Windows authentication with designated account
When using a Microsoft SQL Datastore and connecting to it with Windows authentication, you can specify a Designated Windows account for Workspace Control Datastore access. This makes it possible for the Workspace Control Console to connect to the Datastore using a designated account if the Console-user does not have Datastore access with his own Windows account.
For new Datastores, the designated account can be specified in the Datastore Wizard. At Setup > Datastore, the designated account can be specified for existing and migrated Datastores. After having migrated a Datastore, make sure the designated account is also member of the new Active Directory group.
To check if the specified designated account still works for your migrated or split Datastore, on the Datastore node in the Console, click . A message will be displayed if the designated account does not work for the migrated Datastore.
When a user is connected to the Console and a designated Windows account is used for access to the Datastore, switching to another Datastore and back again to the initial Datastore will cause failed connection to the Datastore with the designated account.
Please note that in the Datastore Connection Wizard the credentials of the Datastore connection are displayed. For SQL authentication, the credentials can also be changed, for Windows authentication, the credentials are grayed out.
When using Windows authentication with a designated account, in the Audit trail (at Diagnostics > Audit Trail) the changes in your environment are logged with the current user information. On your Microsoft SQL Server, the changes in the Datastore are logged with the designated account information.