When GFI FaxMaker is installed on a computer that is joined to an Active Directory Domain, a service logon account is created for starting GFI FaxMaker Server and GFI FaxMaker Message Transfer Agent.
This article provides information about the access rights which a service logon account should have.
Following is the list of access rights which a service logon account must have:
- The 'service logon account' for the services GFI FaxMaker Server and GFI FaxMaker Message Transfer Agent must be started with a user account.
- The 'service logon account' must have the logon as a service right.
- The 'service logon account' must have permission to query the Active Directory Global Catalog.
- The 'service logon account' must have administrative privileges (Full access) to the NTFS folder structures where GFI FaxMaker is installed.
- The 'service logon account' must have administrative privileges (Full access) to the Registry keys used by GFI FaxMaker.
- If GFI FaxMaker is archiving to a database, the 'service logon account' must have access to the database (or you can configure FaxMaker to use the 'sa' (System Admin) account if using SQL).
- The 'service logon account' must have a local user profile (since GFI FaxMaker uses a few aspects of that profile, such as setting the default printer and having access to applications involved in "converting" the outbound faxes).
Info! It is possible to create a domain account with something less than "domain admin" rights. However, this requires some advanced understanding by the system admin. GFI cannot troubleshoot permissions-related problems if they arise because a non-domain-admin account is used for starting the services. Hence, it is recommended to use a domain admin account if GFI FaxMaker is installed on a machine that is joined to an AD Domain.