Getting Data In

How to install and run Splunk as a domain user without admin permissions? (WINDOWS SERVER 2008)

ostrokonskiy
Explorer

I am trying to install Splunk on Winows Server 2008 as a domain user like here:(http://docs.splunk.com/Documentation/Splunk/5.0.3/Installation/PrepareyourWindowsnetworkforaSplunkin...), but it doesnt work. On the last step of installation it reverts and fails. When installing with admin permissions - installation completes. But I need to run this service without any admin permissions, because it is completely insecure to run service which hasn't any authentication (free version) as administrator or on Local System account.

Thanks

0 Karma
1 Solution

sherm77
Path Finder

@ostrokonskiy - Splunk v6.2 resolved many of the Windows permissions issues, we didn't install any Windows UF until 6.2 due to the concern over the issue. If you want more details, let me know. If you can go to v6.2, read the install info on it, it's a bit different. I'll help if I can.

View solution in original post

sherm77
Path Finder

@ostrokonskiy - Splunk v6.2 resolved many of the Windows permissions issues, we didn't install any Windows UF until 6.2 due to the concern over the issue. If you want more details, let me know. If you can go to v6.2, read the install info on it, it's a bit different. I'll help if I can.

ostrokonskiy
Explorer

Thank you for the response. I have 6.2 version installed, but i've used an old manual >_<.
I'll try to follow your advice and use manual for 6.2.

I'll report the results soon, thanks.

0 Karma

ostrokonskiy
Explorer

Thank you for the answer. It is very important to enter domain user name as "internal.example.com*backslash*Ivan", not as "Ivan". That was the problem.

NOUMSSI
Builder

Hi,
you must know that Winows Server 2008 is a server system. It's not like others system where you can have default permissions to install software.
So when you create a domain user via AD(active directory), you must give permissions to that user to install software. if not you'll never install software like SPLUNK from that domain user

ostrokonskiy
Explorer

I know that. I can easily install Splunk with domain admin permissions (i need just to enter the password), but then i need to run service as domain user (like in manual - http://docs.splunk.com/Documentation/Splunk/5.0.3/Installation/PrepareyourWindowsnetworkforaSplunkin...). I have troubles with this.

Thank you.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...