B.3 Local Security Authority Rights and Privileges

Local Security Authority (LSA) rights and privileges are assigned to accounts or groups, and they determine how those accounts or group members may access the system. The rights and privileges are modified through secpol.msc or Local Security Policy from:

Start > Administrative Tools > Local Security Policy

  1. In Local Security Policy, go to the following:

    Security Settings > Local Policies > User Rights Assignments

  2. In the table of Privileges and the objects to which they apply located on the right, verify that the File Reporter proxy rights group has the following privileges:

    • Access this computer from the network

    • Back up files and directories

    • Bypass traverse checking

    • Create a token object

    • Create symbolic links

    • Impersonate a client after authentication

    • Log on as a batch job

    • Manage auditing and security log

IMPORTANT:Absence of some of these privileges causes the Engine and Agent components to not function properly. Removal of these rights and privileges via Group Policy Object (GPO) results in the Engine and Agent not functioning properly.

If GPO conflicts are detected, set up an additional GPO with just the privileges listed above and assign it to the proxy rights group for the appropriate servers.