Installer can't validate service account

Products

• Information Centric Analytics

Issue/Introduction

When installing Information Centric Analytics (ICA), the following error is displayed on the Website Configuration page after providing an account name to be used as the ICA service account:

Service Account is not a valid domain account

Cause

Either the account under which you're running the installer is not both a domain account and a local administrator, or the account you've provided for the service account identity is not both a domain account and local administrator. At the time this error is thrown, the installer is using both the .NET framework and Windows components to determine the following:

• The service account identity is a local account
• The account under which the installer is running can connect to the domain controller
• The service account identity is a domain account

Resolution

Ensure the account under which the installation wizard is running meets the following criteria:

• Domain account
• Local administrator on the servers hosting Microsoft Internet Information Services (IIS), Microsoft SQL Server (MSSQL), and Microsoft SQL Server Analysis Services (SSAS)
• Assigned the sysadmin role in MSSQL
• Assigned the Server Administrator role in SSAS

Ensure the ICA service account identity meets the following criteria:

• Domain account
• Local administrator on the IIS server
• Assigned the sysadmin or db_owner role in MSSQL for the RiskFabric database
• Assigned the Server Administrator role in SSAS

If the installer account and the service account are not members of the same domain, a trust must be established between the domains in order to enable authentication. For assistance with investigating issues with authentication and account lookups, contact your domain administrator.

Additional Information

For more information, refer to the Prerequisites and Privileges for Installing and Administrating Symantec ICA section of the Symantec ICA Administrator Guide.