Coveo Knowledge Base – Information Article – 040409

CES040409: Service Logon Account

The information in this technical note applies to:

Coveo Enterprise Search 3.5+
Coveo Enterprise Search 4

Summary

Coveo Enterprise Search runs as a software service on the destination computer. All software services require a logon account. Thus, you must assign a logon account for the service.

There are two options:

·          Run Coveo Enterprise Search with the Local System Account.

·          Use a specific Windows logon account.

What Setting Should Be Used?

If you plan to index unprotected local or network files and Web pages only, you can use the Local System Account option. In any other case, use the Specific Logon Account.

Using the Local System Account

To use the Local System Account, you do not need to specify any logon information (user name and password) during installation. It is the default user account. However, remember that the service will not be able to index network and local files that have access restrictions.

Using a Specific Logon Account

To index any network or local files, you must configure the Coveo Enterprise Search service to run as a user account that has sufficient rights to access all the files that will be indexed. If the specified user account cannot access the desired files, nor can the service.

Specific Logon Account Permissions

The Logon Account needs the following rights for the service to work properly.

·          Part of Users group of the server where CES is installed.

·          Part of Domain Users group of the domain of the server where CES is installed (not required if server is in a workgroup instead of a domain).

·          Read/Write/Execute on %ProgramFiles%.

·          Full Control on the folder where the index will be stored (default location C:\CES4\).

·          Will be automatically granted Logon as a Service by the installation program.

·          Read on shared folders, folders and files of all file servers to be indexed.

·          Part of SharePoint Administrators Group or part of Administrators Site Group of all SharePoint Portals, Areas and Sites to index.

Security Reminder: The logon account is used to access files for indexing purposes only. Upon querying, the Search Interface filters the search results according to the file access permissions of the user that performed the query.

To Change the Service Logon Account

To change the service logon account for the Coveo Enterprise Search service, follow the steps below:

1.       In the Windows Control Panel, double-click Administrative Tools.

2.       Double-click Services. The Services window appears.

3.       Double-click Coveo Enterprise Search.

4.       Select the Log On tab and change the logon account.

 

Last Reviewed

2006/03/30

Keywords

Service Logon Account