Granting appropriate user rights to the domain user on all InfoPrint Manager Windows servers when using a different user than ipm1

To make sure that the Windows InfoPrint Manager servers can run as a Windows service using the domain userid at your choice, you must make sure that this userid has the proper level of authority on each Windows InfoPrint Manager server system. This userid should be included in the Administrators group.
  1. Log on to one of the preferred systems as a user who is a member of the Domain Administrators group.
  2. Click the Windows Start button and select Settings → Control Panel.
  3. In the Control Panel window, double-click the Administrative Tools icon.
  4. In the Administrative Tools window, double-click the Local Security Policy icon.
  5. In the right pane of the Local Security Settings Window, double-click Local policies.
  6. Double-click User Rights Assignment in the right pane.
  7. In the list of user rights, select Act as part of the operating system and double-click it.
  8. In the Local Security Policy Setting dialog, click Add.
  9. In the Select Users or Groups dialog, click the arrow on the drop-down list box and select the domain that your InfoPrint Manager servers exist in.
    Find and select the domain user you created, and click Add.
  10. Click OK in the Select Users or Groups dialog.
  11. Click OK in the Local Security Policy Setting dialog.
  12. Repeat from step 7 for two other user rights: Create permanent shared objects and Log on as a service.

For working interoperability, follow these steps as root:

  1. Add a disabled AIX user using the same name as the user running InfoPrint Manager on the Windows server.
  2. Add a Samba user for the user created above.

    For example: 

    smbpasswd -a <above_user>

  3. Create the default_cell Samba share by running this command: 

    /usr/lpp/pd/install/fstconn.sh -n /var/pddir/default_cell

  4. Edit the Samba configuration file, smb.conf. For each available share (default_cell and/or ipdata) add the above Samba user to the list of valid users: 

    valid users = ipm1 windows_user_1 windows_user_2 windows_user_3 ...

Parent topic: Configuring a primary AIX server with a secondary Windows server