IBM Aspera Console communicates with nodes through the Aspera
Central service. When you are setting up a Windows node and using an Active Directory
(or non-local) user to run the Aspera Central service, the user must have special
permissions configured to allow Console to manage the node.
-
Create or obtain an Active Directory account to use for running the Aspera
services.
-
Add that Domain user account to the local Administrators group.
-
Go to Control Panel > Administrative Tools > Local Security
Policy and give the user special permissions to allow Console to
manage the node machine.
Within the Local Security Policy window, select
Local Policies >
User Rights Assignment in the left panel, and add the desired
user to the following policies (by double-clicking each policy):
- Act as part of the operating system
- Adjust memory quotas
- Create a token object
- Log on as a service
- Replace a process level token
-
Go to Control Panel > Administrative Tools > Services
and set the following services to run as the user:
- Aspera Central
- Aspera Sync
- OpenSSH
To set the service to run as the user, right-click the service and select
Properties. Click the
Log On
tab and select your user.