Submit a ticketCall us

WebinarDatabase Roundtable – Expert Database Professionals Feel Your Pain

In this video broadcast, Head Geek™ Tom LaRock is joined by Karen Lopez, Tim Chapman, and David Klee. They’ve known each other for many years, so this discussion was like four friends getting together to talk data and databases. They discussed diagnostic data collection, common performance root causes, reactive tuning versus proactive, and more. Join us for an engaging discussion on these topics! Plus, Tom LaRock will be available to answer your questions live.

Register now.

Home > Success Center > ipMonitor > ipMonitor - Knowledgebase Articles > Install ipMonitor on a domain controller

Install ipMonitor on a domain controller

Updated September 24, 2018

Overview

This article explains how to install ipMonitor on a domain controller.

SolarWinds does not recommend installing ipMonitor on a domain controller.

Warning: SolarWinds strongly recommends that you back up your registry before making any edits to your system registry. You should only edit the registry if you are experienced and confident in doing so. Using a registry editor incorrectly can cause serious issues with your operating system, which could require you to reinstall your operating system to correct them. SolarWinds cannot guarantee resolutions to any damage resulting from making registry edits.

Environment

All ipMonitor versions

Details

Domain controllers are vital to the security of all devices on your network, and should be dedicated to this task. To maintain the highest level of network security, you should segment your critical resources. You expose your domain controller to increased security risk by merging it with other functions such as web servers, mail servers, or even ipMonitor.

Running ipMonitor on a domain controller also results in less security for ipMonitor. SolarWinds recommends that all our customers create restricted Windows accounts specifically for running the ipMonitor Service that apply only the minimum tokens required for successful operation of the ipMonitor service. But when you install ipMonitor on a domain controller, the Credential Manager cannot be enabled to impersonate Windows accounts with elevated permissions. There is no allowance for trust relationships outside of the domain, and this results in limited access to many ipMonitor features.

If you must install ipMonitor on a domain controller, perform the following steps:

  1. Log in to the server hosting the domain controller.
  2. Start the Registry Editor.
    Open a Run box and execute:
    Regedt32.exe
  3. Access the following registry key:
    HKLM\SOFTWARE\ipMonitor (for x86 systems)
    HKLM\SOFTWARE\Wow6432Node\ipMonitor (for x64 systems)
  4. Add a STRING value to this registry key.
    Name: ALLOWLANMANNT
    Type: REG_SZ
    Value: 1
  5. Exit the Registry Editor
Last modified

Tags

Classifications

Public