For non-admin user, following additional steps are required to run the Snare Enterprise Agent for Windows or Windows Desktop:
Prior to installation
Grant non-admin service account "Log on as a Service" rights. The details are given here https://learn.microsoft.com/en-us/system-center/scsm/enable-service-log-on-sm?view=sc-sm-2022
Non-admin service account is a member of Event Log Readers
Full Permissions to the following registry keys:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\Application
HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\System
HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\Security
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\My
...