0
Answered

After I have installed server agent on Windows XP suddenly a new administrator account _Anturis_Agent_was created. If I remove it can I still use the monitoring agent or it stop monitoring???

Ivan Babinoto 6 years ago updated by Konstantin (Here to help) 6 years ago 9

After I have installed server agent on Windows XP suddenly a new administrator account _Anturis_Agent_was created. If I remove it, can I still use the monitoring agent or it stops monitoring???    
-Seems that the service  stopped after I have removed _Anturis_Agent_ account.


However after I went to computer management service console I discovered that the Anturis Monitoring Agent service is stopped and cann not be started because itt wants to login to the _Anturis_Agent account which was deleted by me!


I fixed it by setup it to login to Local System account instead to _Anturis_Agent account. IT WORKS PERFECTLY 

Howecver I am not clear if is better also to check the option "Allow service to interact with desktop"


Also I do not know if that is the best solution?

Hi Ivan,

Out of curiosity, what was the problem with Anturis Agent running under _Anturis_Agent_  user account? If there is a serious reason for that we may change it across the board.

There is a small GUI which shows the Agent status and some control buttons, so i guess you'd better check that option.

Thanks

Hello! Thank you very much for the extremely quick response!

Well... it created a major scare because the account came out of nowhere and it was threatening with major lost of data if any changes are done:

"If you do this Anturis_Agent you will lose all EFS-encrypted files, personal certificates, all stored passwords..." 


You can imagine how the owner of the business reacted seeing that message on all the POINTS OF SALES SERVERS that run costumers credit card information each minute! They were think that they were hacked! and I was called immediately for explanation which I did not had!

I was thinking the same thing and I uninstalled the Anturis software immediately.....


I thought since the name of the new account is _Anturis_Agent_ that means that your software had security hole and was hacked by hackers and they created they own account mascaraing with the name of your software!


I wanted to log on to that account and it asked my for a password! I immediately recognized that this is a trap by hackers who wants to get my password for my Anturis account and eve bigger damage! I imediatelly tried to remove the password and setup another one so the hackers lose acces to the _Anturis_ account on the computer and the the new scare came out:

"If you do this Anturis_Agent you will lose all EFS-encrypted files, personal certificates, all stored passwords..." 


P.S

If you are planing to sell this software to serious businesses you better come up with a good explanation why a new user account is needed!

I personally do not mind extra account on my computer , but how do I explain that to the business owners that process secure information and credit cards!

You know - people are obsessed with security!


Just a thought!

teamviewer and logmein, radmin, etc are also monitoring agents plus remote control but they do not create obvious administrator accounts

Thanks for the info - we will think it over and come back to you.

HI,

An upfate: we only create administrative account on XP due to some limitations. On later versions we do not add this account to the administrative group.

Ok , I understand , but can you please answer my question?

If I delete the _Anturis_Agent account and I change the Anturis Monitoring Agent service to log in to the local account instead to the _Anturis_Agent acount( because it is not existing anymore, but it needs account to be loged on in order for the service agent to start) will that be ok ?

Do I need to check the option "Allow service to interact with desktop"


I already did that that and it is been working without problems 2-3 days! But maybe there is something else that I should know!

Hi,

As i said earlier, there is a small GUI which shows the Agent status and some control buttons, so i guess you'd better check that option. We also never tryed such on Win XP )

Thanks.

I have Windows 7, and the Anturis Agent User *was* added to my machine.... so it's incorrect that you only add this to XP.
Hello David,
Let me clarify )
It is correct that Anturis Agent User added to all Windows OSes.
But this user does not have administrative privileges everywhere except Windows XP.
Does it make sense for you?
Thanks.