Changing the Service Account for App Control

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Steps to change the Service Account used for the App Control Server app

Environment

• App Control Server: All Supported Versions
• Microsoft Windows Server: All Supported Versions

Resolution

1. Verify the new account has the correct permissions assigned.
2. If an Agent is installed, temporarily turn off Tamper Protection.
3. Log in to the application server hosting the App Control Server software as the new Service Account.
4. Open Services (Start > Run > services.msc > Ok).
5. Find the Services: Carbon Black App Control Reporter and Carbon Black App Control Server:
   • Stop both services.
   • Right click > Properties > Log On > specify the new account information.
   • Leave the services stopped.
6. Open IIS Manager (Start > Run > inetmgr > Ok).
7. Expand SERVERNAME > left click Application Pools.
   1. DefaultAppPool:

      If the Identity account is set to "ApplicationPoolIdentity" NO change is needed.

      • Right click DefaultAppPool > Advanced Settings
      • Find Identity > change to the new account information
      • Left click the SERVERNAME > right hand menu > Actions > Restart
   2. AppCDownloads (Server 8.10.2 and higher)

      If the Identity account is set to "ApplicationPoolIdentity" NO change is needed.

      • Right click AppCDownloads > Advanced Settings
      • Find Identity > change to the new account information
      • Left click the SERVERNAME > right hand menu > Actions > Restart
8. Start the App Control Reporter and Server services.
9. Verify the Console is accessible.

Additional Information

For only changing the password for the service account, see these steps.