topic Re: QlikView server - AD Service account permission in QlikView

QlikView server - AD Service account permission

Mon, 26 Jan 2026 18:19:17 GMT

Hi,

We are running QlikView server version 11.0.11414.0 on Windows 2008 R2 Standard Edition (x64).

All the components are installed on a single server.

QlikView Management Service (QMS)

QlikView Directory Service Connector (DSC)

QlikView Distribution Service (QDS)

QlikView Server (QVS)

QlikView Web Server (QVWS)

When we try to run the 5 QlikView services (as above) under a AD Service account, they do not restart properly.

The only service which restarts properly is the QlikView Server (QVS).

All the other services starts but fails/crashes immediately.

The only solution at this time is to make the Service account as a Local Admin on the server (or) to run the other 4 services under "Local System".

I have provided the required permissions as per the QV11 Infrastructure -Minimum Security Requirements.pdf document.

I have also provide the service account with COM permissions.

We have a policy which restricts the Service account to have Admin privileges on the server.

Kindly let me know if there is any other change I need to perform so that the Services can run under a AD Service account.

Thanks in Advance,

Kums.

Re: QlikView server - AD Service account permission

gainkarthi — Wed, 13 Feb 2013 12:34:52 GMT

Have you added AD Service account to the group QlikviewAdministrators.?

Re: QlikView server - AD Service account permission

Wed, 13 Feb 2013 13:28:49 GMT

Yes.

The AD Service account is a member of the QlikView Administrators local group on the server.

Re: QlikView server - AD Service account permission

jerrysvensson — Wed, 13 Feb 2013 13:41:23 GMT

The AD Service account has to be a member of the Local Administrator group on the server. Not only a member of

"QlikView Administrators"

Also, the server can't be a DC or BDC.

Re: QlikView server - AD Service account permission

gainkarthi — Wed, 13 Feb 2013 13:42:43 GMT

What is DC and BDC?

Re: QlikView server - AD Service account permission

Wed, 13 Feb 2013 13:51:51 GMT

Hi,

Did you have a look to the logfiles <InstallDrive QV>:\ProgramData\QlikTech\.....

Mybe is a restriction to Windows 2008 R2 Standard Edition (x64). Like you can just use 32GB of RAM....

Regards

Michael

Re: QlikView server - AD Service account permission

Ricardo_Gerhard — Wed, 13 Feb 2013 14:50:26 GMT

The problem isn´t Qlikview. Your problem is in your Policy Restriction.

Remove the policy and try again.

The service account to Qlikview needs to be Local Administrator only and default policies. If you changed it, return default config e apply bit by bit to find your problem.

Re: QlikView server - AD Service account permission

Wed, 13 Feb 2013 22:38:09 GMT

DC is Domain Controller.

BDC is Backup Domain Controller.

Re: QlikView server - AD Service account permission

Wed, 13 Feb 2013 22:40:48 GMT

The server is not a DC or BDC.

It is a server specifically used for QlikView.

We have a policy which is setup as per best practices.

It states that a Service account should not be a Local Administrator on the server to reduce risk.

Is this the official statement from QlikView that the Service account should be a member of the Local Administrators group?

Re: QlikView server - AD Service account permission

Wed, 13 Feb 2013 22:48:47 GMT

Please do not mistake me.

But at the same time kindly do not insult the knowledge of our Security team.

As per my understanding, I do not think even Microsoft recommends providing Local Administrator access for a AD Service account.

But it is not always possible to adhere to that recommendation due to the design of applications.

Kindly let me know if this is the official recommendation by QlikView.

As mentioned in my initial post, I have provided the required access as per the "QV11 Infrastructure -Minimum Security Requirements.pdf" document. I am unable to find a link to that document and also unable to attach it to this post.

Re: QlikView server - AD Service account permission

danielrozental — Wed, 13 Feb 2013 23:06:07 GMT

Kums, from the first paragraph of the document you mentioned it does say "QlikView Server services are designed to run as local Administrator" so I'd take that as an official recommendation.

Have you checked to see if there were any errors on either any of the services log files or the windows event viewer? That might give you a hint on what permissions are missing.

Re: QlikView server - AD Service account permission

Ricardo_Gerhard — Thu, 14 Feb 2013 11:38:42 GMT

Ok Kumaran,

I´m Certified Qlikview System Administrator and work with Qlikview a few years. I install since small to big enviroments and never work without local administrator.

Look in your document mentioned: "This document explain workarounds only to be used in special circumstances and will only work with default Windows installations without any global policies and/or customized lockdowns. QlikView Server services are designed to run as local Administrator."

Sorry, but it is a WAD, work as design.

Re: QlikView server - AD Service account permission

Bill_Britt — Thu, 14 Feb 2013 13:50:05 GMT

Hi Kumaran,

Please know that according to the documentation the service account has to be a member of an local Administrator group. If you have followed "QV11 Infrastructure -Minimum Security Requirements.pdf" and it doesn't work you have policies in place that doesn't allow the user to do things that are required. Also, if you look at the document it states "I would recommend that the installation first be done with a Service account that does have Administrator rights first. Then all functionality can be tested before setting everything as follows."

Bill

Re: QlikView server - AD Service account permission

Tue, 04 Jun 2013 08:08:21 GMT

The Minimum security re.. pdf is a suggestion and a workaround, not a supported scenario.

It´s very clearly stated that Qlikview is designed to run with Administrator privleges.

And I would assume in your case that you have policies that interfear with the Minimum requirements.

Re: QlikView server - AD Service account permission

Wed, 05 Jun 2013 10:41:11 GMT

Indeed, i have just installed with the minimum requirements, and only after adding the QlikView Service Account user to Administrators Group on the server, the services start to work.

it is my first install.

Can i add an Active Directory Group to the Local "QlikView Administrators Group"