-
Title
What type of permissions does the Diagnostic Server need? -
Description
What permissions does a user need to be the Diagnostic Server service user and access both Windows, and SQL Server connections? -
Cause
Possible connection or WMI errors due to the OS Username that is being used for the service "Quest Diagnostic Server", or "Spotlight Diagnostic Server" does not have permission to the Windows performance counters, read access to the servers Windows registry, or SQL Server. -
Resolution
Spotlight on SQL Server requires that the Spotlight Diagnostic Server have the following permissions to successfully connect to a SQL Server instance. This information is specified when a new Windows or SQL Server instance is configured through the Spotlight Connection Manager or the Spotlight Enterprise View.
SQL Server permissions required on the Spotlight Diagnostic Server
Each SQL Server connection from the Spotlight Diagnostic Server must have access to a SQL Server account that is a member of the sysadmin server role. This can be a SQL Server login (such as 'sa'), or the Spotlight Diagnostic Server can be installed to run under a Windows account that is trusted by SQL Server.Also, the data must be retrievable over your network. Spotlight on SQL Server requires more than just a port 1433 TCP/IP connection to SQL Server to do this. The port on the Spotlight Diagnostic Server must be open. The default port is 3843.
Note: For information about running Spotlight on SQL Server in an environment with firewalls, see "Spotlight on SQL Server and Firewalls" in the Spotlight on SQL Server Deployment Guide. This document is available in PDF from Start | Quest Software | Spotlight, or in the Client in Help | Spotlight on SQL Server Deployment Guide .
Windows permissions required on the Spotlight Diagnostic Server
To retrieve performance counter information, the Spotlight Diagnostic Server executes WMI queries against the Windows server on which SQL Server is currently running. To do this, the Spotlight Diagnostic Server needs to have access to a Windows account that can retrieve this information. This account will normally be a member of the Administrators group on the server. If you do not have access to an Administrator account, have your Windows administrator assign you the required permissions on the server.Spotlight Diagnostic Server
During operation the Spotlight Diagnostic Server requires write access to the following directory:C:\Program Files
The minimum Windows privilege level required to run the Spotlight Diagnostic Server is Power User.