Permissions

While the module has extensive tests to verify sufficient access, here are the permission requirements.

Administrator

There is one instance where Administrator permission is needed and that is to register a new Source in the Application Event Log. This is only necessary if using WinEvent as an Alert Method. Once the source is registered, Administrator permission is no longer needed.

Standard User

A standard user has enough permission to run this module as long as the following are met.

1. Read access to IIS log files.
2. Read & Exec permission of Logparser.exe

Scheduled Task

The recommended implementation is to run as a scheduled task. This requires the user account running the scheduled task to have Log on as a batch job User Rights Assignment (SeBatchLogonRight).