What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags

View all Tags

Domain Admin account and Protected Users Group



Greetings, we have recently implemented the Active Directory Group, Protected Users. It is recommended by Microsoft to put all Domain Admin accounts into this group, including our account used by PRTG for accessing WMI on monitored servers. After the PRTG account is moved however, access to things like drive space monitoring, stop working and report Access is Denied. Once the account is removed from that group everything works fine. Could you please explain how we can work around this and keep that account in the Protected Users group?

domain-admins protected-users wmi

Created on Aug 10, 2021 7:34:54 PM

1 Reply



HI there,

Please note that WMI access rights are not well documented by Microsoft and therefore I cannot say which certain access rights are required. However, I would recommend to give the corresponding user access do DCOM and WinRM since it's used for WMI.

Created on Aug 12, 2021 11:25:23 AM by  Moritz Heller [Paessler Support]

Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.