Change the Privileges of the Gateway Administrator Service

By default, the Gateway Administrator runs using the Network Service account, which has limited privileges. This helps ensure the security of your system by reducing the risk of an elevation of privilege attack, but might also prevent Post Transfer Actions from running in some configurations.

If you are running all three FileXpress Gateway services on the same system, and if you use the default File Storage setting (FileXpress Gateway Proxy), Post Transfer Actions run as a local process using the privileges of the Gateway Administrator service. The default privileges of this service are insufficient to execute most actions. To support running these actions, you can modify the Gateway Administrator service to use the privileges of the Local System account.

To increase the privileges of the Gateway Administrator Service by running as the Local System account

  1. On the FileXpress Gateway Administrator computer, open the Windows Services console (Start > All Programs > Administrative Tools > Services).
  1. Right-click the Attachmate FileXpress Gateway Administrator service, select Properties, then select the Log On tab.
  2. Set Log on as to Local System account and click OK.
  3. Click Restart the service.

To set the privileges of the Gateway Administrator Service to the default Network Service setting

  1. From the Windows Services console, right-click the Attachmate FileXpress Gateway Administrator service, select Properties, then select the Log On tab.
  1. Click This account, clear the Password and Confirm password fields, then click Browse.
  2. Under Enter the object name to select, type in "network" and click Check Names. Your entry should be replaced by NETWORK SERVICE.
  3. Click OK to close the open dialog boxes.
  4. Click Restart the service.

Notes

  • If you migrate from a configuration with all services on one system to a configuration that uses an SFTP server for file storage, you should reset the service to run using the Network Service account.
  • The Gateway Administrator service reverts to the default profile after each upgrade.

Related Topics

Configure PTAs in Gateway Administrator