What are the default accounts used for each EventSentry service?
Article ID: 376
Category: General
Applies to: All
Updated: 2018-11-08
| Service | Account |
|---|---|
| EventSentry (agent) | LocalSystem account |
| EventSentry Collector | LocalSystem account |
| EventSentry Heartbeat Monitor | Please see KB-41 |
| EventSentry Network Services | LocalSystem account |
| EventSentry Web Reports | LocalSystem account |
| EventSentry Database | NetworkService account |
Please note that if you change the service account used for the Collector, you will not be able to re-use the existing certificate, as a new one must be created when the Collector starts under a different account This will require a manual configuration update (Push Configuration) for your agents, as they will otherwise refuse to connect to the Collector when the certificate has changed.
If you use the Collector and you change the service account used for the EventSentry (agent) service, you'll need to Reset Shared Secrets in order for the agent to successfully connect to the Collector under the new service account.
