Setting M-Files Services to Use a Managed Service Account

You can set M-Files Server services to use a managed service account (MSA) or a group managed service account (gMSA). The account must have local administrator permissions on the server.

Important: M-Files services normally use the Local System account for login. Use a different account only when you have a reason to do so. The MFSetup service must use the Local System account.

Do these changes before you install M-Files. If you have already installed M-Files, you can do the changes before you update M-Files to the latest version. If M-Files is already updated to the latest version, you must uninstall M-Files, do the changes, and install M-Files again.

To set the M-Files Server services to use a service account:

  1. Open Registry Editor.
  2. Refer to this table and add the required registry values:
    Keys
    • HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFServer
    • HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFServerAux
    • HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFDataExport
    • HKEY_LOCAL_MACHINE\SOFTWARE\Motive\M-Files\Common\Server\MFIndexingManager
    Value
    • Name: ServiceAccountName
    • Type: REG_SZ
    • Content: <domain>\<service account name>
    • Example content: testdomain\myMSA$
    Note: All the services in the table must use the same service account.
  3. Install M-Files.
  4. Use Windows Task Manager to restart the MFServer service:
    1. Right-click the taskbar and select Task Manager.
      Result:The Task Manager window is opened.
    2. Open the Services tab.
    3. Right-click the MFServer service and select Restart.

These services now use the service account:

  • M-Files Server
  • M-Files Server Auxiliary Services
  • M-Files Reporting Data Services
  • M-Files Indexing Services