Can I allow non-administrators to manage my EventSentry configuration?

Article ID: 262
Category: Configuration
Applies to: 3.0
Updated: 2018-11-08

To set up access to modify groups, packages, and other configuration changes:

Create an Active Directory security group, which we will call "ES_Admins" in this example, and then add the users that will be managing EventSentry to that group. Then configure the EventSentry registry key to have Full Access permissions granted to the "ES_Admins" group:

Also configure the installation directory to have Full Access permissions granted to the "ES_Admins" group:
C:\Program Files\EventSentry\
C:\Program Files (x86)\EventSentry\

You must also share ProgramUpdate folder on each remote computer, and call the share "ES$":
C:\Program Files\EventSentry\RemoteUpdate
C:\Program Files (x86)\EventSentry\RemoteUpdate
and you must also grant the "ES_Admins" group Write access to the ES$ share settings of your remote computers.

Lastly, in the Management Console toolbar, click Tools > Options and select the Remote Update tab. Change the Remote Share Preference drop-down to select ES$ instead of ADMIN$. If you have already deployed EventSentry, you will need to restart the agent on your remote computers. Now your non-administrator users can manage EventSentry and push configuration changes to the remote computers without being an administrator of the remote computers or the management console computer.

To set up access for deploying or upgrading agents:
You can use a scheduled task in Windows Task Scheduler for eventsentry_upd.exe ( and configure the scheduled task to run under an account that has administrative privileges on your remote computers. This allows the upgrades or deployments to run even if the currently-logged-on user does not have administrator privileges on the remote computers.