How to monitor Domain Controller?

Hello,

Thank you for your message.

To monitor servers by using an account with least privileges, you need to make sure that the user account has enough permissions for it. To do so, I invite you to have a look to the articles below:

Which permissions/rights does a user need to have WMI access on remote machines? Creating a user with Windows Management Instrumentation (WMI) permissions

If you have questions, let us know.

Regards.

Greetings, I am encountering this issue today. Your instructions are great for all other windows servers except domain controllers. Domain controllers DO NOT have Local Groups or Users on them. Only AD accounts can log into DC's. Thus, the MMC Console for "Local users and groups" does not exist. I'm guessing you would need to create a GPO with these explicit permissions, then apply them to the DC's. However, I have not yet attempted this.

Hello Wayne,

apparently Microsoft only hides the Local Admin users group in the MMC plugins, so it might still work creating a local user and adding it to the local user groups using an administrative shell.

NET USER <name> <password> /ADD
NET LOCALGROUP ADMINISTRATORS /ADD <user>

You can try this way of adding a local user with administrative rights on the host.

Kind regards,
Johannes Beyerlein, Technical Support Team