Network Monitor Service account and rights assignment

If the Kaseya Network Monitor service is running under a user account other than LocalSystem, ensure the following local security policies are enabled for the service account.

• Log on as a service
• Act as part of the operating system (Windows 2000)
• Bypass traverse checking
• Read, write and execute rights on the KNM folder of the KNM host machine.

To make full use of the built-in account manager, all assets should be assigned an account other than the base service account.

Monitoring accounts

With Network Monitor you have the ability to assign a default account to each asset. This account is used to authenticate access to the monitored asset.

In the following documentation we refer to this account as the monitoring account. In the Edit asset page its called the Default account. In the Edit monitor page the account selection option should be set to Use asset default account.

The monitoring account should be a member of the Administrators group on the asset being monitored. In most cases this is the Domain Admin group.

Account username format

Depending on the location of the monitoring account Network Monitor requires you to format the username according to the following rules. These rules also apply to Windows in general.

• .\username - Account is found by Network Monitor on the local machine.
• username - Account is found by Network Monitor on the local machine.
• domain\username - Account is found by Network Monitor using the domain name.
• username@domain.com - Same as above but valid for XP, 2003 and Vista.