topic Re: Datastore TileCache and Trusted Sites in ArcGIS Enterprise Questions

Datastore TileCache and Trusted Sites

Oiligriv — Thu, 03 Jun 2021 10:32:01 GMT

Hello
I have an anomaly with the publication of 3d Scenes.
the solution offered by Esri support I know it works
below the link.

https://support.esri.com/en/technical-article/000018751

my problem is that the domain user running ArcGIS Server does not have the Logon rights.

how can i apply the support solution?

Thank you

Re: Datastore TileCache and Trusted Sites

JonEmch — Thu, 03 Jun 2021 21:27:24 GMT

Looking at this issue, you may have to engage with a user who has log on privilege's to add the site to the security tab. This workflow may require an admin user to do so, depending on how locked down the underlying system is.

Re: Datastore TileCache and Trusted Sites

DavidColey — Thu, 10 Jun 2021 18:07:32 GMT

In our windows environment for the tile cache data store, (and the relational store) I had to add the windows domain account that runs arcserver.exe service to the datastore machines administrators domain group - so example domain\\arcgisserveraccount then has full control over all the directories. Then I tested that I could log on to the servers with the arcgis server service account. That solved it for us.

Re: Datastore TileCache and Trusted Sites

Scott_Tansley — Fri, 11 Jun 2021 05:49:29 GMT

Personally, I wouldn't run anything under an admin context. It's a security risk.

Logged in to the server as you, you can run executables as a different user. so choose IE and 'Run As' the ArcGIS Server service account, this will allow you to get to internet options and you can make the selections there. Otherwise, use a signed certificate instead of a self-signed one?

Re: Datastore TileCache and Trusted Sites

DavidColey — Fri, 11 Jun 2021 20:55:32 GMT

I'm not running anything under an admin context. Early on, we placed the service account into an admin group as a troubleshooting step so we could actually log on to the datastore machines with that account. Once we were certain the account could get to the directories needed we removed it.