Below are the 3 methods to setup a user for the GoToManage Crawler to use. This article will focus on method #2.
1) Use a user in the ‘Domain Admins’ group.
2) Create a group that is in the local ‘Administrators’ group on each PC.
3) setup a WMI permissions so a regular user or group will work. (see later blog article)
Normally we suggest you use method #1 because it’s easiest. The reason is, “domain admins” are by default included in each computers local “Administrators” group which is normally required for WMI and automation features etc.
Method #2 will setup a user that is in this local administrators group but with less permissions than a domain admin.
Most people would agree that, relatively speaking, this is MUCH less permissions (i.e. risk) than giving “domain admins”.
For example, domain admins can do almost anything including create/delete users, change passwords etc, whereas a local admin ONLY has permissions on each computer.
INSTRUCTIONS:
- Create a group in your domain called something like “Local-admins” and put the crawler user (eg G2mg-crawl) into this group.
- Use Group Policy Management Editor (usually installed by default on all your domain controllers) to edit your “default domain” policy
- It is in this branch: Computer Configuration > Windows Settings > Security Settings > Restricted Groups
- Right click on the “Restricted Groups” > add and type in or choose “mydomain\local-admins”
- Double click this group “mydomain\local-admins” and click “Add” (this group is a member of on bottom – see screenshot. Type in “Administrators”
When your computers receive this policy automatically (usually up to 90 minutes or a reboot will do it.) then you should see this new group “Local-admins” is in the “Administrators” group on each PC.
Screenshot is coming as soon as I can get it working. sorry.
