Re: Changing Biztalk Sevice Login Accounts

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



You'll want to change the identity on the host instances, through the admin
tool (not on the services) which updates the services and some meta data.

Make sure the identity is in the proper host windows group so that it has
rights to the database

If the identity is used for isolated hosts (web services and HTTP) then make
sure it is in IIS_WPG group and that for web services it has rights to the
temp directory. You'll also need to change the identity on the application
pools to the new identity.

For any file access where you have given the old account rights, you'll need
to give the new account, or better the host windows group, the rights as
well.

These are the basic changes, your situation may call for more work depending
on the setup.

Matt


"jkahn" <jkahn6@xxxxxxxxx> wrote in message
news:1132327263.773191.85440@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Greetings,
> I'm a Biztalk newbie, I installed a two server simple Biztalk setup
> to support a vendor application, and used one of my standard domain
> logins during the installation as the authenticating login. Now that
> the process is up and running and seems to be working fine, I'd like to
> change Biztalk and its supporting services to a new login I have
> created just for this Process. This will enable me to better track
> what the process is doing, and identify it in the SQL server easier.
> I changed the login on the services, and they restarted ok, but the
> Biztalk Orchestration seemed to fail to pick up files afterwards, once
> I changed it back to the old login, things ra fine. On close
> examination, I can see the login is used as Identity in a number of web
> pools, and in biztalk itself.
>
> Can anyone help me with figuring out exactly what I need to change to
> get this to work properly on the new login? Is there more to do than
> simply changing all the identities and services? My gut tells me yes,
> but I'm not an expert with Biztalk, and just beginning my research on
> how to change this.
>
> Any help at all would be appreciated.
>
> Jeff Kahn
> Montefiore Medical Center
>


.



Relevant Pages

  • RE: Very odd behaviour of our receivehost (bts2006 R2)
    ... I know biztalk heavily relies on AD... ... It's not the isolated receive host, it's the 'normal' receive host that is ... receivehost after that and still this sometimes doesn't help, ... It's my impression that the adapters I installed (AX2009 biztalk adapter ...
    (microsoft.public.biztalk.general)
  • Re: /etc/hosts.equiv & .rhosts
    ... want to login at another host, that host needs the first host's name ... best to allow key-only login so hackers can't ... on the port 22 as it WILL be messed with all day long. ... # Protocol 2 only ...
    (comp.os.linux.security)
  • Re: Limit the number of erroneous logins of root from the same IP
    ... After the limit that IP can not try to login anymore. ... be careful about reacting to spoof attacks. ... I've seen idiots trying to spoof login attempts from ... It offered three options - add a host reject route (man ...
    (alt.os.linux.redhat)
  • Re: Access control
    ... login, it's also possible to NOT allow roaming logins. ... can only login to *their* host, ... from a car in an environment where theft runs riot, ... the hard disk to insert into the bay to use the host. ...
    (microsoft.public.windowsxp.general)
  • Re: Limit the number of erroneous logins of root from the same IP
    ... After the limit that IP can not try to login anymore. ... Why are you allowing root to log in over the net? ... before any of the deny lists in /etc/hosts.allow. ... It offered three options - add a host reject route (man ...
    (alt.os.linux.redhat)