Windows Authentication for Management Portal's Datastore connections to Microsoft SQL Servers
To enable Windows Authentication for Microsoft SQL Servers and their databases, please follow these steps:
- The Internet Information Services (IIS) Application Pool in which the Workspace Control Management Portal runs needs to use an Identity (user account) that is a valid Windows authentication login to the Microsoft SQL Server.
- To change the Identity property of the IIS application pool in which the Management Portal runs:
- Open IIS Manager
- In the Connections pane, expand the server node and click Application Pools.
- On the Application Pools page, select the application pool in which the Workspace Control Management Portal runs.
- Open the Advanced Settings of the selected application pool (choose it from the application pool's context menu or click Advanced Settings in the Actions pane (under Edit Application Pool)).
- In the Advanced Settings window, under the Process Model section, locate Identity and click
. - In the Application Pool Identity window, choose Custom account and click Set....
- In the Set Credentials window, provide the credentials of the account under which the application pool should run and click OK.
- To change the Identity property of the IIS application pool in which the Management Portal runs:
- Once the Identity of the application pool has been reconfigured, the Security Permissions for the Workspace Control Management Portal's installation folder need to be adjusted as well (via the Windows File Explorer, on the Security tab).
- The new account that was configured in IIS Manager for the application pool in which the Workspace Control Management Portal runs, needs to have the following permissions on the installation folder (by default, this is C:\Program Files (x86)\Ivanti\Workspace Control\Management Portal), its sub-folders and files:
- Read & execute
- List folder contents
- Read
- The new account that was configured in IIS Manager for the application pool in which the Workspace Control Management Portal runs, needs to have the following permissions on the installation folder (by default, this is C:\Program Files (x86)\Ivanti\Workspace Control\Management Portal), its sub-folders and files:
- It also needs to have Full control permissions on the installation folder's sub-folders Config and App_Data (and their sub-folders and files) (...\Management Portal\Config and ...\Management Portal\App_Data).