Monitoring Service Logon Account

Warnings and Notes

Warning:  

  • Running the Service Configuration Utility is the only supported way of changing the stored monitoring service credentials. Changing the security account using the services applet in the Windows Control Panel causes the service to fail and isn't supported. The service appears to be running, but is unable to perform any work due to an encryption error.
  • Do not use the Service Configuration Utility if you are using the EPI version of SentryOne. Refer to the EPI Commands article for instructions on using the update command to change a password or service account.

Note:  To only update a password, use the services applet in the Windows Control Panel.

Additional Information: For more information about the different requirements for the monitoring service logon account, see the Monitoring Service Security topic.

Instructions

The Service Configuration Utility is used to change the stored credentials of the SentryOne monitoring service. If the user account used by the monitoring service needs to be changed, the SentryOne Service Configuration Utility needs to be run for the public/private key encryption to validate the change. The ServiceConfiguration.exe utility is in the SentryOne program group on the Start menu. Change your SentryOne Monitoring Service credentials by completing the following steps:

  1. Run the SentryOne.App.MonitoringService.Configuration.exe application to open the Set SentryOne Monitoring Service Login window.SentryOne Service Configuration Utility
    Service Configuration from the Windows Start menu.
  2. Enter your new password, and confirm your password in the applicable boxes on the Set SentryOne Monitoring Service Login window. Select OK to confirm your changes.SentryOne Set Monitoring Service Login window
    Enter the new information for the monitoring service account.
  3. If you have more than one SentryOne connection, you will see the SentryOne Database Connection Management screen. Select the Connect button for the SentryOne connection you are updating.SentryOne Repository Connection Management
    Select the connection you are updating.
  4. Press any key to exit the Service Configuration UtilitySentryOne Service Configuration Utility Press any key to continue
    Update successful.

Success: If everything completes successfully, a Service configuration complete message displays on the Service Configuration command prompt window. Press any key to close out of the utility.

Using gMSA

If you are using Group Managed Service Accounts (gMSA) for your monitoring service account, use the Is gMSA? checkbox. Follow the same process as described above in the instructions. When Is gMSA? is checked, the password fields are disabled.

SentryOne Monitoring Service Login Is gMSA optionIs gMSA? option

Note:  The service account will appear with a $ after it in the Service Configuration message and service screen to denote that it is a gMSA account.

Example of $ appended to gMSA account name

Example of Log On As appearing with $ to indicate the service account is using gMSA

Note:  gMSA is only available from the Service Configuration Utility, it is not available during the initial installation for the SentryOne Unified Setup.

Using gMSA with EPI

See the isGmsa section of the EPI Commands article for instructions and examples. EPI allows gMSA to be used during the installation and updates to the account.