On any Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012 system, File System Factory requires a certain set of Local Security Privileges to manage storage on the local server. These are granted to the Proxy Rights group, which is itself created during setup and configuration of FSF; by default, this group is called FSFProxyRights. The Agent and Event Monitor configuration wizards will attempt to grant the FSFProxyRights group these privileges on their local server automatically, but when scanning a proxy target, it may be necessary to set these privileges manually.
Note that membership in the domain's built-in Administrators group, as well as membership in the local Administrators group for the server, is also required.
These privileges are:
- Access this computer from the network
- Act as part of the operating system
- Back up files and directories
- Bypass traverse checking
- Create a token object
- Create symbolic links
- Impersonate a client after authentication
- Log on as a batch job
- Manage auditing and security log
- Restore files and directories
- Synchronize directory service data (only required on servers running a FSF Event Monitor)
- Take ownership of files or other objects