You want to run the Symantec Security Information Manager Event Agent on Windows with other user than the Local System or Local Administrator
Any window Services must log on to an account in order to access resources and objects on the operating system. To run SSIM agent service correctly it needs local administrative privileges and that is the reason Why SSIM agent service is default configured as Local System Account during SSIM Agent installation.
1) Local Service Account: The Local Service account is a built-in account that has the same level of access to resources and objects as members of the Users group. This limited access helps safeguard the system if individual services or processes are compromised. The actual name of the account is "NT AUTHORITY\LOCAL SERVICE". This account is not supported to run SSIM Agent Service successfully. Some functionalities will not work.
2) Network Service Account : The Network Service account is a built-in account that has more access to resources and objects than members of the Users group. Services that run as the Network Service account access network resources by using the credentials of the computer account. The actual name of the account is "NT AUTHORITY\NETWORK SERVICE". This account is not supported to run SSIM Agent Service successfully. Some functionalities will not work.
3) Local System Account : Local System is a very high-privileged built-in account. It has extensive privileges on the local system. The actual name of the account is "NT AUTHORITY\SYSTEM". This is default service account for SSIM Agent and It works perfectly.
4) Domain User Account : A domain user account enables the service to take full advantage of the service security features of Windows and Microsoft Active Directory Domain Services. This account is not supported to run SSIM Agent Service successfully. Some functionalities will not work. (A domain user can be member of a local group see next account type)
5) Local User Account : User can create local user accounts with different permissions. To run SSIM agent correctly, local user account with Windows administrator permissions is recommended. Local User Account runs the SSIM Agent Service correctly only if local user account belongs to administrator group. If user account is created with Power user permissions then some SSIM agent functionality will not work. If user account is created with Users/Guests/Other permissions then SSIM agent shows 'Access Denied' Error.
Imported Document ID: TECH153517
Subscribing will provide email updates when this Article is updated. Login is required.