Agent Client Collector installation on Windows

[alexanderwi]

Hi,

due to a security assessment we would like to know how complex the randomly generated password of the default service user "servicenow" is that is created during installation of ITOM Agent Client Collector.

We are interested in details about the complexity of such password as it will affect the decision in what user context the agent will run on Windows systems in the future.

[Severin Launiau]

@alexanderwi: You can open a Support ticket and see if they can provide this information under NDA. If you decide to go with the local user, you may need to rotate the password regularly and/or set it to never expire. This could be problematic depending on your security policies. With that in mind, you may want to consider running the service using more traditional methods: Local SYSTEM, Local Service or gMSA account.

If you need more information, see the webinars and additional material from KB1122613.