Overview

After the recent LanGuard installation or service account change, you are facing error messages when starting the program. The GFI Languard Troubleshooter Wizard indicated one of the following error messages:

• 'The Attendant Service user does not have administrator privileges'
• 'The Service user does not have administrator privileges'

Solution

LanGuard runs under the service account specified for the GFI LanGuard Attendant service. This service account needs to have local administrator privileges on the LanGuard server and any machines that it needs to scan and patch.

Normally a service account that is a member of the Domain Administrator AD group has these privileges but this can vary depending on the environment and security policies. Refer to the Best practices for setting up account permissions with alternative credentials for more information.

If you are getting 'The Service user does not have administrator privileges' message, one of the other GFI LanGuard services (not the Attendant service) runs under a user account lacking administrator privileges. In such a case, once the Troubleshooter Wizard shows no errors for the GFI LanGuard 12 Attendant Service, use the same user account for the rest of the GFI LanGuard services.

To adjust the service account permissions:

1. On the LanGuard server, go to Control Panel > Administrative Tools > Services, locate and double click on the GFI LanGuard XX Attendant Service, select the Log on tab. Notice the account specified to start the service; all the later checks will be performed for this account.
   
2. Check under Administrative Tool > Computer Management >Local Users and Groups > Administrators if this service account is explicitly part of the group. If not, add it.
3. Open the Local Security Policy (secpol.msc) on the LanGuard server and navigate to Local Policies > User Rights Assignment. Verify if this service account is specifically listed for the following policies:
   • Adjust memory quotas for a process
   • Allow log on locally
   • Log on as a batch job
   • Log on as a service
4. Add the service account to these policies if it isn't there already. Run gupdate /force from the command prompt with administrator rights to update the policy.
5. Verify that the account used has Required Security Permissions on the machines to be scanned in your environment.
6. Restart the GFI LanGuard XX Attendant service.

Testing

Run the GFI LanGuard Troubleshooter Wizard and verify that the error no longer appears. If it is still there, it might be due to a corrupted installation, and repairing it may help.

If the problems started after the recent LanGuard installation or upgrade, it is recommended to uninstall LanGuard from the control panel, reboot the server, disable antivirus, unblock the installer and Install LanGuard.

If the issue persists, contact GFI LanGuard Support.

Related Articles

• Why is GFI LanGuard Attendant Service Not Starting, Keeps Stopping or Crashing?
• Resolving Troubleshooting Wizard Error "The scanning profiles database is not available"