Getting Data In

How to install and run Splunk as a domain user without admin permissions? (WINDOWS SERVER 2008)

ostrokonskiy
Explorer

I am trying to install Splunk on Winows Server 2008 as a domain user like here:(http://docs.splunk.com/Documentation/Splunk/5.0.3/Installation/PrepareyourWindowsnetworkforaSplunkin...), but it doesnt work. On the last step of installation it reverts and fails. When installing with admin permissions - installation completes. But I need to run this service without any admin permissions, because it is completely insecure to run service which hasn't any authentication (free version) as administrator or on Local System account.

Thanks

0 Karma
1 Solution

sherm77
Path Finder

@ostrokonskiy - Splunk v6.2 resolved many of the Windows permissions issues, we didn't install any Windows UF until 6.2 due to the concern over the issue. If you want more details, let me know. If you can go to v6.2, read the install info on it, it's a bit different. I'll help if I can.

View solution in original post

sherm77
Path Finder

@ostrokonskiy - Splunk v6.2 resolved many of the Windows permissions issues, we didn't install any Windows UF until 6.2 due to the concern over the issue. If you want more details, let me know. If you can go to v6.2, read the install info on it, it's a bit different. I'll help if I can.

ostrokonskiy
Explorer

Thank you for the response. I have 6.2 version installed, but i've used an old manual >_<.
I'll try to follow your advice and use manual for 6.2.

I'll report the results soon, thanks.

0 Karma

ostrokonskiy
Explorer

Thank you for the answer. It is very important to enter domain user name as "internal.example.com*backslash*Ivan", not as "Ivan". That was the problem.

NOUMSSI
Builder

Hi,
you must know that Winows Server 2008 is a server system. It's not like others system where you can have default permissions to install software.
So when you create a domain user via AD(active directory), you must give permissions to that user to install software. if not you'll never install software like SPLUNK from that domain user

ostrokonskiy
Explorer

I know that. I can easily install Splunk with domain admin permissions (i need just to enter the password), but then i need to run service as domain user (like in manual - http://docs.splunk.com/Documentation/Splunk/5.0.3/Installation/PrepareyourWindowsnetworkforaSplunkin...). I have troubles with this.

Thank you.

0 Karma
Get Updates on the Splunk Community!

Security Professional: Sharpen Your Defenses with These .conf25 Sessions

Sooooooooooo, guess what. .conf25 is almost here, and if you're on the Security Learning Path, this is your ...

First Steps with Splunk SOAR

Our first step was to gather a list of the playbooks we wanted and to sort them by priority.  Once this list ...

How To Build a Self-Service Observability Practice with Splunk Observability Cloud

If you’ve read our previous post on self-service observability, you already know what it is and why it ...