Can I run the NTSMF collection service under a User Account, instead of LocalSystem (or SYSTEM)?
No, to function properly the NTSMF collection service should be set up to run under the LocalSystem (or SYSTEM) account. The LocalSystem (or SYSTEM) account is a built-in account used by many services with an extraordinary level of privileges for accessing local system resources. These include privileges that cannot be granted to any User Account, include members of the Administrators group. The NTSMF collection service requires these SYSTEM-level privileges for some data collection functions. More specifically, the Module collection function requires the PROCESS_QUERY_INFORMATION process-specific access right, which can only be granted programmatically by a process running with System level privileges to begin with. Unfortunately, there is no User Right that you can grant a User Account that allows the Performance SeNTry collection service to execute the EnumProcessModules Win32 function call it makes to enumerate all the modules loaded in a process. You can run the NTSMF collection s
Related Questions
- How do I request a user account in order to report electricity data using the Internet Data Collection System?
- Can the NTSMF collection service impersonate a User Account to gain access to secured network resources?
- Can I run the NTSMF collection service under a User Account, instead of LocalSystem (or SYSTEM)?
