How to change service account for Platespin services on the PlateSpin Migrate/Protect/Forge server

  • 7005660
  • 06-Apr-2010
  • 24-Oct-2013

Environment

PlateSpin Protect 10 +
PlateSpin Migrate 9 +
PlateSpin Forge 3 +

Situation

There are warnings logged in the Security log of the PlateSpin server or the Domain Controller specifying that the PlateSpin account does not exist or has not been authenticated

Resolution

To change the logon account for PlateSpin services follow the steps below.  Note: the new account must be a part of the Local Administrators group on the machine. It is recommended that this change be made when no jobs are running: 

Changing the PlateSpin service account:
 
1. Go to Start -> Run and run services.msc
2. Stop the PlateSpin Management and PlateSpin Operations Framework Controller services
3. Double-click on the PlateSpin Management Service and click the Log On tab.
4. Change the account specified to the desired account and specify the password.
5. Click Ok to save the changes.
6. Repeat steps 1 -5 for the PlateSpin Operations Framework Controller service
 
Changing the application pool account in IIS 6 (Windows 2003):
 
1. Go to Start -> Administrative Tools -> Internet Information Services (IIS) Manager
2. Expand HOSTNAME -> Application Pools
3. Right-click on PlateSpinAppPool and select properties
4. Click on the Identity tab
5. Change the Username and Password to match those assigned to the PlateSpin Management and PlateSpin Operations Framework Controller services and click Ok
6. Go to Start -> Administrative Tools -> Computer Management
7. Expand System Tools -> Local Users and Groups
8. Click on Groups
9. Double-click on the IIS_WPG group to open its properties
10. Add the account used for the PlateSpinAppPool and the PlateSpin services and click Ok
 
Changing the application pool account in IIS 7 (Windows 2008):
 
1. Go to Start -> Administrative Tools -> Internet Information Services (IIS) Manager
2. Expand HOSTNAME then click on Application Pools
3. Right-click on PlateSpinAppPool and select properties
4. Click on the Identity tab
5. Change the Username and Password to match those assigned to the PlateSpin Management and PlateSpin Operations Framework Controller services and click Ok
 6. Go to Start -> Administrative Tools -> Computer Management
7. Expand System Tools -> Local Users and Groups
8. Click on Groups
9. Double-click on the IIS_IUSRS group to open its properties
10. Add the account used for the PlateSpinAppPool and the PlateSpin services and click Ok

 
Once all changes have been made restart IIS and the PlateSpin Services using the following tool found in the folder where the product is installed:
..\PlateSpin Protect Server\bin\RestartPlateSpinServer\RestartPlateSpinServer.exe

Additional Information

The PlateSpin Server installation creates a local account named "PlateSpin" which is used as the logon account for the PlateSpin services. This account is added to the local administrators group as per requirements of the product.
 

As this account is a local account on the machine hosting Portability Suite server, it is unable to authenticate against the domain. This can cause warning logs in security event logs of a domain controller if the machine hosting Portability Suite server is joined to a domain. There will also be instances when use of local accounts is not permitted in highly secure or locked down IT environments.