Beruflich Dokumente
Kultur Dokumente
Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
NOTE
The domain name used in these examples, Foxboro.Local, may be different on your
station.
261
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
3. Right-click Standard and select New > User and enter the name for the user as
shown in Figure G-8.
4. Provide a password and select the relevant checkboxes, as shown in Figure G-9.
262
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
4. Enter the group name as “EFS Service”, as shown in Figure G-11 and Figure G-12.
NOTE
Using a different name will not work. This is because when CS is installed after
installing EFS, EFS Service is referenced to update the GPO.
263
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
Figure G-11. Enter EFS Service as Name for the New Group
264
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
G.2.3 Assign Privileges and Add the User to the User Group
To assign administrator privileges to the group:
1. Right-click the EFS Service group and select Properties.
2. On the EFS Service Properties dialog box, click the Member Of tab.
Click Add... and add the IA Plant Admins group. The group is now added as shown
in Figure G-13.
265
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
3. On the EFS Service Properties dialog box, click the Members tab.
Click Add... and add the user you created in “Create a New User” on page 261. The
user is added as shown in Figure G-14.
266
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
267
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
268
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
4. Right-click "Deny log on locally" and select Properties. The Deny log on locally
Properties dialog box appears. Select the Define these policy settings checkbox and
click Add User or Group... to add the "EFS Service" group, the group you created
earlier.
The “EFS Service” user group is added as shown in Figure G-17.
269
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
Figure G-17. Group Policy Management - Deny Log On Locally Properties Dialog Box
5. Click Apply. The “EFS Service” User Group is now listed in GPO as shown in
Figure G-18.
270
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
6. Repeat the steps 3 through 5 on GPO “SE Server 2016 Member Server Security Com-
pliance v1.0”.
NOTICE
POTENTIAL DATA LOSS
NOTICE
POTENTIAL DATA LOSS
271
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
3. Right-click FCS Computers v2.0 and select Edit. The Group Policy Management
Editor screen appears. Navigate to User Rights Assignment as shown in
Figure G-20.
272
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
Figure G-20. Group Policy Management Editor - User Rights Assignment (CS)
4. Right-click "Deny log on locally" and select Properties. The Deny log on locally
Properties dialog box appears. Select the Define these policy settings checkbox and
click Add User or Group... to add the "EFS Service" group, the group you created
earlier.
The “EFS Service” user group is added as shown in Figure G-21.
273
B0400EF – Rev P Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station
Figure G-21. Group Policy Management - Deny Log On Locally Properties Dialog Box (CS)
5. Click Apply. The “EFS Service” User Group is now listed in GPO as shown in
Figure G-22.
274
Appendix G. Creating a New Service User for a Local Edition Machine or an Enterprise Edition Station B0400EF – Rev
275