Setting M-Files Services to Use a Managed Service Account
You can set M-Files Server services to use a managed service account (MSA) or a group managed service account (gMSA). The account must have local administrator permissions on the server.
Important: M-Files services normally use the
Local System account for login. Use a different account
only when you have a reason to do so. The MFSetup service must use the Local System
account.
Do these changes before you install M-Files. If you have already installed M-Files, you can do the changes before you update M-Files to the latest version. If M-Files is already updated to the latest version, you must uninstall M-Files, do the changes, and install M-Files again.
To set the M-Files Server services to use a service account:
- Open Registry Editor.
-
Refer to this table and add the required registry values:
Keys - HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFServer
- HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFServerAux
- HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFDataExport
- HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFIndexingManager
Value - Name: ServiceAccountName
- Type: REG_SZ
- Content: <domain>\<service account name>
- Example content: testdomain\myMSA$
Note: All the services in the table must use the same service account. - Install M-Files.
-
Use Windows Task Manager to restart the MFServer
service:
These services now use the service account:
- M-Files Server
- M-Files Server Auxiliary Services
- M-Files Reporting Data Services
- M-Files Indexing Services