This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.
BMC Discovery 11.2
The Windows proxy log file shows a message like:
discovery.slave.worker.remquery: WARNING: Slave cannot run local commands as another user. domain\user must have SE_ASSIGNPRIMARYTOKEN_NAME and SE_ASSIGNPRIMARYTOKEN_NAME privileges.
What does the message mean?
For a Spanish language version of this KA, please see KA 000182388
This log message describes the impact - the Windows proxy cannot be used to discover itself as a different user.
To ensure that the "domain\user" indeed has the privileges mentioned in the message, please perform the following on the Windows proxy server. The changes needs to be made to the user account that the Discovery Windows proxy service is running as. In most cases, this is an AD proxy and therefore a domain account.
1. From the Start menu, point to Administrative Tools, and then click Local Security Policy.
2. In the Local Security Settings dialog box, double-click Local Policies, and then double-click User Rights Assignment.
3. In the details pane, double-click "Adjust memory quotas for a process" (This is the SE_INCREASE_QUOTA_NAME user right).
4. Click Add User or Group, and, in the "Enter the object names to select" box, type the user or group name to assign the user right (i.e CDMFED\syscao) to, and then click OK.
5. Click OK again, and then, in the details pane, double-click "Replace a process level token". (This is the SE_ASSIGNPRIMARYTOKEN_NAME user right).
6. Click Add User or Group, and, in the "Enter the object names to select" box, type the user or group name to assign the user right (i.e CDMFED\syscao) to, and then click OK.
After making the above changes, restart the proxy service and verify that the warning has gone away.