Change System User

The system user can be created by the installer and assigned an unknown, automatically generated, very complex password. An existing (domain) user can also be specified during the installation process and this user will be used at all relevant points.

The installer writes the system user to the registry and uses it from there. This user is retained even after uninstalling and will be used again when reinstalling.

If the entry below exists, the package installers in the installer suite will use it. If it is not already present, the first package installer that is installed will enter it:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MSE\IQ4docs 4\GeneralSystem

  • SystemUserName: Username of the system user
  • SystemUserPwd: Encrypted password of the system user

This registry key is retained even after the suite is uninstalled and will be used during a reinstallation (this value takes precedence over the value entered in the installer). If you have completely uninstalled (and also deleted the installation directory) and now want to install again with another user, delete the registry key GeneralSystem.

If it should be necessary to change the user afterwards, the following locations where the system user has been entered automatically must be edited. This can also be done for parts of the system (e.g. AuthenticationService for AD authentication or ImageService for access to certain directories).

In order for the application pool to be executed by the IIS under this user and for system information to be collected with this user (see Dashboard), the user must belong to the following local groups.

  • IIS_IUSRS
  • Power Protocol User
  • Power Monitoring User

It might be necessary to grant the user employed for this access to the IIS Metabase and other directories used by ASP.NET. This can be done with the following command (replace “domain\username” with the actual username):

%windir%\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis -ga “Domain\Username”

Proceed as follows to change the permission for the application pools.

  • Open the IIS Manager.
  • Open the application pools via the Connections tree view.
  • Select the desired application pool with a left click and in the Actions area, click Advanced Settings.
  • For the Identity setting, click ... at the end of the line.
  • Under User-Defined Account, click Set... and specify the desired user and password and save the settings.
  • Then restart the application pool by clicking Exit in the Actions area for the application pool and then click Start again (do not use Reuse).

The user was automatically given full access right to the following directories and shares (relative path specification starting from the installation directory). Set these for the new user.

  • WorkflowFiles
  • Logs (no share)

In addition to the directory right (security), also observe the right for sharing.

The automatically created user was specified automatically in the system area. Change the following settings and specify the new user.

In the Web administration, click System > System Areas in the menu. The list view of the system areas opens. The Standard Area system area is present by default.

For Username and Password, enter the access data that is specific to the share and the directory specified under Path (default directory: WorkflowFiles).