Must Execute360 service accounts also be local Administrators?

Alan Hitchings
Alan Hitchings E
in AppWorks #1

By Mitch Gershonowitz

 

My company has very strict security procedures.  After a software application is installed on a server, they require that it run under the context of a domain user who is not a member of the local Administrators group on the computer.  Will Execute360 work under those conditions?

 

Mitch Gershonowitz
Manager, Software QA, BPS
OpenText

Tagged:

Comments

  • Alan Hitchings
    Alan Hitchings E
    #2

    By Mitch Gershonowitz

    The answer is Yes and No.

    For a domain server or an EIS server, the service accounts (RouteEngine, Object Manager, etc.) needn't be local Administrators.  The only account that must be in the local Administrators group is the Management Components identity (configured on the MC tab of the Server Configuration Utility).

    For an archive server, the Archive service account must be the same as the MC identity, so in this case, that one account must be a local Administrator.

     

    Mitch Gershonowitz
    Manager, Software QA, BPS
    OpenText

Categories

image
OpenText CE Products
AppWorks
Gateway & Platform