Assign a Windows account to host the ipMonitor Service

You can use the Service Settings window to assign a Windows account that runs the ipMonitor Service (ipmonitorsrv).

When you choose an account, consider the Credentials Manager as a key element of the security model. The ipmonitorsrv service runs under an account with minimum permissions. The Credentials Manager impersonates accounts with elevated permissions when required to execute monitors, alerts, and features such as:

• Drive Space monitor
• File monitor
• Server/Workstation control
• Reboot Server action

The following table lists the minimum permission requirements for any Windows Account assigned to the ipmonitorsrv service.

Folder Name	Permissions
\ipMonitor\	READ + WRITE + EXECUTE
\ipMonitor\config\*	READ + WRITE
\ipMonitor\db\*	READ + WRITE if storing Monitor Statistics
\ipMonitor\historic\*	READ + WRITE if storing Monitor Statistics
\ipMonitor\internal\*	READ ONLY
\ipMonitor\logs\	READ + WRITE
\ipMonitor\state	READ + WRITE
\ipMonitor\wwwroot\*	READ ONLY

To assign an account to the ipmonitorsrv service:

1. Decide whether to create a new Windows account or use the existing LocalSystem account to host the ipmonitorsrv service.
2. Click Start > All Programs > SolarWinds ipMonitor > Configure ipMonitor.

3. In the ipMonitor Configuration Program window, click Service Settings.

   

4. In the Service Account Context box, click This Account, and then click Browse.

   

5. Select an account from the local computer account container or the domain account container, and then click OK.

   

6. Verify that the Startup Type field is set to Automatic.
7. Complete the wizard.