Changing the Discovery Center Service Accounts

This article describes the required steps to change the service accounts in use by Discovery Center. Some steps may not be required if you are only changing one of the two service accounts.
This may be necessary when the account is the same, but the username has been changed in Active Directory.

Procedure

Add a new login to the SQL Server

1. On the SQL Server host, open SQL Server Management Studio (SSMS).
2. Connect to the relevant database instance.
3. Expand Security > Logins.
4. Right-click on Login > New Login.
5. Add logins for the new service accounts to be used with the new name.
6. Click OK.

Add the user to the Discovery Center database

1. In SSMS, expand Databases > ActiveNavigationDiscoveryCenter > Security > Users.
2. Right-click on Users > New User.
3. Enter a name in the Username field. We recommend you use the actual username.
4. For the Login Name click the ellipsis (...), then select the Login created above.
5. For the Database Role Membership, select db_datareader, db_datawriter, and db_owner.
6. Click OK.

Add account into ANProcessor role on SSAS database

1. In SSMS, connect to the relevant SQL Analysis services instance.
2. Expand Databases > ActiveNav4 > Roles.
3. Right-click on ANProcessor and select properties.
4. Select Membership.
5. Add the new service accounts to the list.

Set Account for Data Source in SSAS database

1. While connected in SSMS to SQL Analysis services, Expand Databases > ActiveNav4 > Data Sources.
2. Right-click on ActiveNav4 data source and select properties.
3. Update the Impersonation Info setting for the data source to use the new scheduler service account.

Update Scheduler service Identity

1. On the application server, search for services in Windows.
2. Right-click on 'ActiveNavigation Scheduler', then select 'Properties'.
3. Click the 'Log on' tab.
4. Change the Username and Password to the new service account.
5. Click 'Ok'.
6. Right-click on 'ActiveNavigation Scheduler', then select 'Stop'.
7. Right-click on 'ActiveNavigation Scheduler', then select 'Start'.
8. Ensure that the service started properly with no errors.
9. Open the Registry Editor by searching for 'regedit'.
10. Expand HKEY_LOCAL_MACHINE\SOFTWARE\Active Navigation\DiscoveryCenter\Install\Scheduler\SchedulerUser.
11. Update the value data to the new user account name for the SchedulerUser entry.

Adding accounts to the program files' security on the file system

1. Navigate to the following or similar location on your server - C:\Program Files\Active Navigation\Discovery Center\
2. Ensure the new scheduler service account has full control on the install location
3. Ensure the web app-pool service account has full control on the logs and SearchData folders

Application Pool Identity for Active Navigation application pool

If your application pool identity is set to a specific account rather than Network Service then use these steps to update the account for the pool.

1. Navigate to the IIS Server Manager.
2. Highlight Application Pools
3. Right-click the 'ActiveNavigationDiscoveryCenter' app pool and select 'Advanced Settings'.
4. Click on the Identity row.
5. Click the Browse icon for the application pool identity.
6. Click the 'Set' button next to the Custom information.
7. Enter the application pool identity name for the Username and Password.
8. Enter the new password.
9. Click 'Ok'.
10. Click 'Ok'.
11. Right click on 'ActiveNavigationDiscoveryCenter' and select 'Stop'.
12. Right click on 'ActiveNavigationDiscoveryCenter' and select 'Start'.
13. Ensure that the service started properly with no errors.
14. Update the stored service account name in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Active Navigation\DiscoveryCenter\Install\WebSite\AppPoolUser