App Control: How to Change the Service Account
search cancel

App Control: How to Change the Service Account


Article ID: 286728


Updated On:


Carbon Black App Control (formerly Cb Protection)


To change the Service Account being used for the App Control Server and App Control Reporter.


  • App Control Server: All Supported Versions
  • Microsoft Windows Server: All Supported Versions


  1. Verify the new account has the correct permissions for Windows and SQL Server.
  2. If an Agent is installed, temporarily turn off Tamper Protection.
  3. Log in to the application server hosting the App Control Server software as the new Service Account.
  4. Open Services (Start > Run > services.msc > Ok).
  5. Find the Services: Carbon Black App Control Reporter and Carbon Black App Control Server:
    • Stop both services.
    • Right click > Properties > Log On > specify the new account information.
    • Leave the services stopped.
  6. Open IIS Manager (Start > Run > inetmgr > Ok).
  7. Expand SERVERNAME > left click Application Pools.
    • Right click DefaultAppPool > Advanced Settings
    • Find Identity > change to the new account information
    • Left click the SERVERNAME > right hand menu > Actions > Restart
  8. Start the App Control Reporter and Server services.
  9. Verify the Console is accessible.