Overview

GFI EventsManager is a product intended for systems administrators and therefore the product requires administrative privileges in order to function.

This article explains which GFI EventsManager executables need to run using Administrator rights and provides information on why these are required.

Information

• ESMUI.exe - The GFI EventsManager Management Console allows administrators to configure and manage the operational functionality of the GFI EventsManager. As a result, this console is, by default, only accessible by systems administrators. You should avoid giving access to other users, since this may allow normal users to:
  • Tamper with GFI EventsManager operational settings, possibly disabling or manipulating security services provided by this product.
  • Gain illegal access to stored passwords.
    
    
• ESMPROC.exe - The GFI EventsManager Monitoring Service scans and collects events from target computers. In order to operate efficiently, this service requires access to the registry keys and system files for event log scanning. The login account of this service must be an administrator.
  
  
• TROUBLE.exe - The GFI EventsManager Troubleshooter gains information on the operational functionality and status of GFI EventsManager. The GFI EventsManager Troubleshooter stores this data to a physical file in the installation folder. This operation requires this module to be executed using administrative privileges.
  
  
• EVENTSMANAGERx.exe - The GFI EventsManager Installer module installs GFI EventsManager when launched. In order to successfully achieve this, Eventsmanager7.exe or Eventsmanager8.exe must be run under administrator privileges in order to:
  
  
  • Successfully register entries in the system registry.
  • Install the necessary program/operation files.
  • Install the services used by GFI EventsManager.
  • Uninstall previous installations of GFI EventsManager as required.