Configure CLEAR Engine to run as a service account

This article describes how to configure CLEAR Engine to run as a service account.

In this article, you will learn how to:

• Configure CLEAR Engine to run as the LocalService account.
• Configure CLEAR Engine to run as a virtual account.

At the end, you will be able to configure CLEAR Engine to run as a service account.

Configure CLEAR Engine to run as the LocalService account

1. Open PowerShell as administrator.

2. Enter the following command to stop the CLEAR Engine service:

    Stop-Service "CLEAR Engine
   

3. Enter the following command to configure the log on for the CLEAR Engine service to LocalService:

    cmd /c sc config SkyAnalyzerEngine obj= "NT AUTHORITY\LocalService"
   

4. Open Services, select CLEAR Engine, then open its Properties.
5. Navigate to the Log On tab. In This account, enter NT Service\SkyAnalyzerEngine. Leave password fields empty, then select OK.

6. In PowerShell, enter the following command to create a SQL Server login for the service account and grant it necessary permissions to the SkyAnalyzer database:

    # Replace .\SQLEXPRESS if using a custom SQL Server instance
    $sqlInstance = ".\SQLEXPRESS"
    sqlcmd -S $sqlInstance -E -Q "CREATE LOGIN [NT AUTHORITY\Local Service] FROM WINDOWS;"
    sqlcmd -S $sqlInstance -E -d SkyAnalyzer -Q "CREATE USER [NT SERVICE\SkyAnalyzerEngine] FOR LOGIN [NT AUTHORITY\Local Service];"
    sqlcmd -S $sqlInstance -E -d SkyAnalyzer -Q "ALTER ROLE db_owner ADD MEMBER [NT AUTHORITY\Local Service];
   

7. In PowerShell, enter the following command to grant the service account the Modify permission to CLEAR Engine's file system storage:

    # Replace C:\ProgramData\Lucent Sky if using a custom file system storage location
    $fileSystemStorage = "C:\ProgramData\Lucent Sky"
    cmd /c icacls "$fileSystemStorage" /grant 'NT AUTHORITY\LocalService:(OI)(CI)M' /T
   
    cmd /c icacls "C:\Program Files\Lucent Sky\CLEAR Engine\Resources" /grant 'NT AUTHORITY\LocalService:(OI)(CI)M' /T
    cmd /c icacls "C:\Program Files\Lucent Sky\CLEAR Engine\RulePack" /grant 'NT AUTHORITY\LocalService:(OI)(CI)M' /T
    cmd /c icacls "C:\ProgramData\Lucent Sky\CLEAR Engine\Maintenance" /grant 'NT AUTHORITY\LocalService:(OI)(CI)M' /T
   

8. If the Web UI is installed, in PowerShell, enter the following command to grant the service account the Modify permission to the Web UI's configuration file:

    cmd /c icacls "C:\Program Files\Lucent Sky\CLEAR Web\web.config" /grant 'NT AUTHORITY\LocalService:M' /T
   

9. In PowerShell, enter the following command to start the CLEAR Engine service:

    Start-Service "CLEAR Engine
   

Configure CLEAR Engine to run as a virtual account

1. Open PowerShell as administrator.

2. Enter the following command to stop the CLEAR Engine service:

    Stop-Service "CLEAR Engine
   

3. Open Services, select CLEAR Engine, then open its Properties.
4. Navigate to the Log On tab. In This account, enter NT Service\SkyAnalyzerEngine. Leave password fields empty, then select OK.

5. In PowerShell, enter the following command to create a SQL Server login for the service account and grant it necessary permissions to the SkyAnalyzer database:

    # Replace .\SQLEXPRESS if using a custom SQL Server instance
    $sqlInstance = ".\SQLEXPRESS"
    sqlcmd -S $sqlInstance -E -Q "CREATE LOGIN [NT SERVICE\SkyAnalyzerEngine] FROM WINDOWS;"
    sqlcmd -S $sqlInstance -E -d SkyAnalyzer -Q "CREATE USER [NT SERVICE\SkyAnalyzerEngine] FOR LOGIN [NT SERVICE\SkyAnalyzerEngine];"
    sqlcmd -S $sqlInstance -E -d SkyAnalyzer -Q "ALTER ROLE db_owner ADD MEMBER [NT SERVICE\SkyAnalyzerEngine];
   

6. In PowerShell, enter the following command to grant the service account the Modify permission to CLEAR Engine's file system storage:

    # Replace C:\ProgramData\Lucent Sky if using a custom file system storage location
    $fileSystemStorage = "C:\ProgramData\Lucent Sky"
    cmd /c icacls "$fileSystemStorage" /grant 'NT Service\SkyAnalyzerEngine:(OI)(CI)M' /T
   
    cmd /c icacls "C:\Program Files\Lucent Sky\CLEAR Engine\Resources" /grant 'NT Service\SkyAnalyzerEngine:(OI)(CI)M' /T
    cmd /c icacls "C:\Program Files\Lucent Sky\CLEAR Engine\RulePack" /grant 'NT Service\SkyAnalyzerEngine:(OI)(CI)M' /T
    cmd /c icacls "C:\ProgramData\Lucent Sky\CLEAR Engine\Maintenance" /grant 'NT Service\SkyAnalyzerEngine:(OI)(CI)M' /T
   

7. If the Web UI is installed, in PowerShell, enter the following command to grant the service account the Modify permission to the Web UI's configuration file:

    cmd /c icacls "C:\Program Files\Lucent Sky\CLEAR Web\web.config" /grant 'NT Service\SkyAnalyzerEngine:M' /T
   

8. In PowerShell, enter the following command to start the CLEAR Engine service:

    Start-Service "CLEAR Engine