DVLS "Credentials" during install
Hi
I have just installed the Devolutions Server Free version. During the setup of the Instance you are promted with using integrated security or a username/password.
I want DVLS to run under a system account, so I have created a local account on the server, but when entering the username/password for this user in the install I keep getting "Login Failed" - And I know the username/password isn't wrong (Copy/pasted).
I then started the Devolutions Server Console as my local user, and used "Integrated Security" and the setup installed, but I got an error that "Least permissions" couldn't be set on the database.
When revisiting the Database settings, and utick the "Integrated security" I get the following:
It's not that this is Super critical, as I have corrected permissions on DVLSaccount, so I could "Apply Lease Permissions" - But I would like to be able to only use my DVLSAccount user for all 3 logins.
And the fact that no matter how I try to enter the username I get wrong credentials must be a bug?
The server is domain joined, but my service account is a local user.
EDIT: The server account is DB_Owner and has been granted "Alter all login"
Regards Lars
Remote Desktop Manager connected with Devolutions Server running newest versions.
------------------------Signature------------------------
Sorry if any of above sounds harsh or provoking, it is NOT meant as such, but I have Asperger's and don't always know.
My intentions is always to be friendly.
-------------------------------------------------------------
All Comments (3)
Hello,
Using a db_owner as you're doing at the moment doesn't require you to apply least permission.
Furthermore, if this was doing it, you would "restrict" your db_owner, which doesn't make much sense...
The purpose of this is to apply 3 different accounts that are set on different components.
I suggest you read this article for more details : https://kb.devolutions.net/dps_pre_deployment_account_survey.html
Long story short, leaving it do db_owner will work, if you want to use the least permissions, you will need to create different service accounts.
I hope this helps.
Best regards,
Alex Belisle
Hi thank you for that explanation.
The answer to my other part of the question, I think I have worked out myself.
When using "Integrated Security" Windows Authentication is used. But when I untick the "Integrated Security" I need to provide an SQL server login, and not Windows login, even though the user have access. Is this correct?
Lars
Remote Desktop Manager connected with Devolutions Server running newest versions.
------------------------Signature------------------------
Sorry if any of above sounds harsh or provoking, it is NOT meant as such, but I have Asperger's and don't always know.
My intentions is always to be friendly.
-------------------------------------------------------------
Hello,
This is correct, setting Windows Accounts (local or domain) is not supported when Integrated Security is unticked.
Selecting Integrated Security will use the Windows Accounts set on the different components.
- Management Tools - Account that is used to open the DVLS Console (in other words, the Windows session user)
- Scheduler Service - Account set on the DevolutionsSchedulerService (in services.msc)
- Web Application - Account set on the IIS Application Pool (advanced settings -> Identity, in Process Model)
Unchecking Integrated Security will require SQL Logon Accounts set on the components. therefore, the app pool identity and the scheduler service identities dont have to be changed.
I hope this answers better.
Best regards,
Alex Belisle