416.467.9100 | Dundas Data Visualization | Login
Welcome Guest
This is the support page for the legacy Dundas Dashboard application. For assistance with the current Dundas BI application please click here.
Dashboard v5.0

This site makes extensive use of JavaScript.

Please enable JavaScript in your web browser and reload the page before proceeding.

Permissions Required to Run the Image Creation Service (ICS)

Hide navigation
RSS
Modified on Tue, 02 Apr 2013 10:36 AM
Click to return to: Documentation


Overview

Normally, a Windows administrator account is needed to run the Dundas Dashboard Image Creation Service. However, you may have a requirement to use a less-privileged account which is not part of the administrators group on the server computer. This article describes the permissions needed by this account to run the Image Creation Service.

Required permissions

In order to have the Dundas Dashboard Image Creation Service run under a desired service account, you need to provide this account with permissions to use the address specified for the web service endpoint of the Image Creation Service. This is the address that is referenced in the Dundas.Dashboard.ImageCreationService.exe.config file, which you can find in this folder by default:

C:\Program Files\Dundas Data Visualization Inc\Dundas Dashboard\Image Creation Service\{InstanceName}\ImageCreationService

Locate the following key in the config file (example):



You need to perform namespace reservation by assigning the rights for the HTTP URL namespace to your service account.

To perform this namespace reservation on Windows Server 2008, run the following command (example):

netsh http add urlacl url=http://+:8888/ImageCreationWebService/service/ user=DOMAIN\username

To perform this namespace reservation on Windows Server 2003, you must use httpcfg so your command will look something like this:

httpcfg.exe set urlacl /u http://+:8888/ImageCreationWebService/service/ /a "O:AOG:DAD:(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)"

Note the seemingly random characters on the end of this command. This is the ACL Security Descriptor Definition Language (SDDL). You can find helper tools online that will generate the proper SSID for your account. More documentation on the httpcfg.exe tool can be found here.

Related topics


Click to return to: Documentation

About Dundas | Contact Us Follow us on Twitter! | Privacy Statement | Report Site Issues

Copyright © 2009-2014 Dundas Data Visualization, Inc.