Security

Service Account

The “Rensen UA Office Link Core” service and Connector services are installed as Windows services running under the “Local Service” account, a built-in Windows account with low privileges. You can change the account for each of the services to a different user account if preferred. For example, you may want to change the account for the ODBC Connector service to a certain user account for the use of Integrated Security with your database server.

When changing service accounts then additional folder permissions need to be granted for the UA Office Link root data folder and specific sub folders. The root data folder is located at:

C:\ProgramData\Rensen\UA Office Link

Important

Software updates may reset service accounts to “Local Service” and may reset some folder permissions. Remember to re-apply service account settings and review folder permissions after installing service updates.

Core Service

For the “Rensen UA Office Link Core” service, the following folder permissions need to be granted for the user account that the service runs as.

  • C:\ProgramData\Rensen\UA Office Link

    Full Access permissions.

  • C:\ProgramData\Rensen\UA Office Link\core\uac

    Full Access permissions.

Connector Services

User accounts for Connector services may be configured with the same permissions as the Core service or may have the following more restrictive permissions configured:

  • C:\ProgramData\Rensen\UA Office Link

    Read Access.

  • C:\ProgramData\Rensen\UA Office Link\core\uac

    Read Access.

  • C:\ProgramData\Rensen\UA Office Link\core\services

    Full Access permissions.

  • C:\ProgramData\Rensen\UA Office Link\modules\<CONNECTOR>

    Full Access permissions. <CONNECTOR> refers to the name of the respective Connector sub-folder, for example “ODBC Connector” or “OPC UA Connector”.

Note

Please check the specific Connector documentation for a “Security” section defining additional required folder permissions of the respective connector service.