Change service account to another account

The FileHold Server Application runs under a service account model, it has specific permissions, memberships and rights to run the FileHold Server application. This tool must be run by a administrator who also has access to the SQL databases.

  • The service account can be a local account or a domain account.
  • It should not be an administrator or domain administrator level account.
  • It should have a strong password that complies with your domain security policy.
  • The password should not expire nor should the account have the ability to change its own password.
  • It must have SQL Server login permissions where the FileHold databases are stored and managed.
  • It must be the DB Owner of all of the databases that are part of FileHold
  • It must have Login as Service and Login as batch rights under the Local Security Policy.
  • It must be a member of the IIS_IUSRS group.
  • It must run the FH App Pool in IIS.
  • It has specific settings in each of the FileHold web services.
  • It must have full control of the FileHoldData storage structure, specifically the:
    • DocumentRepository
    • FullTextSearch

All of this has to be set for the FileHold Service account for the FileHold server to function properly.

To change the service account

  1. Log into the FileHold server with administrative privileges.
  2. Start FHIT and select Service account change > Change service account.
  3. Click Change.
  4. Enter the service account credentials.
  5. Enter the server name for the scheduled tasks.
  6. Select or enter the user account credentials.
  7. Enter in the URL to the Web Client.
  8. Click Next.
  9. For the Database connection settings, enter the server name and login credentials.
  10. In the Temp directories settings, select the check box "Update security settings of Windows Temp directories".
  11. In the Directory, enter the path to the FileHold Application Server.
  12. Click Next.
  13. Click Update.
  14. Once the process has been completed successfully, click Finish.
  15. Restart WWW Service.
  16. Start the FH App Pool in IIS.
  17. Login to FileHold with Web Client and Desktop Client.
  18. Verify all scheduled tasks can run.
  19. Run the FileHold Health Checker Tool to validate the system.