User Accounts

In order for Mobile Working to be installed and run within your environment, a number of accounts are needed to support the various services.

Service Account

The following service accounts need to be set up for the various Mobile Working services to run under.

All accounts must have passwords that do not expire, as an expired password will halt the application until fixed.

  • <Domain1>\<subdomain2>.app.pool: This is for the IIS Application Pools, so will need permission to run on each web server. This account just needs to be a basic user on the system(s).

  • <Domain>\<subdomain>.int: This needs to run the Integration Service on the Integration Server, and needs to be a local administrator on the Integration Server(s).

  • <Domain>\sql.service: This is to run the main SQL Service on the database server, as identified as a best practice by Microsoft. This user needs to be a normal user on the database server.

  • <Domain>\sql.agt.service: This is to run the main SQL Agent Service on the database server, as identified as a best practice by Microsoft. This user needs to be a normal user on the database server.

  • <Domain>\sql.rs.service: This is to run the main SQL Reporting Services Service on the database server, as identified as a best practice by Microsoft. This user needs to be a normal user on the database server.

User Accounts

These accounts will be used by the installation and support engineers to administer and maintain the system:

  • <Domain>\tm.support: This account is used by Totalmobile Support when connecting to servers to carry out any support and maintenance. It is typically created at the domain level with local admin access to any dedicated Totalmobile solution servers, such as the web and database servers. The account can only be enabled upon request by following your chosen security procedure when any support activity is required, and it can be left disabled for the majority of the time when not in use.

  • <Domain>\blueprism.user: If BluePrism is to be installed as part of the solution, a specific BluePrism user will need to be set up. This is used to log in to the Application Server and also into the robots. Therefore it needs to be a Local Administrator on both types of machine.

Domain - Active Directory Domain the servers are joined to.

Subdomain - Typically the name of installation, defaulting to a nominated identifier, for example “acmecorp”. In some cases the subdomain can be used to differentiate one installation of the solution from another, for example different parts of the same organization.

SQL Server Accounts

These accounts are set up by the installation team for the application to access the database services.

  • Taskmobileuser: This is used for the Totalmobile services to access the database services from various sources. These are assigned specific roles by the installation team.

  • Mendeluser: This is used for the Mendel services within Mobile Working to access the appropriate databases. This is the only setup of the Mendel services within the installation.

As a portion of the installation needs a SQL level SA account, Totalmobile may set up an Sa_totalmobile SQL account if the core SA account cannot be used.