topic Re: add a domain admin account? in Security

add a domain admin account?

sullivanrl — Thu, 06 Jan 2011 02:17:20 GMT

My installation was installed as a Local System user, ( by someone else) but I'm tasked with setting it up and I really need a domain admin account to access other machines.

Can I add a domain admin account or do I need to re-install?

Re: add a domain admin account?

dwaddle — Tue, 11 Jan 2011 02:27:53 GMT

As long as the NTFS permissions are suitable, you can change the Splunk services to run under a Domain Admin (or any other) service account. But, you should be on the look out for permissions-oriented problems.

Re: add a domain admin account?

JuergenRoth — Tue, 22 Feb 2011 18:14:24 GMT

Hello, this is my Problem, too!

I install Splunk on a Windows Server 2003 SP2. The user i'm taken is a domain-administrator. But with this account the both services don't start. I f i change the user (@services) to system account, it works. But i have no rights to reach other servers. Whats wrong here?

Juergen

Re: add a domain admin account?

eantonio — Wed, 12 Oct 2011 13:52:10 GMT

Hi,

I'm having the same issue. The installation doesn't work when I use a Domain Admin account. It only works when I use the Local System Account. My Domain Admin account is part of the Local Admin Group in the Splunk Server. Any idea what I am doing wrong?

Re: add a domain admin account?

darrenhutton — Wed, 12 Oct 2011 14:26:28 GMT

Try adding a non-admin account to the local Administrators group on your sever. See if the service will run under that account. You won't be able to gather off remote severs with this, but it will show if you've got an issue running the services under something other than Local System

Re: add a domain admin account?

eantonio — Wed, 12 Oct 2011 14:41:39 GMT

I used the Local System Account to install Splunk then I installed the License. After that, I was able to go to Services and change the account for splunkd and splunkweb to run as my Domain Admin account. I just need to change some permissions on the Splunk folder to give the Domain Admin account Full Control (C:\Program Files\Splunk\var\run)