3.5.10 Notes for Windows
- Organization of this subsection
(1) Execution permission
You need Administrator permissions to operate APM.
If you have enabled UAC (User Account Control) in Windows Server 2008 or Windows Server 2012, make sure that you log in and operate the product with the built-in Administrator account.
(2) Setting the "SNMP System Observer - Agent for Process" service account
For the SNMP System Observer - Agent for Process service account, specify either the local system account or an account belonging to the Administrators group.
The local system account is set by default.
To set an account belonging to the Administrators group:
-
From the Control Panel, open Administrative Tools, and then select Services.
-
From the list of services, select SNMP System Observer - Agent for Process, and then open the properties.
-
For the service account, set a user name that belongs to the Administrators group.
-
Specify the password for the user name set above.
If you installed the software on an NTFS-formatted partition, grant to the following user groups or users the Full Control permission for all files and directories created by APM:
- When the service account is the local system account:
-
Everyone or
SYSTEM
- When the service account is an account belonging to the Administrators group:
-
Everyone,
Administrators, or
A user specified for the service account
By default, the Full Control permission is granted to Everyone.
(3) Executing remote commands
Using a remote command to execute a window program requires access to the desktop. Thus, you need to modify the service account by following the procedure shown below. In doing so, however, note that without access permissions to the installation directory of APM, SYSTEM (the operating system) cannot access shared resources, and thus you cannot obtain error logs nor preserve any modified monitoring intervals through commands or other means. Make sure that you avoid this.
-
In Administrative Tools, select Services.
-
From the list of services, select SNMP System Observer - Agent for Process, and then open the properties.
-
Set the service account as the local system account.
-
Select Allow service to interact with desktop.
(4) Restarting the service
To restart the service, use the following procedure:
-
Stop the SNMP Service service.
-
Start the SNMP System Observer - Agent for Process service.
Notes on restarting the service;
-
When the service control dialog box appears upon restarting or stopping the service, do not click the [Close] button. Doing so can result in unexpected behavior.
-
When restarting the above service, allow approximately a one-minute interval between stop and start. Starting immediately after a stop might prevent the hiapmmib daemon process from starting.
(5) Setting the performance monitor
Capability to monitor the Process objects on the performance monitor is required for this product to monitor processes.
(6) Notes on stopping the "SNMP Service" service
Stopping the SNMP Service service means stopping the SNMP System Observer - Agent for Process service of APM that works in conjunction with the SNMP Service service. Therefore, the APM functions are not available for use while the SNMP Service service is stopped.
(7) Adjusting the timing when the hiapmmib and apmProcMng daemon processes establish connections
An attempt to establish a connection might fail between the sub agent of APM (the hiapmmib daemon process), which is started by the SNMP service, and the apmProcMng daemon process, which is started by the SNMP System Observer - Agent for Process service, depending on when these daemon processes start up. In such a case, see 6.4.1 Monitoring interval definition file (apmini.conf) and modify the INITIMEOUT key.
In some cases, after APM starts up, all monitoring processes might remain Unknown, and the message It failed to an initialization by a generation failure of a piece confidence socket. might be output to $APM_LOG\apmerr.log. In such a case, it is possible that loading the sub agent of APM took a long period of time and resulted in a timeout for some reason. To avoid this problem, specify the above settings to modify the connection timeout period.
(8) Security settings of the installation directory of APM
If you are deleting Everyone or denying full control, do as follows:
In the security setting for the directory, permit Read & Execute for the account used to log on to the SNMP System Observer - Agent for Process service (or for the SYSTEM account if this is the local system account).