What specific permissions does everyone use for their BigFix service account and how did you assign them (delegation, group, etc)? I’ve looked around and couldn’t find anything very specific. It seems like the main thing is having permissions to the database, but what about AD querries and such? We’re on a bit of a permissions reduction kick and I can probably remove a few from the BF admin.
Are you meaning the account running a specific service? Are you talking about Server/Client/Relay?
Basically the accounts that run the BES FillDB, BESGatherDB and BES Root Server services on the main server.