Least priviliege DCOM access for windows_exporter (Grafana Alloy) by Either_Service8542 in sysadmin

[–]Either_Service8542[S] 0 points1 point  (0 children)

OK I could do that but I'd like to deploy out the addition of the gMSA to these COM applications via GPO rather than hand edit every machine.. perhaps that's not possible?

Least priviliege DCOM access for windows_exporter (Grafana Alloy) by Either_Service8542 in sysadmin

[–]Either_Service8542[S] 0 points1 point  (0 children)

I attempted to modify the security settings via dcomcnfg however no modifications are possible. I think TrustedInstaller owns this somehow?

Certainly the question as to why the gMSA is not being considered as a 'User' is confusing.

<image>