How do I Configure a CAF plugin to run with a different account instead of the default Local System Account?

Document ID : KB000003898
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

In certain secure environments, the Local System Account may be restricted or have limited privileges.

The CAF plugin is configured to run with the Local System Account by default and therefore will not run in such environments. In such cases, the CAF plugins can be configured to use a different account.

Environment:
All supported Windows Operating SystemsCA Client Automation - All versions
Cause:

The CAF Service (all plugins) runs using the Local System Account by default which may cause issues related to permissions when running software jobs requiring administrator permissions.

This document outlines how a CAF plugin (Software Delivery plugin in this case) can be configured to run with specific administrator credentials.

Resolution:

The following command is used to configure a CAF plugin to use different account:

caf setcreds <plugin> user <username> password <password>

Example: caf setcreds sdagent user administrator password abc12345!

**Note: In the above example "abc12345!" is the administrator password.

 

To backout the changes and set the plugin back to using the Local System Account,  you run the same command with no Username and Password

caf setcreds <plugin> 

Example: caf setcreds sdagent 

This will set the SDAgent to Run as Local System Account