Running Cassandra as a non-SYSTEM user (Windows)
By default, DataMiner will run the Cassandra service with SYSTEM privileges. To reduce the impact of a breach through the Cassandra service, we recommend running Cassandra as a restricted user.
A PowerShell script is available to modify the Cassandra service user. You can download this Modify-CassandraServiceUser Powershell script from GitHub.
To run Cassandra as a non-SYSTEM user:
Stop the DataMiner Agent.
Open a command prompt as Administrator.
Execute the compmgmt.msc command to open Computer Management.
Navigate to Computer Management (Local) > System Tools > Local Users and Groups > Users.
Right click Users and select New User.
Fill in a User Name, for example cassandra_service.
Configure a strong password.
Clear the checkbox the User must change password at next logon.
Select the checkboxes User cannot change password and Password never expires.
Grant the user Modify access to the following folders:
Do not grant the permissions on the entire C:\Program Files\Cassandra folder, as this may introduce vulnerabilities.
Go back to the command prompt and execute the services.msc command to open the Service Manager.
Stop the Cassandra service.
Right-click the Cassandra service and open Properties.
Open the Log On tab and select This account.
Fill in the credentials for the user you created earlier.
Click Apply and OK to close the properties window.
Start the Cassandra service.
Start the DataMiner Agent.