Access rights required by the GFI EventsManager processes

The information in this article applies to:

  • GFI EventsManager 7
  • GFI EventsManager 8

Article ID: KBID001122

Query keywords: rights

GFI EventsManager is a product intended for systems administrators, and therefore the product requires administrative privileges in order to function.

This article explains which GFI EventsManager executables need to run using Administrator rights and provides information on why these are required: 

  • ESMUI.exe - The GFI EventsManager Management Console allows administrators to configure and manage the operational functionality of GFI EventsManager. As a result this console is, by default, only accessible by systems administrators. You should avoid giving access to other users, since this may allow normal users to:
    • Temper with GFI EventsManager operational settings - possibly disabling or manipulating security services provided by this product.
    • Gain illegal access to stored passwords.
       
  • ESMPROC.exe – The GFI EventsManager Monitoring Service scans and collects events from target computers. In order to operate efficiently this service requires access to registry keys and system files for event log scanning. The logon account of this service must therefore be an administrator.
     
  • TROUBLE.exe – The GFI EventsManager Troubleshooter gains information on the operational functionality and status of GFI EventsManager. The GFI EventsManager Troubleshooter stores this data to a physical file in the installation folder. This operation requires this module to be executed using administrative privileges.
     
  • EVENTSMANAGERx.exe – The GFI EventsManager Installer module installs GFI EventsManager, when launched. In order to successfully achieve this, Eventsmanager7.exe or Eventsmanager8.exe must be run under administrator privileges in order to:
    • Successfully register entries in the system registry
    • Install the necessary program/operation files
    • Install the services used by GFI EventsManager
    • Uninstall previous installations of GFI EventsManager as required.