Installation QlikView Server - Account to run services

[dgrolleau]

Hi,

We want to install QlikView Server on a new server and we wonder about the necessary privileges for the account that the QlikView Server and Publisher services are to run under.

On your site we have this  (during installation) : 

10. Set the account that the QlikView Server and Publisher services are to run under. Click Next to continue.

Information noteThe account that is used to run the QlikView services must have local administrator privileges.

from Microsoft KB :

The system account and the administrator account (Administrators group) have the same file privileges, but they have different functions. The system account is used by the operating system and by services that run under Windows. There are many services and processes within Windows that need the capability to log on internally (for example during a Windows installation). The system account was designed for that purpose; it is an internal account, does not show up in User Manager, cannot be added to any groups, and cannot have user rights assigned to it. On the other hand, the system account does show up on an NTFS volume in File Manager in the Permissions portion of the Security menu. By default, the system account is granted full control to all files on an NTFS volume. Here the system account has the same functional privileges as the administrator account.

Our question : ca we use a system account instead of a local administrator account ?

Thanks

[Maria_Halley · Accepted solution]

@dgrolleau

I would recommend to create a separate account for QlikView services. But if you run all the services on the same Windows Server, or use digital certificates (see below) you can use the system account.

• Use digital certificates: Authenticate communication between QlikView servers using digital certificates and SSL. This alternative is recommended in environments where not all servers have access to a common Windows Active Directory or when the security provided by certificate authentication is required. Note that digital certificates are only supported by Windows Server 2008 R2 and later.
• Use QlikView Administrators Group: Authenticate communication between QlikView services based on membership in the local Windows group QlikViewAdministrators. This alternative can be used in environments where all servers that are part of the QlikView installation can authenticate using a common Windows Active Directory.