Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Changing the password for the App Control service account and IIS identity

App Control: Changing the password for the App Control service account and IIS identity

Environment

  • App Control Server: All Versions
  • Microsoft Internet Information Services (IIS): All Supported Versions

Objective

How to update the password associated with the Carbon Black Service Account in Windows Services and IIS.

Resolution

  1. Change the Service Account's password (such as in Active Directory).
  2. Log in to the application server hosting the Console as the Carbon Black Service Account.
  3. Stop the following services:
    • App Control Reporter
    • App Control Server
  4. Right click on each of the services in Step 3 and select Properties.
  5. Go to the "Log On" tab and add the new password, click OK.
  6. Open IIS Manager > expand the server name > select Application Pools.
  7. Right click DefaultAppPool > Advanced Settings > Process Model > edit the Identity > update the password.
  8. Repeat the same for the Application Pool: AppCDownloads (Server 8.10.2+).
  9. Close IIS Manager and restart the webserver (run the "iisreset" command from an administrative command prompt)
  10. Start the services from Step 3.

Additional Notes

  • In some instances the temporary files in "C:\Users\SERVICEACCOUNT\AppData\Local\Temp" will need to be deleted after the password update is complete, and while the services are stopped.
  • If you have an App Control Agent installed on the server you will need to temporarily stop the Agent.
  • If you have an App Control Agent installed, but do not know the Global CLI Password you will need to make the changes to the Services & IIS Identity via Safe Mode.

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
100% helpful (2/2)
Article Information
Author:
Creation Date:
‎11-20-2018
Views:
5600
Contributors