Changing the service account used by Mail Security service

Article:HOWTO82971  |  Created: 2012-12-04  |  Updated: 2014-06-25  |  Article URL http://www.symantec.com/docs/HOWTO82971
Article Type
How To


Subject


Changing the service account used by Mail Security service

If you want to change the service account for the Mail Security service, perform the following steps:

To remove service account from the Mail Security service

  1. From the Windows taskbar, click Start > Programs > Administrative Tools > Services.

  2. Right-click Symantec Mail Security for Microsoft Exchange and click Stop to stop the Mail Security service.

  3. Click Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell.

  4. Remove the RBAC right by typing the following command from the Exchange Management Shell.

    remove-ManagementRoleAssignment SMSMSE_RBAC_domainname\username

  5. Click Start > Programs > Administrative Tools > Active Directory Users and Computers.

  6. In the Active Directory Users and Computers window in the left pane, click Microsoft Exchange Security Groups.

  7. In the right pane, right-click Organization Management and then click Properties.

  8. On the Members tab, select the user that you want to remove and click Remove.

  9. Click Start > Programs > Administrative Tools > Local Security Policy.

  10. In the Local Security Policy window in the left pane, click Local Policies.

  11. In the right pane, double-click User Rights Assignment.

  12. In the right pane, right-click Log on as a Service and then click Properties.

  13. Select the user that you want to remove and click Remove.

To assign new service account to the Mail Security service

  1. Assign the RBAC right to the new user by typing the following command from the same Exchange Management Shell:

    new-ManagementRoleAssignment -name SMSMSE_RBAC_domainname\username -role ApplicationImpersonation -user <username>

  2. Click Start > Programs > Administrative Tools > Active Directory Users and Computers.

  3. In the Active Directory Users and Computers window in the left pane, click Microsoft Exchange Security Groups.

  4. In the right pane, right-click Organization Management and then click Properties.

  5. On the Members tab, select the user that you want to add and click Add.

    You must ensure that the user is a member of the Local Administrators Group.

  6. Click Start > Programs > Administrative Tools > Local Security Policy.

  7. In the Local Security Policy window in the left pane, click Local Policies.

  8. In the right pane, double-click User Rights Assignment.

  9. In the right pane, right-click Log on as a Service and then click Properties.

  10. Select the user that you want to add and click Add.

  11. From the Windows taskbar, click Start > Programs > Administrative Tools > Services.

  12. Right-click Symantec Mail Security for Microsoft Exchange and click Properties.

  13. On the Log On tab, enter the new user's credentials and click Apply to apply the settings.

  14. Start the Mail Security service.

See Changing the password of the domain user account


Legacy ID



v32374904_v82634657


Article URL http://www.symantec.com/docs/HOWTO82971


Terms of use for this information are found in Legal Notices