Must Execute360 service accounts also be local Administrators?

Alan Hitchings

By Mitch Gershonowitz

 

My company has very strict security procedures.  After a software application is installed on a server, they require that it run under the context of a domain user who is not a member of the local Administrators group on the computer.  Will Execute360 work under those conditions?

 

Mitch Gershonowitz
Manager, Software QA, BPS
OpenText

Alan Hitchings

By Mitch Gershonowitz

The answer is Yes and No.

For a domain server or an EIS server, the service accounts (RouteEngine, Object Manager, etc.) needn't be local Administrators.  The only account that must be in the local Administrators group is the Management Components identity (configured on the MC tab of the Server Configuration Utility).

For an archive server, the Archive service account must be the same as the MC identity, so in this case, that one account must be a local Administrator.

 

Mitch Gershonowitz
Manager, Software QA, BPS
OpenText