Reconfigure LogRhythm Services to Use Integrated Security

You must be logged in as an Administrator to take this action.

In this step, all LogRhythm services are configured to run under the integrated security accounts (local or Active Directory).

When changing the login a service uses, you may receive a notification that the login has been granted the Logon as a service right.

Configure AI Engine Services

This step is only performed if you have an AIE server as part of your LogRhythm deployment.

1. Log in to the system running AI Engine.
2. On the Windows Start menu, click Administrative Tools, and then click Services.
3. For each LogRhythm AIEngine service, do the following:
   1. Double-click the service.
   2. Click the Log On tab.
   3. Select This account.
   4. Enter or browse to the account created for the LogRhythm AIE service.
   5. Enter and confirm the password for the account.
   6. Click OK to save the configuration change.
4. From the Windows Start menu, click All Programs, click LogRhythm, and then click AIEngine Configuration Manager.
5. Click the General tab.
6. Select the Login with Windows account check box.
7. Click OK to save the configuration.

Configure API Services

1. Log in to the system running the APIs.
2. On the Windows Start menu, click Administrative Tools, and then click Services.
3. For each LogRhythm API service, do the following:
   1. Double-click the service.
   2. Click the Log On tab.
   3. Select This account.
   4. Enter or browse to the account created for the LogRhythm API.
   5. Enter and confirm the password for the account.
   6. Click OK to save the configuration change.

Configure Windows Data Indexer Services

This step is only performed if you have a LogRhythm XM.

1. Log in to the system running the Data Indexer.
2. On the Windows Start menu, click Administrative Tools, and then click Services.
3. For each LogRhythm Data Indexer service, do the following:
   1. Double-click the service.
   2. Click the Log On tab.
   3. Select This account.
   4. Enter or browse to the account created for the LogRhythm Data Indexer service.
   5. Enter and confirm the password for the account.
   6. Click OK to save the configuration change.
4. From the Windows Start menu, click All Programs, click LogRhythm, and then click LogRhythm Configuration Manager.
5. In the Data Indexer section, under Integrated Security, select Enabled.
6. Click Save.

Configure Data Processor Services

This step must be performed on each Data Processor that will be run under Integrated Security.

1. Log in to the system running your Data Processor system.
2. From the Windows Start menu, click Administrative Tools, and then click Services.
3. Double-click the LogRhythm Mediator Server Service.
4. Click the Log On tab.
5. Select This account.
6. Enter or browse to the account created for the LogRhythm Mediator.
7. Enter and confirm the password for the account.
8. Click OK to save the configuration change.
9. From the Windows Start menu, click All Programs, click LogRhythm, and then click Data Processor Configuration Manager.
10. Click the General tab.
11. Select the Login with Windows account check box.
12. Click OK to save the configuration.

Configure Alarming and Response Manager Services

1. Log in to the system running your Platform Manager.
2. From the Windows Start menu, click Administrative Tools, and then click Services.
3. Double-click the LogRhythm Alarming and Response Manager service.
4. Click the Log On tab.
5. Select This account.
6. Enter or browse to the account created for the LogRhythm ARM.
7. Enter and confirm the password for the account.
8. Click OK to save the configuration change.
9. From the Windows Start menu, click LogRhythm, and then click Platform Manager Configuration Manager.
10. Select the Login with Windows account check box.
11. Click OK to save the configuration.

Configure Job Manager Services

1. Log in to the system running your Platform Manager.
2. From the Windows Start menu, click Administrative Tools, and then click Services.
3. Double-click the LogRhythm Job Manager service.
4. Click the Log On tab.
5. Select This account.
6. Enter or browse to the account created for the LogRhythm Job Manager.
7. Enter and confirm the password for the account.
8. Click OK to save the configuration change.
9. From the Windows Start menu, click LogRhythm, and then click Job Manager Configuration Manager.
10. Select the Login with Windows account check box.
11. Click OK to save the configuration.

Configure Web Console Services

This step is only performed if you have Web Console Services as part of your LogRhythm deployment.

1. Log in to the system running the Web Console.
2. On the Windows Start menu, click Administrative Tools, and then click Services.
3. For each LogRhythm Web Console service, do the following:
   1. Double-click the service.
   2. Click the Log On tab.
   3. Select This account.
   4. Enter or browse to the account created for the LogRhythm Web Console service.
   5. Enter and confirm the password for the account.
   6. Click OK to save the configuration change.
4. From the Windows Start menu, click All Programs, click LogRhythm, and then click LogRhythm Configuration Manager.
5. In the Web Global section, under Database Authentication Strategy, select Windows Account Type.
6. Click Save.