You are viewing limited content. For full access, please sign in.

Question

Question

DCC Server (Scheduler)/Workstation (Worker) Functionality

asked on November 13, 2015

I am looking to get as much definitive information for what it will take to ensure permissions between the workstations (workers) and the DCC server (scheduler) are setup correctly. For this client, the DCC is registered and setup for jobs, of which it’s been running on its own as a worker up to this point. We are needing to expand the capabilities of its process and distribute the load throughout multiple workstations. First of all, understand that all of the servers running Laserfiche software are on one domain and the workstations that we are needing to setup are on another. There is a trust setup between these forests but it is explicit due to security requirements. When configuring the DCC services (log on as…) on the server and workstation as a “super user” on the domain, communication appears to function properly. However, when setting the services up as the stock “local user”, it fails. – I’ve attached a screenshot for what occurs as a local user. What we need is a complete breakdown of what Windows permissions are required for a domain user. Again, this is due to security policies and procedures that the client has in place to ensure that the service account we setup isn’t granted unnecessary permissions. Please let me know what additional information you may require as I’ll be happy to provide it.

Thank you,

Wes Vivian 

0 0

Replies

replied on November 19, 2015

DCC's service user needs the following permissions on the machine that it is running on:

 

Files and Folders

The DCC service user will need to have access to the following directories:

  • C:\ProgramData
    • List folder contents
    • Read
    • Write 
  • C:\Program Files (x86)\Laserfiche\Distributed Computing Cluster
    • List folder contents
    • Read
    • Read & execute
  • C:\Program Files (x86)\Laserfiche\Distributed Computing Cluster\Config
    • List folder contents
    • Read
    • Read & execute
    • Write
  • C:\Windows\SysWOW64\config\systemprofile\AppData
    • List folder contents
    • Read
    • Write 

 

URL Reservation
The DCC service user will need to be allowed to reserve and listen on the following URL

  • http://+:8108/Laserfiche/DistributedProcessing/INodeMetaData
    • Listen     

 

COM  
The DCC service user will need to be allowed the following computer-wide COM access permissions:

  • Local Access
  • Local Launch
  • Local Activation

 

2 0
replied on November 19, 2015

Hi Wes,

I don't see the screenshot attached.  Could you re-upload it?

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.