User rights requirements for the Query Engine (QE) service account

Article:TECH113783  |  Created: 2007-01-19  |  Updated: 2008-01-11  |  Article URL http://www.symantec.com/docs/TECH113783
Article Type
Technical Solution


Issue



What user rights does the Service Account need on a computer hosting a query engine?

Symptoms
When you run a query, the message "A required privilege is not held by the client" appears.



Solution



This error can mean that the Bindview service account does not have one or more of the following user rights on a query engine (QE):
  • Logon as a service
  • Act as a part of the operating system
  • Adjust memory quotas for processes
  • Replace a process token
  • Impersonate a client after authentication


Allow bv-Config to automatically assign the user rights to the Bindview Service account.
  1. Open bv-Config.
  2. Select a QE in the left column, then double click the SERVICES icon on the right.
  3. Double click the Bindview QE Service.
  4. On the ACCOUNT INFO Tab, click the Local System Account radio button.
  5. Click OK.
  6. Exit bv-Config, then re-launch bv-Config.
  7. Select the same QE in the left column, then double click SERVICES icon on the right.
  8. Double click the Bindview QE Service.
  9. On the ACCOUNT INFO Tab, click the Other Account radio button.
  10. Enter the Bindview Service account user ID and password.
    • NOTE: Be sure that the user ID is fully qualified (i.e. {domainname}\userID).
  11. Click OK.
    • NOTE: Click OK when prompted that the necessary user rights are granted to the service account.
  12. Restart the Bindview QE service.
  13. Repeat these steps for any other QEs that do not have the necessary user rights.






Legacy ID



2007157245129398


Article URL http://www.symantec.com/docs/TECH113783


Terms of use for this information are found in Legal Notices