Deployment Agent Not Running As Local System Or Local Administrator

ma_carson_reinke

I cannot have Deployment Agent service or MediaBin service run as Local System or Local Administrator. I need an alternative. Does anybody have any ideas or know exactly what permissions are needed for each service?

Migrateduser

I can help with Deployment Agent.

The simplest security settings for the Deployment Agent service would be MODIFY permissions to its installation folder, all subfolders under it, and to all files in those folders. That assumes you've installed it using the default settings, where the Deployment Agent log file and workspace folders are under the installation folder. These are configurable at install time and can be changed via the registry.

The service polls the Deployment Agent database at 5 seconds intervals (configurable via the registry) to look for schedules to run. The service is a MediaBin client application written in VB6. Each schedule has its own credentials to access MediaBin and its targets (ftp or file system). A schedule primarily downloads assets from MediaBin server to a subfolder in its workspace folder (derivative creation step), then deploys those files to one or more target locations using ftp or Windows file sytem copy.

The most efficient method of downloading assets from MediaBin server is to allow the MediaBin server process direct access to a UNC share at target location. In the case of Deployment Agent, that would mean giving the MediaBin server service account MODIFY permissions to the Deployment Agent workspace folder and its subfolders. The Deployment Agent workspace folder would need to also be shared with CHANGE permissions granted to the MediaBin server service account. This is not a requirement if not possible, but it is usually more efficient to allow MediaBin server to copy files directly to the download location.