Select to view content in your preferred language

ArcGIS Portal "whoami.exe"

1475
1
05-17-2022 06:43 AM
BernardMurphy
New Contributor

ArcGIS portal logs an instance of "whoami.exe" in the security event log every minute or so. Security team are picking up on this as unusual activity. Is this normal behaviour by design and if so what is its purpose ?

 

Thanks

0 Kudos
1 Reply
ReeseFacendini
Esri Regular Contributor

That is by design, and it happens because Portal is checking that the ArcGIS Process owner can read / write to the required directories (db, temp, content, index).