Partition Archiver runs as SYSTEM User

Hello all!

I have some problems with Partition Archiver Service in Windows 2008 R2.

As I understand from logs (you can see it below), the Partition Archiver Service is run as SYSTEM. But from services.msc (you can see screenshots below, too) I see that Partition Archiver Service is run as Administrator (as need). I have reconfigured Partition Archiver using arcsight agentsetup -w command, but it didn't work.

How can I fix this problem?

Is it significant that I use Russian version of Windows?

P.S. I am beginner at ArcSight administration, so I am really sorry if my question is very simple =)

Thanks for help in advance!

Parents
  • Does your Administrator have "Log on as a service" permissions ? you can check it in Local or domain security policies ( Local Security Policy -> Local Policies -> User Rights Assignment)

    Usually by default Administrator does not have this permissions and u have to set it manually in security policies or retype login and password in service settings manually and this permissions will be added automaticaly.

    maybe this info will be helpful for you.

Reply
  • Does your Administrator have "Log on as a service" permissions ? you can check it in Local or domain security policies ( Local Security Policy -> Local Policies -> User Rights Assignment)

    Usually by default Administrator does not have this permissions and u have to set it manually in security policies or retype login and password in service settings manually and this permissions will be added automaticaly.

    maybe this info will be helpful for you.

Children
No Data