In order to start a unified broker under a windows user account, the windows user needs to be granted appropriate privileges.
It is able to set a user to be the owner of the process of any unified broker: WebSpeed, AppServer, ORACLE DataServer, ODBC DataServer and MSS DataServer. It is able to define it in Progress Explorer. For more details on how to define a user in ubroker.properties file or through progress explorer to start a unified broker, please reference Progress Solutions:
"
How do I start a Ubroker Process in Windows under a different user account?"
- The user must be part of the Administrators group.
- Extra User Rights are required for the specified user before starting the broker using that specific account:
Add user to the Administrators group
For Windows Server 2016, Windows Server 2012, Windows 10, Windows 7, Windows 8.1
- Open the command prompt with elevated (Administrator) privileges
- Run lusrmgr.msc
- Right click on user > Properties > "Member of" tab > Add > "Administrators" > Check Names > OK
Assign user additional user rights
For Windows Server 2016, Windows Server 2012, Windows 10, Windows 7, Windows 8.1
- Open the command prompt with elevated (Administrator) privileges
- Run secpol.msc
- Expand "Local Policies" > "User rights assignment"
- Assign user to the following policies (for each policy right-click > "Properties" > "Add User or Group" > Type in user name > "Check Names" > OK):
- Act as part of the operating system
- Adjust memory quotas for a process
- Create a token object
- Log on as batch job
- Log on as a service
- Replace a process level token
These changes require a logout prior to taking effect.
