When I attempt to run advanced scenarios, such as “ Domain Password Strength Evaluation”, the agent needs to be elevated. As it is not, the scenario fails to run.
Does this need the service account that runs on the cymulate server to use a domain account and one specifically with privileged rights?
What is the recommended approach and is there a tech note to cover this?
Best answer by richard.allenView original
Thank you for the question. Local Admin privileges are required for elevated executions. Also note this FAQ article.
Thanks for your confirming requirements and the FAQ.
Having been on a call with my Cymulate customer success manager, the way to elevate the Agent based account is to add the local system account in to the Local administrators group on the machine where the agent is running. Login with a user that has administrative privileges on the machine.
Edit Local and User Groups
Go to Groups - Right Click on Administrators
Click Add - Find SYSTEM account from local machine
NT AUTHORITY\SYSTEM (S-1-5-18) will now be a member of local admins.
Restart the Agent Service from services.msc applet.
The Agent service will now be running as Elevated