Security

add a domain admin account?

sullivanrl
New Member

My installation was installed as a Local System user, ( by someone else) but I'm tasked with setting it up and I really need a domain admin account to access other machines.

Can I add a domain admin account or do I need to re-install?

Tags (1)
0 Karma

JuergenRoth
New Member

Hello, this is my Problem, too!

I install Splunk on a Windows Server 2003 SP2. The user i'm taken is a domain-administrator. But with this account the both services don't start. I f i change the user (@services) to system account, it works. But i have no rights to reach other servers. Whats wrong here?

Juergen

0 Karma

eantonio
Path Finder

I used the Local System Account to install Splunk then I installed the License. After that, I was able to go to Services and change the account for splunkd and splunkweb to run as my Domain Admin account. I just need to change some permissions on the Splunk folder to give the Domain Admin account Full Control (C:\Program Files\Splunk\var\run)

0 Karma

darrenhutton
New Member

Try adding a non-admin account to the local Administrators group on your sever. See if the service will run under that account. You won't be able to gather off remote severs with this, but it will show if you've got an issue running the services under something other than Local System

0 Karma

eantonio
Path Finder

Hi,

I'm having the same issue. The installation doesn't work when I use a Domain Admin account. It only works when I use the Local System Account. My Domain Admin account is part of the Local Admin Group in the Splunk Server. Any idea what I am doing wrong?

0 Karma

dwaddle
SplunkTrust
SplunkTrust

As long as the NTFS permissions are suitable, you can change the Splunk services to run under a Domain Admin (or any other) service account. But, you should be on the look out for permissions-oriented problems.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...