Hi guys
I got this error when i start to load the page. I've set the permission in the databse, k2server and IIS. i have try many ways to solve it but still cannot. Does anyone have any idea what error is this about?
NT AUTHORITYNETWORK SERVICE does not have permissions to start the process
-Linda-
Page 1 / 1
Are your IIS, K2 and database servers on different machines or on the same machine?
Hi,
This may be caused by a credentials delegation problem. How is your K2 environment configured?
Our environment consists a number of separate machines - SQL, K2, SPS and Meridio.
We've found that in this type of environment correct configuration of Kerberos and credentials delegation is essential. The set-up process is relatively simple:
Ensure that the K2 Service is configured to run as a domain user.
Ensure that the K2 Service Account is flagged as "Trusted for delegation" in AD
Ensure the the K2 Computer account is also flagged as "Trusted for delegation" in AD
Ensure that the K2 Service Account has the following Service Principle Names:
http/[K2Server]
http/[K2Server].[Domain]
K2Server2003/K2[K2Server]
K2Server2003/K2[K2Server].[Domain]
NOTE: K2Server must be replaced with the name of your K2 Server
NOTE: Domain must be replaced with the name of your domain
NOTE: The K2Server2003 entries can be added by using the "Add to AD" button in the K2 Service Manager.
The K2 Service account should also be granted the "logon as a service" privilege.
You may also need to define user accounts for your application pool identities and configure these to use the accounts rather the the network service accont. These accounts should be made members of the IIS_WPG group and may need to the granted the "log on as a batch job" privilege.
It's worth doing a search for Kerberos and/or delegation as there have been a few posts about this. If you have an account for the K2 portal (http://portal.k2workflow.com), it may be worth having a look at the knowledge base http://kb.k2workflow.com
Regards,
Dave.
This may be caused by a credentials delegation problem. How is your K2 environment configured?
Our environment consists a number of separate machines - SQL, K2, SPS and Meridio.
We've found that in this type of environment correct configuration of Kerberos and credentials delegation is essential. The set-up process is relatively simple:
Ensure that the K2 Service is configured to run as a domain user.
Ensure that the K2 Service Account is flagged as "Trusted for delegation" in AD
Ensure the the K2 Computer account is also flagged as "Trusted for delegation" in AD
Ensure that the K2 Service Account has the following Service Principle Names:
http/[K2Server]
http/[K2Server].[Domain]
K2Server2003/K2[K2Server]
K2Server2003/K2[K2Server].[Domain]
NOTE: K2Server must be replaced with the name of your K2 Server
NOTE: Domain must be replaced with the name of your domain
NOTE: The K2Server2003 entries can be added by using the "Add to AD" button in the K2 Service Manager.
The K2 Service account should also be granted the "logon as a service" privilege.
You may also need to define user accounts for your application pool identities and configure these to use the accounts rather the the network service accont. These accounts should be made members of the IIS_WPG group and may need to the granted the "log on as a batch job" privilege.
It's worth doing a search for Kerberos and/or delegation as there have been a few posts about this. If you have an account for the K2 portal (http://portal.k2workflow.com), it may be worth having a look at the knowledge base http://kb.k2workflow.com
Regards,
Dave.
Reply
View our Community Site Map
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.