https://community.splunk.com/t5/Getting-Data-In/Install-Universal-Forwarder-Active-Directory/m-p/98339#M20530 <P>Hello,<BR /> I am installing a Universal Forwarder on a domain controller. In the documentation it says the following: </P> <P>Important: You must specify a domain user when you install the universal forwarders; you cannot use the "Local System" user because that user does not have the appropriate permissions to access Active Directory, even on a domain controller. The user you specify must be able to read Group Policy, but should not be the domain administrator.</P> <P>When installing with an account that has read access to Group Policy, I receive the following message:</P> <P>The domain account specified is not a local administrator. Please set the domain account as a local administrator before continuing. </P> <P>You cannot not an account as a local admin of a DC. Any help would be greatly appreciated. <BR /> Thanks,<BR /> RJ</P> Mon, 14 Oct 2013 23:22:53 GMT ryanbla 2013-10-14T23:22:53Z https://community.splunk.com/t5/Getting-Data-In/Install-Universal-Forwarder-Active-Directory/m-p/98339#M20530 <P>Hello,<BR /> I am installing a Universal Forwarder on a domain controller. In the documentation it says the following: </P> <P>Important: You must specify a domain user when you install the universal forwarders; you cannot use the "Local System" user because that user does not have the appropriate permissions to access Active Directory, even on a domain controller. The user you specify must be able to read Group Policy, but should not be the domain administrator.</P> <P>When installing with an account that has read access to Group Policy, I receive the following message:</P> <P>The domain account specified is not a local administrator. Please set the domain account as a local administrator before continuing. </P> <P>You cannot not an account as a local admin of a DC. Any help would be greatly appreciated. <BR /> Thanks,<BR /> RJ</P> Mon, 14 Oct 2013 23:22:53 GMT https://community.splunk.com/t5/Getting-Data-In/Install-Universal-Forwarder-Active-Directory/m-p/98339#M20530 ryanbla 2013-10-14T23:22:53Z https://community.splunk.com/t5/Getting-Data-In/Install-Universal-Forwarder-Active-Directory/m-p/98340#M20531 <P>I figured it out, to add a user to the local admins of a DC:</P> <P>net localgroup administrators /add domain\user</P> Tue, 15 Oct 2013 21:01:52 GMT https://community.splunk.com/t5/Getting-Data-In/Install-Universal-Forwarder-Active-Directory/m-p/98340#M20531 ryanbla 2013-10-15T21:01:52Z