Changing the service account that runs a VMS service

A Microsoft service account is an account used to run one or more services or applications in a Windows environment. The VMS services use the service accounts to register and communicate with the other VMS components. You select the service account for the VMS during the installation of the XProtect VMS, such as Network Service, but you can change the service account afterward.

To make sure that the different VMS components can communicate with each other after you have changed the service account, you must do the following:

  1. Add the selected Windows user to the Administrator role in XProtect Management Client.

  2. In Microsoft SQL Server Management Studio, add a Windows user to the public role and map the user to the  db_owner database role for the following databases:

    • Surveillance: Management and event server

    • Surveillance_IDP: IDP

    • Surveillance_IM: Incident Manager

    • LogserverV2: LogServer

  3. Stop the VMS services, see Start or stop a VMS service.

  4. Stop the IIS application pools for the VMS, see Start or stop an Internet Information Services (IIS) application pool.

  5. Change the identity of an IIS application pool, see Change the identity of an IIS application pool for XProtect.

  6. Change the service accounts for the VMS, see Change the service account for a Windows service.

  7. Register the management server from the Server Configurator.

    The registration triggers a restart of the server services. Once the services start, a confirmation appears, stating that registration on the management server has succeeded. If the services did not start automatically, you can start them from the Windows Services Manager, see Start or stop a VMS service.