topic Re: Change GeoEvent service account to domain account in ArcGIS Enterprise Questions

Change GeoEvent service account to domain account

julian_svcs — Thu, 27 May 2021 20:26:51 GMT

How do I change the service account for GeoEvent from a local account to a domain account?

Is this done with the ArcGIS Server configure account tool?

Thanks very much,

Julian.

Re: Change GeoEvent service account to domain account

ReeseFacendini — Thu, 27 May 2021 20:51:55 GMT

The actual changing of the account is done from the Windows Services panel (the two gears icon), but the other piece of this is to give that domain account full control (or as close to it as possible) over the same GeoEvent folders on the hard drive.

Re: Change GeoEvent service account to domain account

julian_svcs — Thu, 27 May 2021 21:36:24 GMT

Thanks for the reply.

Is there anything in the registery that would need and update?

Re: Change GeoEvent service account to domain account

ReeseFacendini — Fri, 28 May 2021 14:52:18 GMT

Nope, there's nothing within the registry that needs to be adjusted

Re: Change GeoEvent service account to domain account

julian_svcs — Sun, 30 May 2021 23:54:46 GMT

Thanks once again. I am not sure if it is related to this (hence my post) but we are getting windows log errors after we initially changed the GE service account to a domain account:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{0358xxxxx-xxxxxxx-xxxx-xxxx9148}
and APPID
{3EB3xxxxx-xxxxxxx-xxxx-xxxx6683}
to the user DOMAIN\svc_aztst_arcgis SID (S-1-5-21-6458xxxxx-xxxxxxx-xxxx-xxxx7632) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.

These start shortly after 12am (guessing it is just after the service refreshes).

Re: Change GeoEvent service account to domain account

ReeseFacendini — Tue, 01 Jun 2021 16:55:34 GMT

Does the domain service account have admin rights to the machine?