Windows accounts

The following tables provide information on the Windows accounts used by Power Monitoring Expert (PME):

User Account	Role/Group/Permissions	Notes
IONUser (account)	- No group membership. - Has List/Read/Write/Execute permissions on the PME share folder.	- Automatically created during the installation of PME. - Used to run report subscriptions. - Needs access to the folder where subscriptions are saved.
IONMaintenance (account)*	Member of Users group	- Automatically created during the installation of PME. - Used to run database maintenance jobs in Windows Task Scheduler.
Login used to run the PME installer	Needs to be a member of Administrators group	- Manually created by the user. - Used to log into Windows to run the PME installer
Login used to access PME applications	Needs to be a member of Users group	- Manually created by the user. - Used to log into Windows to run the PME Web Applications or Engineering Client applications.
Login to run application engineering tools	Needs to be a member of Administrators group	- Manually created by the user. - Used to log into Windows to run PME application engineering tools. An example is the Configuration Manager Tool, used for system upgrades.
Login to run the Database Manager tool	Needs sysadmin permissions on SQL database instance.	- Manually created by the user. - Used to log into Windows to run the PME Database Manager tool. - This Windows account needs to be added to the SQL server database.
SQL Server Database Engine service	NT AUTHORITY\SYSTEM	Must have access to the database folder(s) and the Temp folder of the installer user during installation. Permissions can be lowered after PME is installed.

* This account is only created on standalone servers where the SQL Server software and PME are installed on the same computer.

NOTE: For information on which accounts are used to run the PME Windows services, see PME Windows services and IIS Application Pools.

For installations using Windows Integrated Authentication, the following additional accounts and permissions are required:

User Account	Role/Group/Permissions	Notes
Account used for Windows Integrated Authentication	- Needs to be a member of Administrators group - Needs 'Log on as a service' privilege on application server	- Manually created by the user. - Used by PME to access the SQL server databases.
Login used to access PME Engineering Client applications	Needs sysadmin server role for the PME databases.	This is not an additional user account. It is just an added requirement for the Logins used to access the Engineering Client applications (Vista, Designer, Management Console, Management Console tools). The PME databases are: ApplicationModules, ION_Data, ION_Network, ION_Systemlog.

User Account

Role/Group/Permissions

Notes

Account used for Windows Integrated Authentication

- Needs to be a member of Administrators group
- Needs 'Log on as a service' privilege on application server

- Manually created by the user.
- Used by PME to access the SQL server databases.

Needs sysadmin server role for the PME databases.

This is not an additional user account. It is just an added requirement for the Logins used to access the Engineering Client applications (Vista, Designer, Management Console, Management Console tools).

The PME databases are: ApplicationModules, ION_Data, ION_Network, ION_Systemlog.

NOTE: When PME is installed with Windows Integrated Authentication, the Windows account that is used to access the database is also used to run the PME services and the IIS Application Pools.