Hope this is an ok place for this post. Just thought I would share a good story about Business Objects.
So I’m getting ready to install Enterprise 6 on our new Windows 2000 advanced server. I was very much looking forward to it until I was asked the dreaded question:
What permissions does the service account need?
Immediately, I begin to think “Ok, be complete or you are not going to get certain permissions you will need.” Apparently, a new security policy went into play that said…no more administrators for applications unless absolutely necessary. So immediately I start working on my case to get administrative access to the server. Bottom line hereDENIED. The security group at my company actually called our tech rep at business objects who said and I quote
Of course they left out the part where it says as long as you are a local administrator. Well that’s just great…so I get a service account set up with only those 2 permissions on the machine. One of the windows installation guys performed the actual installation of Enterprise 6, and then we configured it to start with our all powerful user.
Wow did that work out well. We rebooted the machine and watched the service fail to start. After doing some checking of the even logs you will never guess what we found
Apparently security was very specific in what they granted. They only made the two changes to the local security policy…the error in the event logs was because they didn’t grant our service account the ability to even see the hard drive of the server.
Needless to say, the sad twist is now I’ve been working with Business Objects for a month in conjunction with our security folks, and Business Objects still doesn’t know the complete list of permissions that are required to run their software…yet they are still adamant that administrator access is not required…recommended, but not required.
Well, I’m going back outside to practice falling down. Hope this brought a smile or even a chuckle to your day…laughing about it is all I can do at this point.
Cheers,
Methos
Methos (BOB member since 2003-08-25)