topic Significance of "dtuser" for oneagentplugin.exe in dynatrace SaaS in Open Q&A

Significance of "dtuser" for oneagentplugin.exe in dynatrace SaaS

AK — Fri, 04 Jul 2025 12:25:31 GMT

Hey Folks,

We observed that, there are five .exe processes getting installed after installing oneagent on windows host. Out of which one "oneagentplugin.exe" showing running with user "dtuser" and other are running with "SYSTEM" user.

Now our Security Team is questioning us, what is "dtuser" user and why its password set to never expire.

Can someone elaborate on this?

Thanks..

Re: Significance of "dtuser" for oneagentplugin.exe in dynatrace SaaS

skrystosik — Tue, 24 Sep 2019 10:47:47 GMT

duser is user created during agent installation. The same is for other OS'es and processes like Dynatrace Server, or ActiveGate. This is because agent should not work on admin/root user. It has it's own on privviliges that it needs. Password never expires because agent does not have option to adapt to credential changes. This uses is only for agent process handling purposes.

Sebastian

Re: Significance of "dtuser" for oneagentplugin.exe in dynatrace SaaS

bstewart — Tue, 24 Sep 2019 11:06:54 GMT

@sebastian k. Many sites' security policies forbid local accounts. What is the recommendation for these cases?

Bill

Re: Significance of "dtuser" for oneagentplugin.exe in dynatrace SaaS

skrystosik — Mon, 16 Oct 2023 14:38:09 GMT

Here is answer for that case:

https://community.dynatrace.com/spaces/482/dynatrace-open-qa/questions/228148/can-we-change-the-dynatrace-service-to-use-a-servi.html

There is option during agent installation described in docs but in such case you will not able to use OneAgent plugins. Those implemented by default in DT as well.

Sebastian