Hi Boobathi,

Is it the GoCD server itself or the agents that you are attempting to
run as a domain user?

If it helps, I've tried to silently install and configure my windows
agents to run using an non-admin AD account. I've used this with
partial success:

```
# Powershell

# Install the agent
# * Don't start it yet
# * Don't install the agent in the default location in %ProgramFiles%
# * Always include the suffix "/go" on the serverurl. It will fail
silently if you don't.
& go-agent-19.10.0-10357-jre-64bit-setup.exe /S /START_AGENT=NO
/SERVERURL="https://gocd.example.com/go"; /D="C:\gocd\agent"

# Change the user that runs the service to "mydomain\gocd-agent"
& sc.exe config "Go Agent" obj="mydomain\gocd-agent" password=abcdefg

# Attempt to grant the "mydomain\gocd-agent" user permission to "Login
as a Service"
# I've used the "UserRights" module from here:
# https://gallery.technet.microsoft.com/Grant-Revoke-Query-user-26e259b0
# However this does appear to work correctly
Import-Module .\UserRights.psm1
Grant-UserRight -Account "mydomain\gocd-agent" -Right SeServiceLogonRight

# Now start the service
& sc.exe start "Go Agent"
```

I've not attempted to fix the problem with granting the user "Login as
a Service" rights. For now I'm doing that manually in Computer
Management -> Services. (I'd be grateful to know if anyone has a
solution to this step).

Once that is done the agents run correctly, without admin permissions
on their own VMs, and with access to the network resources that I've
assigned to that user.

I hope that is helpful.
Andy


Andy Smith
Head of Technical Development
MapAction
Mapping for people in crisis

For more information about the MapAction privacy policy see
mapaction.org/privacy

On Thu, 5 Mar 2020 at 10:23, Boobathi M <[email protected]> wrote:
>
> Hi Pranav,
>
> I'm trying to replace the ID "go" with my AD account in backend on the 
> server. Tried changing ownership for all the data, config files as well,
>
> Kindly suggest if it can be done, is there a specific script, configuration 
> which needs to be changed,
>
> --
> You received this message because you are subscribed to the Google Groups 
> "go-cd" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/go-cd/d80dff49-c69f-4fcf-b6a1-5e4ef309bc64%40googlegroups.com.

-- 
You received this message because you are subscribed to the Google Groups 
"go-cd" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/go-cd/CAM5WB9B4CxapyMRNj%3DbPhg8J%2BpYPfzd07yCarDyQm0_gHvJLBg%40mail.gmail.com.

Reply via email to