Hi. I remember a problem that I had with permissions in Windows: please check that your OSSEC directory (like C:\Program Files\ossec-agent) and every file contained in it have full permissions for "Administrators".
I hope this solves your problem. Best regards. On Thursday, March 31, 2016 at 8:45:42 PM UTC+2, Krzysztof Zaklikiewicz wrote: > > Hi > > Thanks guys now it's works fine, but on Windows 2012 Server is still > problem. I was doing exectly the same how on Windows 7 but when I start > agent show error UNABLE TO START AGENT (CHCECK CONFIG), my ossec.log: > > 2016/03/31 20:31:45 ossec-agent: INFO: Service does not exist (OssecSvc) > nothing to remove. > > 2016/03/31 20:31:45 ossec-agent: INFO: Successfully added to the service > database. > > 2016/03/31 20:31:45 setup-windows: INFO: System is Vista or newer > (Microsoft Windows Server 2012 Standard Edition (Build 9200) - OSSEC HIDS > v2.8.3). > > 2016/03/31 20:31:56 ossec-win32ui: INFO: Running the following command > (C:\Windows\system32\cmd.exe /c echo y|cacls "new-ossec.conf" /T /G > Administrators:f) > > 2016/03/31 20:31:58 ossec-win32ui: INFO: Running the following command > (C:\Windows\system32\cmd.exe /c echo y|cacls "client.keys" /T /G > Administrators:f) > > What's wrong?? > > W dniu wtorek, 29 marca 2016 22:51:25 UTC+2 użytkownik Victor Fernandez > napisał: >> >> Hi. >> >> Have you added the original administrator and your own account to the >> "Administrators" group? >> >> I followed your steps, added my user account to "Administrators", closed >> and reopened my session, and it did work. >> >> Regards. >> > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
