<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="Section1">
<p class="MsoNormal">Question for the Window’s gurus out there. I’m not really a ‘windows guy’ and don’t have access to the Windows servers that I’ve been asked to monitor. Therefore, I’m using the NRPE VBScript setup developed by Groundwork to monitor some
Windows servers via WMI. The NRPE-NT service runs on one box which I do have control over and this is also where the VBScript plugins live.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When running NRPE-NT as my own Windows account, I can check services on File/Print servers, but not Domain Controllers. I tried several other accounts that have various levels of access and receive different errors. I’ve been reduced to
having one of our Domain Admins run this service under his account, which works. This was done temporarily to test that this method is possible, but cannot be used as a permanent solution. The goal is to have NRPE-NT run as an account with the minimum level
of permissions to perform these service checks.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">What level of access does the account that runs the NRPE-NT service need to have on all of the servers in order to function properly?<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Thank you,</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Garry W. Cook, CCNA</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Network Systems Specialist</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">ARCADIS U.S., Inc.</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">630 Plaza Drive, Suite 200</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Highlands Ranch, CO 80129</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">720.344.3708 (Office)</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">720.220.1862 (Mobile)</span><span style="font-size:12.0pt;font-family:"Times New Roman","serif"">
</span><o:p></o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Black" size="-2">NOTICE: This e-mail and any files transmitted with it are the property of ARCADIS U.S., Inc. and its affiliates. All rights, including without limitation copyright, are reserved. The proprietary information contained
in this e-mail message, and any files transmitted with it, is intended for the use of the recipient(s) named above. If the reader of this e-mail is not the intended recipient, you are hereby notified that you have received this e-mail in error and that any
review, distribution or copying of this e-mail or any files transmitted with it is strictly prohibited. If you have received this e-mail in error, please notify the sender immediately and delete the original message and any files transmitted. The unauthorized
use of this e-mail or any files transmitted with it is prohibited and disclaimed by ARCADIS U.S., Inc. and its affiliates.<br>
</font>
</body>
</html>