Grant appropriate user rights to the domain user on all InfoPrint Manager Windows servers when using a different user than ipm1

To make sure that the Windows InfoPrint Manager servers can run as a Windows service using the domain userid at your choice you must make sure that this userid has the proper level of authority on each Windows InfoPrint Manager server system. This userid should be included in the Administrators group.
  1. Log on to one of the preferred systems as a user who is a member of the Domain Administrators group.
  2. Click the Windows Start button and select Settings → Control Panel.
  3. In the Control Panel window, double-click Administrative Tools.
  4. In the Administrative Tools window, double-click Local Security Policy.
  5. In the right pane of the Local Security Settings Window, double-click Local policies.
  6. Double-click User Rights Assignment in the right pane.
  7. In the list of user rights, select Act as part of the operating system and double-click it.
  8. In the Local Security Policy Setting dialog, click Add.
  9. In the Select Users or Groups dialog, click the arrow on the drop-down list box and select the domain that your InfoPrint Manager servers exist in.
    Find and select the domain user you created, and click Add.
  10. Click OK in the Select Users or Groups dialog.
  11. Click OK in the Local Security Policy Setting dialog.
  12. Repeat from step 7 for two other user rights: Create permanent shared objects and Log on as a service.

For a working interoperability, you need to perform these steps as root:

  1. Add a disabled AIX user using the same name as the user running IPM on the Windows server.
  2. Add a Samba user for the user created above.

    For example:

    smbpasswd -a <above_user>

  3. Edit the Samba configuration file, smb.conf. For each available share (default_cell and/or ipdata) add the above Samba user to the list of valid users:
    valid users = ipm1 windows_user_1 windows_user_2 windows_user_3 ...