Change service account to another account
The FileHold Server Application runs under a service account model, it has specific permissions, memberships and rights to run the FileHold Server application. This tool must be run by a administrator who also has access to the SQL databases.
- The service account can be a local account or a domain account.
- It should not be an administrator or domain administrator level account.
- It should have a strong password that complies with your domain security policy.
- The password should not expire nor should the account have the ability to change its own password.
- It must have SQL Server login permissions where the FileHold databases are stored and managed.
- It must be the DB Owner of all of the databases that are part of FileHold
- It must have Login as Service and Login as batch rights under the Local Security Policy.
- It must be a member of the IIS_IUSRS group.
- It must run the FH App Pool in IIS.
- It has specific settings in each of the FileHold web services.
- It must have full control of the FileHoldData storage structure, specifically the:
All of this has to be set for the FileHold Service account for the FileHold server to function properly.
To change the service account
- Log into the FileHold server with administrative privileges.
- Start FHIT and select Service account change > Change service account.
- Click Change.
- Enter the service account credentials.
- Enter the server name for the scheduled tasks.
- Select or enter the user account credentials.
- Enter in the URL to the Web Client.
- Click Next.
- For the Database connection settings, enter the server name and login credentials.
- In the Temp directories settings, select the check box "Update security settings of Windows Temp directories".
- In the Directory, enter the path to the FileHold Application Server.
- Click Next.
- Click Update.
- Once the process has been completed successfully, click Finish.
- Restart WWW Service.
- Start the FH App Pool in IIS.
- Login to FileHold with Web Client and Desktop Client.
- Verify all scheduled tasks can run.
- Run the FileHold Health Checker Tool to validate the system.