Skip to main content

Determining Which Access Analyzer Collectors Support gMSA

  • "Which collectors support gMSA in Access Analyzer?"
  • "Can I run Access Analyzer collectors with gMSA?"
  • "Is SmartLog compatible with gMSA?"

Question​

Which Netwrix Access Analyzer (formerly Enterprise Auditor) data collectors support running under a Group Managed Service Account (gMSA)?

Answer​

Not all data collectors in Netwrix Access Analyzer are compatible with gMSA. gMSAs enhance security and simplify password management for services running on Windows, but they require explicit support within the collector's implementation.

The following Netwrix Access Analyzer data collectors support execution under a gMSA:

  • ADActivity
  • ADInventory
  • ADPermissions
  • File System Access Audit (FSAA)
  • PasswordSecurity
  • SmartLog (only when using Network Query mode)
  • SharePoint Access Auditing (SPAA)

NOTE: The SmartLog collector supports gMSA only when it is configured to use Network Query. It does not support gMSA in other modes.

Grant the gMSA account all required permissions as described in the Help Center:

Configure a gMSA Account for Collector Connections