How to create a service account for the RNSEServer service on Windows computers
IMPORTANT: Creating a service account may introduce a security risk. It is recommended that you follow strong password guidelines for this account.
Creating a service account that is designated to log in the RNSEServer service gives you more direct control over the service. Without a service account, when you stop the RNSEServer service (for example, if you want to back up the SE databases), the RNSE service can sometimes get hung in a “Stopping” state. Once in this state, the only way to restart the service is to reboot the server. You may sometimes be able to end the RNSEServer task in Task Manager, but because the RNSEServer service is normally logged in under the Local System account, attempting to end the RNSEServer task often results in an “access denied” message.
Creating a service account will help you avoid having to reboot the entire server in order to restart the RNSEServer service, should it end up in the “Stopping” state. Updating the RNSEServer service will also avoid this problem.
To create a service account if SE is being served by a domain controller:
- Create a network user ID, saReadNaturally. This ID does not need any special group membership, but it must have a password that does not change.
- On the domain controller, give the network user ID modify permissions for the RNSEServer folder. (The default location is C:\Program Files\RNSEServer.)
- Choose Start > All Programs >Administrative Tools > Local Security Policy. Expand Local Policies (click +), choose User Rights Assignment, and then double-click Log on as a service. Click Add User or Group, enter the network user ID saReadNaturally, and then click OK.
- Choose Start > All Programs > Administrative Tools > Computer Management.
- Expand Services and Applications (click +) and click Services to display all services.
- Locate the RNSEServer service, right-click it, and choose Properties.
- Choose the Log on tab and change Log on as from Local system account to This account. Click Browse, enter the network user ID saReadNaturally (created in step 1), and click OK.
- Enter and confirm the password and then click OK.
- Stop and start the service so the changes take effect. (Right-click RNSEServer and choose Stop, then right-click RNSEServer again and choose Start.)
To create a service account if SE is being served by a non-domain controller server or a Windows XP workstation:
- Right-click My Computer and choose Manage.
- Expand Local Users and Groups (click +) under System Tools.
- Right-click Users and choose New User. Specify the following information and then click Create:
- User name: saReadNaturally
- Full name: saReadNaturally
- Description: Service account for RNSEServer service
- Password: <specify a password>
- Confirm password: <specify the password again>
- Uncheck User must change password at next logon.
- Check User cannot change password.
- Check Password never expires.
- Add the service account to the Administrators group by performing these steps:
- From Computer Management, choose Groups.
- Double-click Administrators.
- Click Add.
- Enter saReadNaturally, click Check Names to fully resolve the name, and then click OK.
- Click OK to finish adding the account to the Administrators group.
- Add the service account to the RNSEServer service by performing these steps:
- From Computer Management, expand Services and Applications (click +) and double-click Services to open it.
- Locate the RNSEServer service, right-click it, and choose Properties.
- Choose the Log on tab and change Log on as from Local system account to This account. Click Browse, enter the network user ID saReadNaturally (created in step 1), and click OK.
- Enter and confirm the password and then click OK.
- Start the RNSEServer service so that this service account is the owner of the RNSEServer service. (Right-click RNSEServer and choose Stop, then right-click RNSEServer again and choose Start.)
- Verify that the Log on As column shows the new service account’s name.
