Resolution:
Description:
===========
The background user which runs the TIBCO iProcess Engine processes may require a change due to server migrations, domain changes or policy updates.

Environment:
============
All supported versions of the TIBCO iProcess Engine (iPE)
All supported Windows operating systems

Resolution:
==========

The following steps maybe performed to change the operating system background user -

1). Stop all iPE processes including the process sentinels (%SWDIR%/bin/swstop –p).  Confirm that all processes have stopped properly via Windows Task Manager.

2). Create the new local user or add the new domain user to the ‘Staffware Users’ / ‘Staffware Administrator’ and Local Administrator groups.

3). In the %SWDIR%/swdefs file, change line #2 to the new username.

4). In Windows Services (Start -- Run – services.msc), change the starting user account of the iPE node to the new user.

5).. Give full permission to the new user and EVERYONE/Full Control on %SWDIR% directory and its subdirectories -
    
  a). Right click on %SWDIR% directory - Security Tab -- Advanced -- Permissions tab, check both checkboxes (to allow inheritable permissions to child objects and to replace permissions on child objects)
    
  b). Right click on %SWDIR% directory - Security Tab -- Advanced –- Owners tab, choose the new user as owner and select the checkbox to replace the owner on sub-containers

6). Set permissions on %SWDIR% to the new user - Log in as the new user and run the fixperms command – ‘%SWDIR%/bin/fixperms –r –R %SWDIR%’

Additional checks performed to provide COM+/DCOM access to the new user, from the Pre-Install and Post Install steps in the TIBCO iProcess® Engine for Windows Installation Guide –

Enable COM+ network access (see Chapter 4 Carrying out Post Installation Tasks - Enable COM+ Network Access (page 115) of the iProcess Engine (SQL Server) for Windows Installation Guide)

Change the COM+ owner to the new user (Start - Run - dcomcnfg -> Console Root - Component Services - Computers - My Computer - COM+ Applications - Staffware Events - (right click) Properties - Identity)

Enable DCOM network access (see Chapter 2 Configuring the TIBCO iProcess Objects Server - To Check if DCOM is Enabled (page 65) of the iProcess Objects Server Administrator's Guide)

After all the steps and checks are performed, login as the new user and start the iPE Sentinels for the node from Windows Services - services.msc.

References:
============
TIBCO iProcess® Engine for Windows Installation Guide

Steps required to change the background operating system user for a TIBCO iProcess Engine node running on Windows.