By a default MAS installation, the MAS service itself runs as the built-in local account SYSTEM and the COM+ application runs as MASService. MASService is a local account on the computer created by the installer. Those accounts will both have admin rights to the computer. The MAS service itself is the scheduler of jobs while COM+ application pool is the worker process that performs the execution of the analysis configurations, data configurations and etc.
The MAS service and COM+ application identity need to be configured to run as a domain account instead of the default local accounts, when the scheduled tasks involve elevated permissions, such as accessing a shared file location.  See this Microsoft article about domain user accounts for more information: https://docs.microsoft.com/en-us/windows/win32/ad/domain-user-accounts

Note : The windows domain account that MAS is configured to use, should preferably be a service account whose password does not expire. The service account should have administrator privileges on the MAS server, as it spawns other child processes to parallelly run scheduled tasks and have the ability to create temp files as the jobs run.  Please ensure that the service account should also be configured to have access to any shared drives, if any are used in the scheduled tasksets.
 

 

Change in the service identity of COM+ and Windows Service for the Monitoring and Alerting Server

OS: Windows only MAS add-on

Configuring MAS service to run as a service account is a 2-step process: Updating Service Logon Credentials and updating the COM+ component of MAS service.

1. Updating Service Logon Credentials ​

a. Launch Control Panel > Administrative Tools > Services (or Component Services and drill down in Tree view to Services) 
b. Find the service named MASMonitorService.


c. Right Click on the service and select properties.
d. Click on the 'Log On' tab and change to this account and specify the service account credentials. 




2. Update the pooling identity(COM+ Application) for the MAS service

a. Click on Start > Administrative Tools > Component Services

b. Drill down through Component Services to reach the COM+applications folder

c. Right-click on the 'STATISTICA Monitoring and Alerting Server' and select 'Properties'

d.  Select the 'Identity' tab and select  'This User'  and enter the credentials for the service account (Same account as in step 1d )

e. Restart the MASMonitorService from Services ( in step 1a) for the account changes to take effect. 

 

External: Using a domain user account as a service logon account

• https://docs.microsoft.com/en-us/windows/win32/ad/domain-user-accounts