Hello,
I have two questions with giving users permissions.
First of all, what kind of permissions does a WMI user need, and how can I grant them the permissions?
Secondly, I have tried linking my AD with PRTG and some users can't seem to login, unless I put them in the OU 'Administrators'.
What permisions do I need to give to the WMI user, and what permissoins do people need that want to login with their AD account on PRTG. I can't seem to find it out, looked through most of the permissions available already.
Kind Regards,
Sven
Article Comments
Hi there,
For SNMP is no administrative or write user needed as PRTG only reads the values. However with WMI it is a entirely different story. We usually recommend to use a Domain-Admin as the guarantees that the sensors will not fail because of access or permission issues. Unfortunately, there is no real permission set that describes which WMI-Query needs which permission, which is why we can't tell you the needed minimum permissions. We have some customers that were able to cut the permissions of the WMI-user, however other failed as WMI seem to work different from environment to environment. This is a question that has to be asked the guys in Redmond (Microsofts HQ). The following site might help you further:
https://msdn.microsoft.com/en-us/library/aa393266(v=VS.85).aspx
For the AD authentication you need to configure a User Group under "Setup > System Administration > User Groups". There you can select "Use Active Directory" and under that you can select the User Group from your Active Directory that should be added to PRTG:
https://www.paessler.com/manuals/prtg/active_directory_integration
Best regards.
Sep, 2018 - Permalink
Hi there,
For SNMP is no administrative or write user needed as PRTG only reads the values. However with WMI it is a entirely different story. We usually recommend to use a Domain-Admin as the guarantees that the sensors will not fail because of access or permission issues. Unfortunately, there is no real permission set that describes which WMI-Query needs which permission, which is why we can't tell you the needed minimum permissions. We have some customers that were able to cut the permissions of the WMI-user, however other failed as WMI seem to work different from environment to environment. This is a question that has to be asked the guys in Redmond (Microsofts HQ). The following site might help you further:
https://msdn.microsoft.com/en-us/library/aa393266(v=VS.85).aspx
For the AD authentication you need to configure a User Group under "Setup > System Administration > User Groups". There you can select "Use Active Directory" and under that you can select the User Group from your Active Directory that should be added to PRTG:
https://www.paessler.com/manuals/prtg/active_directory_integration
Best regards.
Sep, 2018 - Permalink