TN WW241 NT Services that must not be excluded from the Administrators group

Description

This article from InSource shows which NT Services that must not be excluded from the Administrators group starting with System Platform U3.

• Author: Glenn Yancey
• Published: 09/15/2019
• Applies to: System Platform  and Historian Server U3 and higher

Details

In System Platform, starting in 2017 U3, there are specific NT Services that may get deleted by many IT groups when group policies are pushed down to machines in a domain.   It is important that these NT Services are NOT removed by any IT group.   These could affect the both the Galaxy Repository, the IDE, and the Historian.  If these are removed, there could be massive instability in the software.   Please make sure that these are NOT removed in any Group Policy push to domain users and nodes.   If they are removed, you may have to add them back in manually in Administration Tools/Computer Management/System Tools/Local User and Groups/Groups.   

Administrators

NT SERVICE\aaPim
NT SERVICE\adpHostSrv
NT SERVICE\InTouchDataService
NT SERVICE\InTouchWeb
NT SERVICE\psmsConsoleSrv
NT SERVICE\simHostSrv

aaAdministrators

aaGalaxyOwner

BUILTIN\Administrators

NT AUTHORITY\NETWORK SERVICE

NT SERVICE\aahClientAccessPoint

NT SERVICE\aahSearchIndexer

NT SERVICE\AsbServiceManager

NT SERVICE\InSQLConfiguration

NT SERVICE\InSQLEventSystem

NT SERVICE\InSQLManualStorage

NT SERVICE\InSQLStorage

WonderNetAcct

aaPowerUsers

BUILTIN\Power Users

NT SERVICE\aahInSight

NT SERVICE\aahSupervisor

NT SERVICE\InSQLIndexing

NT SERVICE\InSQLIOServer

NT SERVICE\InSQLSystemDriver

aaReplicationUsers

NT SERVICE\InSQLConfiguration

WonderNetAcct

AsbCoreServices

NT Service\Watchdog_Service