Sophos

Online support

Product maintenance

Contact support

Support services

Creating a network EM Library account

To keep your network updated, you need an account that EM Library uses. During library installation, the setup program offers to create a local account for you. If you use EM Library to manage CIDs on a remote computer, or if you use multiple libraries that access each other via UNC, you need to use a network account instead. This account needs the right to log on as a batch job.

This article describes how to create a suitable network account on Windows 2000 and Windows 2003, and how to replace the local account created by the installation program with another administrator account.

What to do

Windows 2000

  1. In the Windows taskbar, select Start|Settings|Control Panel.
  2. In the Control Panel window, double-click 'Administrative Tools'.
  3. In the Administrative Tools window, double-click 'Active Directory Users and Computers'.
  4. In the Active Directory Users and Computers window, click on the Users folder to open it. Right-click on the folder name. In the menu that is displayed, select 'New' and then 'User'.
  5. In the 'New Object - User' dialog box, in the 'Full name' field, enter a descriptive name (e.g. 'EM Library'). In the 'User logon name' field, enter a name (e.g. 'EM Lib'). Click 'Next'.
  6. In the next dialog box, enter and confirm a password. Deselect 'User must change password at next logon'. Select 'User cannot change password' and 'Password never expires'. Click 'Next'.
  7. In the next dialog box, check the account details. Click 'Finish'.
  8. In the Active Directory Users and Computers window, the new account is now displayed in the list of users. Right-click the account name and select 'Properties'.
  9. In the '[Account name] Properties' dialog box, in the 'Member of' tabbed page, click 'Add'.
  10. In the Select Groups dialog box, highlight 'Administrators'. Click 'Add'. Click 'OK'. Then in the '[Account name] Properties' dialog box, click 'OK'.
  11. In the Administrative Tools window, double-click 'Local Security Policy'.
  12. At the Local Security Settings window, click the Local Policies folder and then 'User Rights Assignment'. Highlight 'Log on as a batch job'. Then double-click.
  13. In the Local Security Policy Setting dialog box, click 'Add'.
  14. In the Select Users or Groups dialog box, select the new account. Click 'Add'.
  15. In the Local Security Policy Setting dialog box, the new account is now displayed. Click 'OK'. Close all windows.

Windows 2003

Create the auto-update account on the Domain Controller (i.e. the computer you use to add new users to the domain) as follows:

  1. At the taskbar, click Start|Administrative Tools|Active Directory Users and Computers.
  2. In the Active Directory Users and Computers window, in the left hand-pane, right-click the Users folder to display a menu. Select 'New', then 'User'.
  3. In the 'New Object - User' dialog box, in the 'Full name' text box, enter a descriptive name (e.g. 'EM Library'). In the 'User logon name' text box, enter a name (e.g. 'EM Lib'). Click 'Next'.
  4. In the next 'New Object - User' dialog box, in the Password text box, type a password. In the 'Confirm password' text box, confirm the password. It is case-sensitive. Deselect 'User must change password at next logon'. Select 'User cannot change password' and 'Password never expires'. Click 'Next'.
    Note: The password must have at least seven characters, consist of both upper and lower case letters and contain numbers.
  5. In the final 'New Object - User' dialog box, check the account details. Click 'Finish'.
  6. In the 'Active Directory Users and Computers' window, you can now see 'EM Library' in the Users list. Close the window.
  7. At the taskbar, click Start|Administrative Tools|Domain Security Policy.
  8. In the Default Domain Security Settings window, in the left-hand pane, click the plus sign next to 'Local Policies', then click 'User Rights Assignment'. In the Policy list, double-click 'Log on as a batch job'.
  9. In the 'Log on as a batch job Properties' dialog box, select 'Define these policy settings' and click 'Add User or Group'.
  10. In the 'Add User or Group' dialog box, click 'Browse'.
  11. In the 'Select Users, Computers, or Groups' dialog box, in the 'Enter the object names to select (examples)' text box type 'EM'. Then click 'Check Names'. The full name is displayed. Click 'OK'.
  12. In the 'Add User or Group' dialog box, 'EM Lib' is now displayed. Click 'OK'.
  13. In the 'Log on as a batch job Properties dialog box', click 'OK'.
  14. Close all windows. You have created the auto-update account.

Replacing the local account

When you install EM Library, you specify an account for it to run under. This account is either a default local account EMLibUser1 (which is created for you) or an existing account that you select.

All users in the administrator group are enabled to use EM Library. You can change these settings as follows.

  1. In the EM Library console, in the Tools menu, select 'Options'.
  2. In the 'EM Library options' dialog box, click the Security tab.
    • To change the 'EM Library account for services' (at the bottom of the dialog), click 'Change' and enter the new account details.
    • To change the users or groups who have access to EM Library, either click 'Add/Remove' and in the 'Grant access to Groups and Users' dialog box double-click an entry in the Available Groups/Users list, or at the bottom of the dialog box, select 'Add Group/User', enter an account name, and click 'Add'.
    • To remove an entry, highlight it in the 'Groups/Users granted access' list and click 'Remove'. Click 'OK'.

If you need more information or guidance, then please contact technical support.