How to run the NuGenesis RPC service with the NetworkService account - WKB13187

OBJECTIVE or GOAL

To run the NuGenesis RPC service on client machines with the NetworkService account.

ENVIRONMENT

• NuGenesis 9 SDMS
• NuGenesis 8 SDMS
• NuGenesis UNIFY client machines
• NOT applicable to machines which run the SDMS file capture modules (Archive Agent / Data Management / OSM) because the service requires a named account in the domain in order to access files on other machines

PROCEDURE

1. Grant the following permissions to the NetworkService account:
   • NuGenesis 9:
     1. Read-write access on "HKLM\System\CurrentControlSet\services\NuGenesis RPC" and all subkeys
     2. Read-write access on C:\Windows\NGTEStatus
   • NuGenesis 8:
     1. Read-write access on "HKLM\System\CurrentControlSet\services\NuGenesis RPC 8.0" and all subkeys
     2. Read-write access on C:\Windows\NG80TEStatus
2. Configure the NuGenesis RPC service:
   1. Open the Services control panel (Start > Run > services.msc)
   2. Select the NuGenesis RPC service. Stop the service if it is running
   3. Double-click the service name to open the properties page for the service. Click the Logon tab
   4. Select the "This account" button. Erase the account name if one is present in the box. Enter "Network Service" into the box
   5. Erase the Password and Confirm Password boxes
   6. Click Apply and OK. You may see a message that Network Service has been granted the Log On as a Service right. Click OK to this message box
   7. Start the service

ADDITIONAL INFORMATION

The NetworkService account has limited rights and is equivalent to the "Users" group.  Running NuGenesis RPC on client machines with this account is preferable to the privileged LocalSystem account.

Microsoft's published documentation on the NetworkService account and the default privileges assigned to it: NetworkService Account - Win32 apps | Microsoft Docs