F-SECURE POLICY MANAGER 7.0 -, Administrator'S Manual

Page: 205 / 241

205
Q. How can the server role change stop F-Secure Policy Manager
Server from working?
A. Domain Controller server and Member/Standalone server use
different types of accounts: domain accounts on Domain Controller
and local accounts on Member server. Because F-Secure Policy
Manager Server uses its own account to run, this account becomes
invalid with the role change.
The easiest way to restore the F-Secure Policy Manager Server after
server role change is to re-install F-Secure Policy Manager Server
with the
Keep existing settings option selected. This will recreate the
F-Secure Policy Manager Server account and reset all file access
rights to the correct ones.
Q. Why does F-Secure Policy Manager Server use its own account
to run instead of the system account?
A. Policy Manager Server account (
fsms_<COMPUTERNAME>
) is used for
security reasons. By running under its own account, any security
vulnerability in F-Secure Policy Manager Server will only affect it and
not the whole system. If a system account would be used, the whole
system could be compromised in the unlikely event of a security
problem in F-Secure Policy Manager Server.
If you have moved the commdir manually to a new location, you
might need to re-add full control for the new account in that
directory tree.