Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > ipMonitor > ipMonitor - Knowledgebase Articles > Install ipMonitor on a domain controller

Install ipMonitor on a domain controller

Updated September 24, 2018

Overview

This article explains how to install ipMonitor on a domain controller.

SolarWinds does not recommend installing ipMonitor on a domain controller.

Warning: SolarWinds strongly recommends that you back up your registry before making any edits to your system registry. You should only edit the registry if you are experienced and confident in doing so. Using a registry editor incorrectly can cause serious issues with your operating system, which could require you to reinstall your operating system to correct them. SolarWinds cannot guarantee resolutions to any damage resulting from making registry edits.

Environment

All ipMonitor versions

Details

Domain controllers are vital to the security of all devices on your network, and should be dedicated to this task. To maintain the highest level of network security, you should segment your critical resources. You expose your domain controller to increased security risk by merging it with other functions such as web servers, mail servers, or even ipMonitor.

Running ipMonitor on a domain controller also results in less security for ipMonitor. SolarWinds recommends that all our customers create restricted Windows accounts specifically for running the ipMonitor Service that apply only the minimum tokens required for successful operation of the ipMonitor service. But when you install ipMonitor on a domain controller, the Credential Manager cannot be enabled to impersonate Windows accounts with elevated permissions. There is no allowance for trust relationships outside of the domain, and this results in limited access to many ipMonitor features.

If you must install ipMonitor on a domain controller, perform the following steps:

  1. Log in to the server hosting the domain controller.
  2. Start the Registry Editor.
    Open a Run box and execute:
    Regedt32.exe
  3. Access the following registry key:
    HKLM\SOFTWARE\ipMonitor (for x86 systems)
    HKLM\SOFTWARE\Wow6432Node\ipMonitor (for x64 systems)
  4. Add a STRING value to this registry key.
    Name: ALLOWLANMANNT
    Type: REG_SZ
    Value: 1
  5. Exit the Registry Editor
Last modified

Tags

Classifications

Public