Pages

Friday, November 24, 2017

VMWare LogInsight Agent Install

VMWare LogInsight Windows Agent Install


Recently I have had an ongoing trial of VMWare 6.5U1 running on my desk - literally 2 rack mount servers sitting on my  desk taking up some space. Anyways I noticed with the trial that I was able to install and use LogInsight.  I was at VMWare World in 2013 and got to see this tool at version 1.x and it was wonderful.  So what's changed and improved was my first thought.  

Well only way to find out was to test.  Adding the VCSA was a snap and I got data off it pretty quickly and hey it added all the hosts - easy enough.  How to add a Windows box?  Oh look agents...

Easy enough to download and since I have a domain admin account I can add to my host - WRONG!

"The system administrator has set policies to prevent this installation"

What?!? I am the system admin and I in no way set this or did I?  Well after trying a couple of other accounts, turning off and then back on UAC and other things; I finally figured it out.  

Right click the MSI and Run As - local admin account.  This agent appears to be adding local security auditing which thanks to some recent Windows 2012 R2 and Windows 2016 patches has changed and requires this user account to install and make those changes.  Thanks Microsoft!

Off to go and test this tool, hope this helps someone else.

No comments:

Post a Comment