Agilicus Connector – Microsoft Windows

Versions Supported

The Agilicus Connector will run on any version of Windows XP or later. However, prior to Windows 10, the ‘curl’ command, used as part of the install, was not present, and you may need to manually install it.

If your Windows version is old or unpatched, it may be missing the Let’s Encrypt Intermediate certificate, see https://letsencrypt.org/certificates/

Installation

C:\WINDOWS\system32>curl ifconfig.me
99.250.30.222

General Notes

Diagnostic Logs – Windows Eventvwr

The Agilicus Connector sends diagnostic and access logs to Windows Eventvwr by default. To view these logs on a standalone-basis, you might consider creating a custom view.

1. Open Microsoft Windows eventwr (from Start menu, type ‘eventvwr’)
2. Right click in custom views
3. Create Custom View
4. Select ‘By Source’, and ‘agilicus-connector‘. Enable each Event Level of interest (e.g. Critical, Warning)
5. Save as ‘Agilicus Connector Logs’

Once this is complete, you will see a new custom view as below. You may then browse the logs or e.g. right-click and save a text file for forwarding.

File Permissions Correction

If your connector shows a warn status, it could mean that the file does not have sufficient permission for Agilicus’ connector. To give access files/folders the correct permissions, 

Automatic Permission Fix Instructions

Download and run this script (in Powershell) as access.ps1, or, follow the manual instructions below.

$path="C:\Program Files\agilicus"
$user=Get-CimInstance -Class Win32_service -filter "Name = 'agilicus-agent'"| select -expand startname
if ( $user -Match "LocalSystem" ) { $user="NT AUTHORITY\SYSTEM"}
$acl = Get-ACL -Path $path
$AccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule($user,"FullControl","ContainerInherit,ObjectInherit","None","Allow")
$acl.SetAccessRule($AccessRule)
$acl.SetAccessRuleProtection($False,$True)
$acl | Set-Acl -Path $path

Manual Permission Fix Instructions

See which user accounts are running the service

1. Right-click on the Start button to open the WinX Menu
2. Select Run
3. Type services.msc in the Run box which opens
4. Windows Services Manager will open.
5. Under the Name column, you will see Agilicus Connector
6. You will see the user running this service in the Log On As Column

Update the Folder with correct user/permissions

1. Right-click the folders (Typically “C:\Program Files\agilicus”)
2. Select Properties. The Properties dialog box appears.
3. Access the Properties dialog box.
4. Select the Security tab.
5. Click Edit. The security tab opens in a new window.
6. Click Add… The Select Users, Computers, or Groups dialog box appears.
7. In the Enter the object names to select text box, type <username> and check
8. Click OK. The Properties dialog box reappears.
9. Click OK on the Security window.
10. Access the Properties dialog box.
11. Select the Security tab.
12. Click Edit
13. In the Group or user name section, select <username> 
14. In the Permissions section, use the checkboxes to select Full control Allow
15. Click Apply
16. Click Okay