Permissions on Domain Controller

[TPNDK]

Hi there.

i have following problem.

i am going to install a epoagent from mcafee on
the domain controller through an serviceaccount
called srvepolicy

Which Permissions-groups should the serviceaccount
have to install a program ?

right now the account have domain users and server operators, i have tried domain admins but the programs
says everytime when i try to install it says that it dosent
have insufficient rights and cannot install the files.

Can anyone help me ?

 

[CluelessJon]

Local Admin

 

[TPNDK]

CluelessJon: Are you stupid? Dont you know that on a Domain Controller there is no LocalGroups.

 

[DaFlex]

Even Domain Controllers have a local user called Administrator (unless renamed) - It is the account that you used to set up the server in the first place!

Anyway:

Once you have added domain admin rights to the serviceaccount, have you refreshed the group-policy using secedit, or logging out, then back in?

 

[TPNDK]

DaFlex: Yes i have refreshed the group-policy using secedit and i also logout and login after refreshing the group-policy

 

[DaFlex]

The program that you are trying to install may need Enterprise Admin rights. Make the account a member of this group. Then refresh the group policy, and try again