Hi
For install ossec,
First i create an Administrators group and add the users to this
group(this user belong to Administrator local group too), then install it
without error in for example "d:\ossec\ossec-agent".
For config the agent (ossec server and key) i use the gui and try start
with this with error: "Unable to start agent(check config)".
If i try to start with service the error is "windows cannot start OSSEC
HIDS in local computer. Error 5: Access Deny".
If i setup the OssecSvc service with the administrator account instead
of local system account all is ok.
The permissions for the folder d:\ossec\ossec-agent are: full control to
system, local service, network service, administradores group , usuarios
group and Administrators group.
When i try start with local system account in the services no printing
into ossec.log....
I tried to uninstall and install again in other folder and change
permissions but nothing...... only run when i change the service account to
an user, not for local system account.
Best Regards
El martes, 19 de abril de 2016, 20:41:00 (UTC+2), Victor Fernandez escribió:
>
> Hi Diego.
>
> How do you start the service, with the UI or from Services?
>
> Does OSSEC print something into the file "ossec.log"?
>
> Best regards.
>
> Victor Fernandez.
>
>
>
> On Tuesday, April 19, 2016 at 12:15:49 PM UTC+2, Diego Arranz wrote:
>>
>> Hi all,
>>
>> I´m testing wazuh server on CentOS and ossec 2.8.3 as agent in windows
>> 10 profesional (spanish language), the problem is when i try to start the
>> ossec service as local account, the service don´t run with error 5: acces
>> deny error, if i setup any administrator account to run the service is all
>> ok.
>>
>> I try to do full permissions to network service account and local
>> services account over the folder but the error is the same (error 5: acces
>> deny)
>>
>>
>>
>> Somebody have any idea about this problem??
>>
>> Thanks in advance.
>>
>
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
