BES Server Plugin Service Log on As Permissions

(imported topic written by macook91)

Hello,

Having trouble with the BES server plugin service. Originally, the server was being run using my user account. My user account is an admin on the server, and has full permissions to the database everything was fine.

Then one day an information security auditor stopped by and gave us a big “no no” flag for this. I switched it to logging in as local system (because thats what the documentation said to do) and suddenly, nobody can upload data to the server through the BigFix Console.

So I tried creating a service account with full permissions on the database, and admin rights on the box, still doesnt work.

My question is, exactly what permissions does this account need to run the bes server plugin service. Our setup has the db on the same server as the BigFix server.

Thanks!

(imported comment written by BenKus)

The plugin service needs roughly the same permissions as the FillDB service (read/write to the database and access to read/write many files on the system)…

If the database is on the same computer, usually running the service as LocalSystem will not have any issues…

Ben

(imported comment written by MarlonRojas)

Ben, We have now the same problem. Whats the permisions that we need over the database if we have a remote DB?

Thanks!

(imported comment written by BenKus)

I think you want read/write abilities on the bfenterprise database.

Ben