Creating a dedicated service account

HOWTO98767
Last Updated May 20, 2014

Creating a dedicated service account

Workflow selects the IIS Application Pool accounts and the NETWORK SERVICE account to be your Process Manager's run-time accounts by default. However, Symantec recommends that you use a dedicated service account to be the Process Manager's run-time account.

Note:

This dedicated account must be set up in the target SQL instance. This account is added to the db_owner role on the Process Manager database during installation.

This task is a step in the process for setting up the Workflow computer.

Refer to How To: Create a Service Account for an ASP.NET 2.0 Application at http://msdn.microsoft.com/en-us/library/ff649309.aspx

To create a dedicated service account

  1. Create a new user account as follows:

    Create a new local user account.

    Use the Computer Management tool.

    Create a new domain account.

    Use the Active Directory and Computers tool.

  2. Name the account appropriately.

    For example: <WorkflowService>

  3. Uncheck User must change password at next logon and check Password never expires.

    Make sure that you use a strong password for the account.

  4. Assign the ASP.NET permissions to the new account by running the following command from a command prompt:

    aspnet_regiis -ga MachineName\AccountName

    The MachineName is the name of your server or the domain name, if you use a domain account.

    The AccountName is the name of your custom account.

Imported Document ID: HOWTO98767
Legacy ID: v89651401_v66564686

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation