SQL authentication - switching to Windows authen. mode

May 6, 2019 at 7:00 AM

Dear Snow Community! One of our client is using Windows authentication mode to access SQL Server databases. Due to security reasons, using SQL authentication or Mixed authentication mode is not allowed. During the SNOW installation, SQL Server was switched to mixed mode and sa account was enabled for us. System was successfully installed and it's up and running for few weeks now without any issues. Currently I'm trying to figure it out how to switch SQL account LicenseManagerUser to service account provided by Customer. Is there any guideline that I can use? Did anyone successfully switch to Windows authentication mode? Service account created by Customer has the same rights in SQL Server as LicenseManagerUser. I understand that I have to start by changing User name and Password in Web Configurator. When I provide service account name and password, hitting Test connection button gives me a message that connection was successful. The next step is to change settings in IIS (Applicactions pool -> SnowLicenseManager->Advanced Settings->Identity) and run snow services with service account instead of using local system account. Setting Identity in IIS is not a big problem, however when I'm trying to run services with the new service account, SLM portal stops working and some services are showing errors in logs. My questions is - do I need to change all services or just only particular ones? Is there anything else I need to do in the system to make it work e.g. giving permissions to service account to listen on some ports? I would appreciate your support. ALL components are running in the latest versions. Thanks, Dominik

Community Manager (Flexera Software)
7 years ago
Hi Dominik, there is a user guide that is named differently, but covers your goal: User Guide: How to move databases There are two connections to the database: Snow Inventory Server, configured in C:\Program Files\Snow Software\Snow Inventory\Server\snowserverconfig.exe You can set a windows user or native SQL user here. Snow License Manager, configured in C:\Program Files\Snow Software\Snow License Manager\Tools\WebConfigurator\WebConfigurator.exe Please note that you need a native SQL user account for Snow License Manager! If you have any further questions, please let us know. /marcel Customer Success Manager Did someone answer your question? Make sure to mark it as answered! Welcome to Snow! Discover more here:
Expand Post
- dpodgorski001
  7 years ago
  Thanks Marcel for your reply. I checked the guide but unfortunately I couldn't find any information what needs to be done when you want to use Windows Authentication mode to access SQL Server. Please see screenshot below: The message says that I need to change manually user account in application pool in IIS and service account used for Snow License Manager services. I have no idea which services I have to run with the new service account and if there is anything else to be configured in the system to make it work. More and more clients are switching off SQL authentication due to security reasons and most applications are using windows authentication mode to connect a application with the database. I would appreciate your help. I think partners will have to deal with similar case more often in the future. Thanks, Dominik
  Expand Post

Related Product Forums