running the Auditing Agent, and the Active Administrative server.AA_Admin group- Needs access to the Service Control Manager on all computers running the auditing agents, and the Active Administrator server.
- Needs administrative access to the Audit database.
GPO History Local Administrators group on the Active Administrative server.
AA_Admin group- Needs administrative access to the Audit database.
Notification AA_Admin group - Needs administrative access to the Audit database.
Auditing Agent A domain user account granted these rights and privileges in the Default Domain Controller policy: - "Allow log on locally" (SeInteractiveLogionRight)
- "Logon on as a service" (SeServiceLogonRight)
- "Manage auditing and security log" (SeSecurityPrivilege)
- Requires these rights and privileges to run on domain controllers and read their event logs.
- Needs administrative access to the Audit database.
Advanced Auditing Agent Local System Account - Automatically configured, regardless of the user account configured for the Auditing Agent service.