AD Agent: Overview > Service Account > Setup

To set up the service account:

1. Create a new group on the domain named "dcagent_services ".
2. Create a new domain user account named “dcagent_service” and make it a member of the dcagent_services group.
   
   NOTE: Be sure to record this password as you will be prompted for it during the configuration wizard process.
   
3. Add your administrator account to the dcagent_services group. (Any users in the dcagent_services group have permission to manage the AD Agent.)
4. Open the Domain Security Policy console, then expand the "Local Policies" / "Audit Policy" node on the Security Settings tree. Double-click the "Audit account logon events" policy, and check the "Define these policy settings" checkbox. Then check the "Success" checkbox. Make these same settings changes for the "Audit logon events" policy as well. Close the Domain Security Policy console.
5. Open the Domain Controller Security Policy console. Expand the "Local Policies" / "User Rights Assignment" node of the tree. Double-click the "Manage auditing and security log" policy. Check "Define these policy settings", then add the dcagent_services and Domain Admins groups to the list of permitted users. Close the console.
   
   If installing the AD Agent on a domain controller only:
   • Double-click the "Allow Logon Locally" setting.
   • Add the dcagent_service account to the list of permitted users.
6.  Close the Domain Controller Security Policy console.

Refresh the group policy on the Agent host machine. There is a batch file in \Program Files\8e6 Technologies\8e6 AD Agent\bin\gpo_refresh.cmd that can be used for this, or you can issue the Refresh commands manually.

Related Topics:

• Service Account
• Quick Start Configuration

Back