Last Edited: September 4th, 2014
The Triaster Server Publication User (or Triaster Services User) is the account under which automated publications run. It would be the account under which we’d install and configure Triaster Server, Visio and Process Navigator; it’s particularly important that Visio and Process Navigator are configured under this account, as such configurations are user-specific.
This article is meant to describe how that account can be identified, any dependencies, and how it can be changed.
Why might the account change? In the initial set-up of a Triaster Server, we may be supplied with a temporary account while a dedicated service account is sought. Or a Triaster Server where all resources are initially hosted on the one server, so a local account would suffice, may be reconfigured to, say, use a map store on a separate file server. In that case, a domain account would be required to replace the local one.
These are the requirements of a Publication User account:
If a domain account is used, it only need be a local administrator.
Components of the solution are configured and run under this account.
Perhaps this isn’t strictly true, but managing password changes for this account would be onerous, as is hopefully explained later.
Perhaps the easiest way to identify the Publication User is to check the account under which the ‘Triaster Publication Server 2011’ service runs.
There are components and their configurations that depend on the Publication User account, which would need to be amended if the Publication User account was changed.
This service would need to be reconfigured to run under the new account.
If all resources are on the one server, this service would be expected to be run under the local System account, in which case, nothing needs to change. However, if resources processed by that service are elsewhere – for example, maps on a separate file server – it would need to run under a domain account, typically the Publication User account.
Although sessions of Visio run in an automated publication aren’t interactive (as they are run by the ‘Triaster Publication Server 2011’ service), Visio does need to be configured under the Publication User account. This is the usual configuration for use with Process Navigator, described in this KB article:
‘Configure Process Navigator for first use’
On some systems, Visio automation instability needs to be addressed by a setting in DCOM, associating ‘Microsoft Visio Drawing’ with the Publication User, described in this KB article:
'Visio related errors on a server'
This is a configuration where credentials are required.
Where ‘Microsoft Visio Drawing’ isn’t listed under DCOM Config’s ‘Component Services’, other remedies have been found to be sufficient. This has been more prevalent on 32-bit Windows Server 2008, but rare on other versions.
Process Navigator’s activation is user-specific, so activation would need to be checked and re-applied if the Publication User were to change.
'Install and Activate Process Navigator Software'
Process Navigator's rollback feature enables the restoration of files when a process that updates files is cancelled. It will take a back-up of the whole multi-map root prior to running such a process. This isn't helpful in a non-interactive, automated publication, and can add considerable extra time to such publications. It's best that this feature is disabled for Process Navigator running as the Publication User.
Note: This is a user-specific configuration, as are all such Process Navigator settings.
These scripts end Visio.exe processes run by the Publication User that may otherwise interfere with Visio automation. They are found in this location:
They contain explicit references to the Publication User user-name (note, just the user-name; a computer or domain prefix isn’t required).
REM ========== SCRIPT VARIABLES ==============
REM To enable the setting of variables within a FOR loop
REM Change the following to the actual account name and process of interest
SET UserAccountName=Triaster User
REM End any Visio.exe process run by the Publication user
taskkill /fi "username eq Triaster User" /fi "imagename eq visio.exe" /f
There are Windows scheduled tasks related to Triaster Server that run under the Publication User account. Although, in some cases, they do not strictly need to, it’s at least tidier that they do. This is another scenario that would require the credentials of the account.
Check such tasks in Task Scheduler, where they would be expected to be listed in a 'Triaster' folder, although that shouldn't be assumed.
The search capability commonly uses MTop Search Engine Composer, although a new search engine is available in Triaster Server 14.1. Its licence is user-specific, and is licensed by running MTop Search Engine Composer and using the details in ‘readme.txt’ in the MTop installer folder.
These details should help to give an insight into the role of the Publication User account. Changing that account isn’t difficult, but the steps required are varied, and aren’t obvious.