why do we need service account with local administrative rights for window servers?

kanika9
Kilo Contributor

Why do we need Windows Service account with Local Administrator rights on all Windows Servers?

3 REPLIES 3

Mike Allen
Mega Sage

Are you talking about MID Servers?   Or Discovery?   For Discovery, it may be for WMI.


Chuck Tomasi
Tera Patron

Mike is correct (if this is about Orchestration & Discovery/MID server.) There are some registry keys that Windows has buried that are only accessible with local admin rights. It's not a ServiceNow thing, it's a Windows thing. If you want these tools to perform properly (e.g. return the software installed on a machine) it requires local admin rights.



Credentials - ServiceNow Wiki


kanika9
Kilo Contributor

Thanks for the help..


Also, for executing WMI queries (without which we wont be able to get admin share), it is also crucial for running netstat commands.
Post discovery it is quite evident that without these specific privileges, it won't be able to fetch all the data.